, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc00, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x70150000, 0x0, 0x0, 0x0, 0x0}) 05:05:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x800454d2, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfa0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x70850000, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80086301, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x736b0000, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80108906, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x75670000, 0x0, 0x0, 0x0, 0x0}) 05:05:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80108907, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0}) 05:05:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfa0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x77f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80dc5521, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0}) 05:05:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x78f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0045878, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0}) 05:05:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x79480000, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0045878, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x79d10000, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x79f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1400, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc020660b, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3e, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7a060000, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x300, 0x0, 0x0, 0x0, 0x0}) 05:05:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7af00000, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x500, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7b3e0000, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="02003a1e2410"}) 05:05:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7bf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x600, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="03003a1e2410"}) 05:05:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x700, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7c230000, 0x0, 0x0, 0x0, 0x0}) 05:05:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1400, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3e00, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="04003a1e2410"}) 05:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7c450000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:28 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0xff00, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="05003a1e2410"}) 05:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7cf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x157c, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7dc20000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="10003a1e2410"}) 05:05:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7df00000, 0x0, 0x0, 0x0, 0x0}) 05:05:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="25003a1e2410"}) 05:05:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f40, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x4000000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7ef00000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="18013a1e2410"}) 05:05:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1f40, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x5000000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x7ff00000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="00033a1e2410"}) 05:05:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x6000000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x80f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="24033a1e2410"}) 05:05:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x81000000, 0x0, 0x0, 0x0, 0x0}) 05:05:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="36033a1e2410"}) 05:05:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x81050000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x81f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="39033a1e2410"}) 05:05:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x3e000000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x82f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="db0f3a1e2410"}) 05:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x83f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="00ff3a1e2410"}) 05:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x84880000, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x84f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0xff000000, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="0104001e2410"}) 05:05:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x85f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="0100251e2410"}) 05:05:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x86f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01023a1e2410"}) 05:05:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) 05:05:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x87f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01033a1e2410"}) 05:05:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0}) 05:05:32 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x88f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0}) 05:05:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01043a1e2410"}) 05:05:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, 0x0}) 05:05:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01053a1e2410"}) 05:05:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x89f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01063a1e2410"}) 05:05:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8a850000, 0x0, 0x0, 0x0, 0x0}) 05:05:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x0, 0x0}) 05:05:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01073a1e2410"}) 05:05:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8aab0000, 0x0, 0x0, 0x0, 0x0}) 05:05:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x0, 0x0, 0x0}) 05:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01083a1e2410"}) 05:05:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8af00000, 0x0, 0x0, 0x0, 0x0}) 05:05:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0, 0x0}) 05:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01483a1e2410"}) 05:05:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x3e, 0x0, 0x0, 0x0}) 05:05:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8afb0000, 0x0, 0x0, 0x0, 0x0}) 05:05:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x300, 0x0, 0x0, 0x0}) 05:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="014c3a1e2410"}) 05:05:34 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8bf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x500, 0x0, 0x0, 0x0}) 05:05:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01603a1e2410"}) 05:05:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8cce0000, 0x0, 0x0, 0x0, 0x0}) 05:05:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x600, 0x0, 0x0, 0x0}) 05:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8cf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x700, 0x0, 0x0, 0x0}) 05:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01683a1e2410"}) 05:05:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0xf8f6, 0x0, 0x40, 0x9}, {0x401, 0x7, 0x7, 0x80000000}, {0x1, 0x80, 0x81, 0x1}, {0x6, 0x81, 0x7, 0x80000000}, {0x101, 0x8, 0x6, 0x7}, {0x7, 0x20, 0x1, 0x5}, {0x7, 0x7, 0x3, 0xffff}, {0xfe01, 0x9, 0x0, 0xffffd342}, {0x8, 0xea, 0x0, 0x4}, {0x0, 0x6, 0x20, 0x5}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0xf1f43000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x8c, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x8000, r4}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x9) 05:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8d640000, 0x0, 0x0, 0x0, 0x0}) 05:05:35 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x3e00, 0x0, 0x0, 0x0}) 05:05:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="016c3a1e2410"}) 05:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8df00000, 0x0, 0x0, 0x0, 0x0}) 05:05:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) 05:05:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0xff00, 0x0, 0x0, 0x0}) 05:05:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8ef00000, 0x0, 0x0, 0x0, 0x0}) 05:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01743a1e2410"}) 05:05:36 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x200, 0x0, 0x0}) 05:05:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0}) 05:05:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8f140000, 0x0, 0x0, 0x0, 0x0}) 05:05:36 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20001, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100, 0x2b0600) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000200)={0x101, "728d7865cb55c567d0675f6f4566db27a75274f7c39e449ffefef6f8110b9b75", 0x5, 0x2, 0x2, 0xfffffffd, 0x1e, 0x4, 0x1, 0xaf}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 05:05:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0}) 05:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="017a3a1e2410"}) 05:05:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8ff00000, 0x0, 0x0, 0x0, 0x0}) 05:05:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x90f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x3000000, 0x0, 0x0, 0x0}) 05:05:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01005c1e2410"}) 05:05:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x4000000, 0x0, 0x0, 0x0}) 05:05:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x91f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:37 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000240)=0x59c4) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0xffffff7f, 0xc, 0x4, 0x0, 0x8b0, {0x0, 0x7530}, {0x7, 0x0, 0xf1, 0x0, 0x1f, 0x80, "adb507e3"}, 0x6, 0x3, @fd=r1, 0x8, 0x0, r2}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x28, r7, 0xe48e1e879b3e185d, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0xffffffffffffffff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040043}, 0x4800) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x801ffc, 0x1f0, 0x0}) 05:05:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x5000000, 0x0, 0x0, 0x0}) 05:05:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01005d1e2410"}) 05:05:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x92f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:37 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x17, 0x0, 0x0}) 05:05:37 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa709, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa509, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x6000000, 0x0, 0x0, 0x0}) 05:05:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x93f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="0100ff1e2410"}) 05:05:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @time={0x0, 0x1ff}, {0x0, 0xc0}, {0x0, 0x78}, @time=@time={0x1000, 0x7}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result={0xe1c0}}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = socket(0x800000000010, 0x803, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) write$sndseq(r3, &(0x7f0000000100)=[{0xd, 0x2, 0xbd, 0x7f, @time={0x8000, 0x656}, {0x8, 0x81}, {0x3}, @connect={{0x7, 0x1}, {0x1f, 0x3f}}}], 0x1c) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) fsmount(r4, 0x1, 0x72) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0xffffffff, @local, 0x56}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [], @local}, 0x5}, @in6={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9f}, @in={0x2, 0x4e23, @rand_addr=0x800}], 0x64) lseek(r4, 0x19, 0x3) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r6, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r6, 0x1a, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x800}, &(0x7f00000000c0)=0x8) [ 2874.068909][ T26] audit: type=1804 audit(1579410338.051:183): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir440392566/syzkaller.ohTLqy/2930/file0" dev="sda1" ino=16901 res=1 05:05:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 05:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="0100251e2410"}) [ 2874.152061][ T26] audit: type=1804 audit(1579410338.131:184): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir440392566/syzkaller.ohTLqy/2930/file0" dev="sda1" ino=16901 res=1 05:05:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x94f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 05:05:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x8000000, 0x0, 0x0, 0x0}) 05:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01005c1e2410"}) 05:05:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000b, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x95090000, 0x0, 0x0, 0x0, 0x0}) 05:05:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) fcntl$notify(r0, 0x402, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001006c6574680000005c9d964438abba4943f6513400180002000000010000f00000146b08eaa8dd43ff0c48718ee6cc8edbdca4d3967e4055d970445b8a4e6a0515fbcfdf913fb08d86646ac2e73334306c93867efc6dec9505be77671a17caf4", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000812400070500000002000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48fa90002400070500000b000000007659cc0400", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000000)={@loopback, 0x55, r6}) 05:05:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x3e000000, 0x0, 0x0, 0x0}) 05:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01005d1e2410"}) 05:05:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000b, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 05:05:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x95430000, 0x0, 0x0, 0x0, 0x0}) [ 2874.889977][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:05:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a252410"}) 05:05:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0xff000000, 0x0, 0x0, 0x0}) [ 2875.029468][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:05:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x95f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x80000, 0x4052, 0x0}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000100)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x308, 0x308, 0x308, 0x308, 0x308, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bridge_slave_1\x00', {0x0, 0x8b00, 0x0, 0x0, 0x0, 0x5, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dae7bbe9998a260a8f00a30e54d356de8911e05d607ed2184b8a7d2f9d2e"}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x400) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)={0x3, 0x5, 0x1, 0x4, 0x5, [{0x3, 0x8000, 0x3f, [], 0x2803}, {0x4f8a, 0x8, 0x42ea, [], 0x980}, {0x8, 0x80, 0x0, [], 0x100}, {0x2, 0x9, 0x3, [], 0x602}, {0x7, 0x1f, 0x1, [], 0x1100}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x8000201a}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4000, 0x0) [ 2875.326386][T10727] No such timeout policy "syz0" [ 2875.368966][T10728] No such timeout policy "syz0" 05:05:39 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2510"}) 05:05:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}) 05:05:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x96f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x324402) accept4$alg(r2, 0x0, 0x0, 0x800) 05:05:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x97f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e240a"}) 05:05:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2, 0x0, 0x0}) 05:05:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x98f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:40 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r0, 0x0, 0x0, 0x1000f4) recvfrom$unix(r0, &(0x7f0000000080)=""/232, 0xe8, 0x10020, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2425"}) 05:05:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x0, 0x0}) 05:05:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x98fe0000, 0x0, 0x0, 0x0, 0x0}) 05:05:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x996b0000, 0x0, 0x0, 0x0, 0x0}) 05:05:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e242f"}) 05:05:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4, 0x0, 0x0}) 05:05:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x2) r1 = open(&(0x7f0000000080)='./file0\x00', 0x420000, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000004", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ffdbdf250300000008000200020000000800010003000000080001000100000008000200020000000800020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x4044000) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x99f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e245d"}) 05:05:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5, 0x0, 0x0}) 05:05:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9af00000, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e24b3"}) 05:05:41 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6, 0x0, 0x0}) 05:05:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9bf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) io_setup(0x8, &(0x7f0000000000)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000001c0)=0xfffffffffffff819) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0xc0000, 0x0) getsockname$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) 05:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2424"}) 05:05:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x7, 0x0, 0x0}) 05:05:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9cf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xd9b38a9a01925893, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x8, 0x0, 0x0}) 05:05:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x7, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4802, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r1, 0x9, 0x1}, 0x10) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @raw32={[0x1000, 0xffffffc1, 0xfffffff8]}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0xa054}}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x8057, 0x2}) 05:05:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9d650000, 0x0, 0x0, 0x0, 0x0}) 05:05:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3e, 0x0, 0x0}) 05:05:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) kexec_load(0x100000001, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="bd54921d7464f09d4ed72108d2e3761cb3187a813798ae", 0x17, 0x0, 0x7}], 0x150000) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9df00000, 0x0, 0x0, 0x0, 0x0}) 05:05:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x28, r3, 0xe48e1e879b3e185d, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) setsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, &(0x7f00000002c0)=0x8000, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001100090500000000000080001d6b5cd1", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14, 0x80000) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000828bd7000fcdbdf251800000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00ffffffffffff00000a00060000000000000000000a001a000180c20000010000080001000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="de110b562a1c0ad7377b9fe778b8621a770d9d1bc60960c7b55120704e4f49df911cc15f12ad165d654bf06a6e83b5ea54555dd41a345e7b0f48cce49f2602e24b9aa9a56d9aa84453e2158ca39b648972c85a92827b82c652383a365687c9dca50873b0a31f3e20a151f415998e316fd079cfd4d6c766b1c8bae41b2ca177eb52bdc1e4a56e7d475f2af2d7ab6da4c1f12c571e21a27da8121f25f754e3487fd35ef34ae620fbf2ef5d28500f22ff375056df5011bd2261d613f2cc440a1524a38d0a0bce0f2e2c5d668cec"], 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) close(r0) socket$kcm(0xa, 0x2, 0x0) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r11, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r11, 0x0, 0x0, 0x1000f4) r12 = accept$nfc_llcp(r11, &(0x7f0000000440), &(0x7f00000004c0)=0x60) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r13 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r13, 0x4, 0x6100) write$cgroup_type(r13, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000300)={'veth0_to_bridge\x00'}) 05:05:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x300, 0x0, 0x0}) 05:05:42 executing program 1: r0 = semget$private(0x0, 0x1, 0x400) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f00000000c0)=0xfffffffe) r1 = semget(0x3, 0x4, 0x1) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000080)=""/107) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2878.760660][T12507] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 05:05:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9ef00000, 0x0, 0x0, 0x0, 0x0}) 05:05:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x401, 0x2, 0x8}, 0xfffffffb, 0x2000001f}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ff, 0xfffffffd}, {}, {0x8, 0x14}, @time=@time}], 0x70) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$P9_RREADDIR(r4, &(0x7f00000003c0)={0xa2, 0x29, 0x1, {0x200, [{{0x80, 0x1, 0x2}, 0x8001, 0x1, 0x5, './bus'}, {{0x40, 0x4, 0x3}, 0x401, 0x28, 0x5, './bus'}, {{0x1, 0x4, 0x3}, 0x8, 0x20, 0xb, './bus/file0'}, {{0xad, 0x2, 0x7}, 0x1, 0x52, 0x5, './bus'}, {{0x20, 0x1, 0x8}, 0x4, 0x0, 0x5, './bus'}]}}, 0xa2) fallocate(r3, 0x0, 0x0, 0x1000f4) write$P9_RLCREATE(r2, &(0x7f0000000480)={0x18, 0xf, 0x1, {{0x0, 0x0, 0x2}, 0x7fff}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000380)={0x2, 0xfffffffd, 0x2}) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result={0x0, 0x701f0af}}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x141, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x5, [@bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0xae, 0x2, 0xffff}, {0x5, 0x1, 0x0, 0x5}, {0xf000, 0x6, 0x9d, 0x81}, {0xffff, 0xc8, 0xc9}]}) 05:05:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x9ff00000, 0x0, 0x0, 0x0, 0x0}) 05:05:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x500, 0x0, 0x0}) 05:05:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:43 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @time={0xbc1e, 0x3}, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @tick=0xfffff800, {0x0, 0x1f}, {0x0, 0xfa}, @result={0xffdffffd}}, {0x6, 0xfd, 0x6, 0x0, @time, {0x0, 0xde}, {0x0, 0x61}, @result={0x3, 0xffffffff}}, {0x20, 0x0, 0x0, 0x0, @time={0x7ff, 0xfffffffa}, {0x40}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r0, 0x0, 0x0, 0x1000f4) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa0d90000, 0x0, 0x0, 0x0, 0x0}) 05:05:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x600, 0x0, 0x0}) 05:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x0) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vcan0\x00', @random}) 05:05:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa0f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x700, 0x0, 0x0}) 05:05:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x50c81, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'vlan0\x00', @remote}) 05:05:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x80000, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 05:05:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3e00, 0x0, 0x0}) 05:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa1c50000, 0x0, 0x0, 0x0, 0x0}) 05:05:44 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x202002, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xff00, 0x0, 0x0}) 05:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa1f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0}) 05:05:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000002440)={0x5, &(0x7f0000000040)=""/98, &(0x7f00000023c0)=[{0x1f, 0x1000, 0x3ff, &(0x7f00000000c0)=""/4096}, {0xffffffff, 0xc7, 0x4, &(0x7f00000010c0)=""/199}, {0x0, 0xcf, 0x100, &(0x7f00000011c0)=""/207}, {0x20, 0xd2, 0x6, &(0x7f00000012c0)=""/210}, {0x8, 0x1000, 0x0, &(0x7f00000013c0)=""/4096}]}) socket$kcm(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa2bd0000, 0x0, 0x0, 0x0, 0x0}) 05:05:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xa000, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x28, r4, 0xe48e1e879b3e185d, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000000000000000", 0x58}], 0x1) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x5) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x8001, 0x1, r0, 0x0, &(0x7f0000000080)={0x9909ce, 0xffffffff, [], @value=0x3f}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000100)={0xa4b4, 0x1, 'client0\x00', 0x4, "ca11cd4475d262ac", "92166155dcc2562ed8ca30cd9fa09042e0afd12c091d288d1cea8099c1bfd6e8", 0x5, 0x3ff}) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r9, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @time={0x7b53, 0x43}, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r9, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000380)={0xffffffda, 0x7, 0x4, 0x2000000, 0x7, {0x0, 0x7530}, {0x5, 0x0, 0x3, 0x7, 0x5, 0x81, "45816a12"}, 0x2, 0x0, @planes=&(0x7f00000002c0)={0x6, 0x4000000, @mem_offset=0x6, 0xc0f1}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000400)={0x0, r10, 0x1000, 0xeb, 0x1, 0x2}) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r11, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r11, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000440)={0x7, 0xb29b, 0x0, 'queue0\x00', 0x5}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x162011, r1, 0xc25d5000) 05:05:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa2da0000, 0x0, 0x0, 0x0, 0x0}) 05:05:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0}) 05:05:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa2f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x4002, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000380)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) close(r3) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x70) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000400)=0x2000) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x8014) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ubi_ctrl\x00', 0x309003, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r8, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r8, 0x0, 0xfd, 0x1000ef) r9 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x161040, 0xe9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f00000003c0)=0xffff, 0x4) ioctl$VIDIOC_EXPBUF(r8, 0xc0405610, &(0x7f0000000280)={0xc, 0x8, 0xfffffff9, 0x0, r4}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x4) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r10, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r10, 0x0, 0x0, 0x1000f4) r11 = perf_event_open$cgroup(&(0x7f00000004c0)={0x5, 0x70, 0x9, 0x7, 0x5, 0x7, 0x0, 0x9, 0x3, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, @perf_bp={&(0x7f0000000480), 0x7}, 0x14282, 0xffff, 0xd54, 0x5, 0xfffffffffffffffe, 0xfffffc00, 0x16b7}, r10, 0x5, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r11) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) io_uring_setup(0xedf, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x21d}) 05:05:45 executing program 1: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x800002, 0x12, r0, 0xffffa000) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4}}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$KDFONTOP_GET(r2, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000000c0)={&(0x7f000000d000/0x2000)=nil, 0x2000}) 05:05:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3000000, 0x0, 0x0}) 05:05:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0}) [ 2881.693073][ T26] audit: type=1804 audit(1579410345.671:185): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir842316451/syzkaller.Lt9hL4/3692/bus" dev="sda1" ino=16876 res=1 05:05:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x270282, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = socket(0x800000000010, 0x803, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) fsmount(r5, 0x1, 0x72) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r5, 0x3, 0x0, 0x8020003) lseek(r5, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={r6, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r6, 0x1a, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r6, 0x268, 0x3}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r7, 0x4c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x5}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x1ff}]}, &(0x7f00000001c0)=0x10) fchdir(r1) [ 2881.791541][ T26] audit: type=1804 audit(1579410345.711:186): pid=13820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir842316451/syzkaller.Lt9hL4/3692/bus" dev="sda1" ino=16876 res=1 05:05:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa3f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x5000000, 0x0, 0x0}) 05:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101200, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r1, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='\x12*\x00'}, 0x30) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa4f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x6000000, 0x0, 0x0}) 05:05:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa5790000, 0x0, 0x0, 0x0, 0x0}) 05:05:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x8, 0x1, 0x4, 0x400, 0x401, {}, {0x5, 0x0, 0x0, 0x8, 0x20, 0x3, "26060ac9"}, 0x7, 0x3, @fd=r1, 0x100, 0x0, 0xffffffffffffffff}) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000000)) 05:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) syz_open_pts(r3, 0x2) 05:05:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa5b60000, 0x0, 0x0, 0x0, 0x0}) 05:05:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x7000000, 0x0, 0x0}) 05:05:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2d000, 0x0) close(r0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0x8000, 0x4, 0x4, 0x80000, 0x7f, {0x77359400}, {0x3, 0x2, 0x1, 0x1, 0x1, 0x7f, "672ffe0e"}, 0xaa0, 0x3, @fd=r3, 0x3f}) write$binfmt_aout(r4, &(0x7f0000000180)={{0xcc, 0x4, 0x0, 0x207, 0x2e4, 0x295f, 0x1a3, 0x9}, "be1945249537e87099566f362246acb5f5e2a886353d4c7b6b64745c9ece30a330c02dfde3b3370546567426bf41cce2a58c8d2c6bbe8bee89604a4a049df3eec7079481f62b536fc16b5ee7200b8ce0b6a0e43f7db29605414e68282bf8928288a4258b14167f182a7c50ad83cf57b1d85832c54dbe8fee85c1f3fc", [[], [], []]}, 0x39c) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/126) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa5f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0}) 05:05:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000000)={0xa, 0x4}, 0xc) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) getsockopt$inet6_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000300)=""/4096, &(0x7f0000000080)=0x1000) 05:05:47 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa61b0000, 0x0, 0x0, 0x0, 0x0}) 05:05:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3e000000, 0x0, 0x0}) 05:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="92000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="5851bb39f9856c1703518612686c1a98f861404329f5aa13c00798e6adc4b7495ceb054f4522c771993592126e1bb743541abf50c58930643791beb886b0525adc07c6d06b4de01f3ce79221baeea4684ac5cb7e898d9ed538b50e005945f16ad7ff5e91eb271a99658f29bc217d421c142b5358a102ea802f5b331d6fc6219d3b6f7d0356ba17fa4ebc504bd759653d004bb8128cd487b174b51a93544a7e95602c881a491bdbf20856808575873d77298499797b0ae376bfec5c2c9707b3a9fbed8c8968335ad2"], @ANYBLOB="010026bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d00020000000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464707673696d0000000f0002006e657466657673696d30000008000300030000000e0001006e657464657673696d24c0f5570002006e657464657673696d3000000800030003000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x20004021) 05:05:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000b, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x800) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0}) 05:05:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa6a90000, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa6f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xff000000, 0x0, 0x0}) 05:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 05:05:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0}) 05:05:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa7f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0xa, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:48 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 05:05:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa8f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x990000, 0x7, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980920, 0x6, [], @p_u32=&(0x7f0000000040)=0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x80000000, '\x00', 0x7fff}) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008890) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xa9f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01005d1e2410"}) 05:05:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0}) 05:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$rose(r1, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @null}, 0x1c) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xaa600000, 0x0, 0x0, 0x0, 0x0}) 05:05:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x7000000, 0x0, 0x0, 0x0}) 05:05:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:49 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) 05:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) close(r0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'bridge_slave_0\x00', {0x4}, 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xaaf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:49 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0xa, &(0x7f0000000080)=[{0xf8f6, 0x0, 0x40, 0x9}, {0x401, 0x7, 0x7, 0x80000000}, {0x1, 0x80, 0x81, 0x1}, {0x6, 0x81, 0x7, 0x80000000}, {0x101, 0x8, 0x6, 0x7}, {0x7, 0x20, 0x1, 0x5}, {0x7, 0x7, 0x3, 0xffff}, {0xfe01, 0x9, 0x0, 0xffffd342}, {0x8, 0xea, 0x0, 0x4}, {0x0, 0x6, 0x20, 0x5}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x100000c, 0x4000010, 0xffffffffffffffff, 0xf1f43000) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x8c, 0x0, 0x1, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000180)={0x8000, r4}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x9) 05:05:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0}) 05:05:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xabf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0x9) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0}) 05:05:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xacf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:50 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) fchmod(r1, 0x42) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20041, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000000c0)='\x00', 0x0, r2) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000100)=0x8001, &(0x7f0000000140)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r4, 0x4b52, &(0x7f0000000000)={0x0, 0x2, [0x40]}) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000280)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x402100, 0x0) openat$cgroup(r5, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000001c0)=0x11, 0x4) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f00000002c0)=""/253, &(0x7f00000003c0)=0xfd) readahead(0xffffffffffffffff, 0x7fff, 0x40) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$kcm(0x2b, 0x1, 0x0) fremovexattr(r3, &(0x7f0000000440)=@random={'user.', 'erspan0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000240)={0x0, r8, 0x5, 0xffffffff, 0x57, 0x4}) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0x8) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x111900, 0x0) accept$alg(r9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'veth1_to_bridge\x00', @random="0200"}) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'erspan0\x00'}}, 0x1e) 05:05:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xad850000, 0x0, 0x0, 0x0, 0x0}) 05:05:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0}) 05:05:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) 05:05:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xadf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0}) 05:05:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xae470000, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x100}) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0}) 05:05:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xaef00000, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000200, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb000200, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3e, 0x0}) 05:05:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000780)={0x400, 0x1, 0x4, 0x2, 0x5, {}, {0x1, 0x1, 0xe6, 0x1, 0x80, 0x2, "b65e7a95"}, 0x5, 0x3, @fd, 0x7, 0x0, r1}) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0xe) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) fanotify_init(0x1, 0x80000) 05:05:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xaff00000, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb0010000, 0x0, 0x0, 0x0, 0x0}) 05:05:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x300, 0x0}) 05:05:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) io_setup(0x4247, &(0x7f0000000040)=0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xd553f8083c96fdfd) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, r3, &(0x7f0000000080)="5c18cc29374a512f71a7316bc380310b02d01a4cc825d4c3a5dce43654bb41ed8f728751b147b70a645ae62f500e8cfad813192a3e84c7269d4af38d101c563bb525f9a8b012e33560d261d6c6ce6c", 0x4f, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000000300)="0b5d511ccd49d0b5c78a9a737568667a17dfdb8e03523bc3db1e1085991d564d8a8590e3072eb1a93b47c87792e90d0bd3a0ae6ac5ae89377b9944aea7196767164f317767050a1b1392ad43c259232297d314f39b52a436a367c3aed300befd744564ecbfe914b363b02717666f8edb08fd13f5576ab20db9e60633e43610b23200d67d69a4d328412a7c17247dca33191815a0d8c259675d4af8ecb3", 0x9d, 0x655a0a6a, 0x0, 0x2}]) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000026c0)={'team0\x00'}) 05:05:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb0f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:52 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x500, 0x0}) 05:05:52 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:52 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb1f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x600, 0x0}) 05:05:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x700, 0x0}) 05:05:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb2f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb3f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3e00, 0x0}) 05:05:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x6, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000040)) 05:05:53 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb44c0000, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xff00, 0x0}) 05:05:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 05:05:53 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb4f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0}) 05:05:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, 0xa, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xe1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x98}}, 0x24000000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x10000004}) 05:05:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:54 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:05:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb5f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3000000, 0x0}) 05:05:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = fcntl$getown(r1, 0x9) move_pages(r2, 0x5, &(0x7f0000000040)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000080)=[0x3], &(0x7f00000000c0)=[0x0], 0x6) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 05:05:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0}) 05:05:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 05:05:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb6f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 05:05:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x90200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf186}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2b69328a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0xdadf47fdbbc2347) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x5000000, 0x0}) 05:05:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb7f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x6000000, 0x0}) 05:05:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'veth0_macvtap\x00', @random="18ca424f7fb4"}) 05:05:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x7000000, 0x0}) 05:05:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb8f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x40000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x3) close(r0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000001240)={{0x5, 0x4, 0x9, 0xb790, 'syz0\x00', 0x4}, 0x0, [0x1, 0x1, 0xea7b, 0x77, 0x91, 0x1000, 0x5, 0x2, 0x7f, 0x1ff, 0x3, 0x1f, 0x1, 0x7ff, 0x2, 0x9, 0x3ff, 0x8, 0xf5f, 0x81, 0x2, 0x400, 0x72a, 0x3, 0x56, 0x7, 0xfffffffffffff331, 0x6, 0x1f, 0x6, 0x9, 0x2, 0x7b2, 0x9, 0x3, 0x7, 0x1ff, 0x6, 0x40, 0x1f, 0x3f, 0x7, 0x7, 0x7509, 0x5b4bf009, 0x3, 0x1, 0x4, 0xdf4, 0xe6e4, 0x6, 0x0, 0xb92, 0xaa, 0x7, 0x1f, 0x7, 0x0, 0x2, 0x401, 0x0, 0x10001, 0x1, 0x7fffffff, 0x4, 0xfffffffffffffffe, 0x9, 0x3, 0x9, 0x6, 0x9d, 0x95, 0xfffffffffffffffc, 0x4, 0x8, 0x5, 0x2, 0x238168ec, 0x50, 0x1611, 0xa78, 0xffff, 0x2, 0x10001, 0x8001, 0x7944654b, 0xfffffffffffff801, 0x1, 0x4, 0x8, 0x8, 0x19, 0x8, 0x2, 0x7ff, 0x7, 0x40, 0x101, 0x101, 0x100, 0x5, 0x101, 0x9d9d00, 0x9, 0x8001, 0x5, 0x0, 0x4, 0x7, 0x5, 0x100000001, 0x7f, 0xffffffff, 0x5, 0xfff, 0x8, 0x80000000, 0x0, 0x6, 0x20, 0x6, 0x80000000, 0x800, 0x7fff, 0x20, 0x1, 0x2000]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r2, &(0x7f0000001200)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/113, 0x71}], 0x1, &(0x7f0000000200)=""/4096, 0x1000}, 0x40000000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0}) 05:05:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3e000000, 0x0}) 05:05:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xb9f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) recvfrom$x25(r1, &(0x7f0000000040)=""/185, 0xb9, 0x407156c46c3a4346, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) prctl$PR_SET_FPEMU(0xa, 0x2) 05:05:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) 05:05:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x13000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbaf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0}) 05:05:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) 05:05:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x323c1, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) 05:05:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xff000000, 0x0}) 05:05:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbbf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_macvtap\x00', 0x10) 05:05:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0}) 05:05:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbcf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x14000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x5) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000080)) 05:05:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000001000000000000020000000800090002000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24040801) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:05:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbd720000, 0x0, 0x0, 0x0, 0x0}) 05:05:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbdf00000, 0x0, 0x0, 0x0, 0x0}) 05:05:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2b, 0x1, 0x0) 05:05:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:57 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x705082, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x95, 0x2, 0x1, 0xffff, 0x2, 0x3, 0x3, 0x2e2, 0x38, 0x15c, 0xffffffff, 0x428d, 0x20, 0x1, 0x4, 0x9, 0x7c}, [{0x7, 0x3ff, 0x2, 0x7, 0x9, 0xfffffffc, 0x3, 0x4}], "43cb538036608c528570bcab97a6f878f8ecf797906b32b50be4bd4611cdec9e148c8419e1f554ad8c7246eb744429e77eab989d849c7ce990ba9a795b4064840feb17a7ada679ea8cb186cc9ad333fb5f47e45f44be4eb872813bd6751a10428d66c4948b0593153bc484bd710449b461b5f982f1ac8daed6805121cacf890c489d9a8020f6dfc73de11d0ae783cf6a6ab6ea3b634fbcb69ba847f4917ba2f017", [[], [], []]}, 0x3f9) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000480)={0x1, 0x0, 0xfffffffc, 0xd, 0x108, 0x0}) 05:05:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbef00000, 0x0, 0x0, 0x0, 0x0}) 05:05:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:05:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0xa4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000440)=""/81) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) close(r0) socket$kcm(0xa, 0x7, 0x0) r3 = socket$kcm(0x2b, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r4) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xf4, &(0x7f0000000300)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7, @local, 0x9f4}, @in6={0xa, 0x4e22, 0x2, @mcast2}, @in6={0xa, 0x4e24, 0xa342, @ipv4={[], [], @broadcast}}, @in6={0xa, 0x4e23, 0x1f0514d7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x3}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x1ff, @loopback, 0xffffffff}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e21, 0x6, @empty, 0x7ab5}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r6, 0x100}, 0x8) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={0x0, @ethernet={0x6, @broadcast}, @nl=@unspec, @ax25={0x3, @null, 0x4}, 0x101, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='macvlan0\x00', 0x0, 0x1, 0x4}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 05:05:58 executing program 3: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x70, 0x240040) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r0, 0x10, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/hci\x00') ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x40, 0x2, 0xc1, &(0x7f0000ffd000/0x1000)=nil, 0x3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r2, &(0x7f0000000200), 0x0, 0x0) 05:05:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:05:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x15000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xbff00000, 0x0, 0x0, 0x0, 0x0}) 05:05:58 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:05:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc0f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:58 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0, 0xffff, 0xfffd, 0x43e]}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r1, 0x10, 0xffffffffffffffff, 0x2) ioprio_set$pid(0x2, r1, 0x4) 05:05:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x2, 0x40000) recvfrom$ax25(r1, &(0x7f0000000080)=""/171, 0xab, 0x100, &(0x7f0000000140)={{0x3, @null, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc1e90000, 0x0, 0x0, 0x0, 0x0}) 05:05:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:05:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc1f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x81, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0xad}}, 0x18) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x0, 0x0) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-monitor\x00', 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0xa, 0x0, 0x5, 0x7, 0x210, r5, 0x6, [], r7, r8, 0x1, 0x3}, 0x3c) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x460481, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r10, 0x8040ae69, &(0x7f0000000300)={0x2, 0x8, 0x81, 0x6, 0x1ab6}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x81, @empty}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, r11}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @ipv4={[], [], @empty}, 0xd9}, {0xa, 0x4e22, 0x9, @mcast2, 0x2123}, r11, 0xffffffe0}}, 0x48) 05:05:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:05:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:05:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc2f00000, 0x0, 0x0, 0x0, 0x0}) 05:05:59 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x34d702, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1020}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = accept(r3, 0x0, &(0x7f0000000280)) sendto$l2tp(r5, &(0x7f0000000380)="a4d4d864555f3ffd847e9400a36e7cefa74ea3ba2ee6ca6df129ab6e64d3874e2a4bbeb18a9e7612652f2ac9e7ccd5fb42b2a0cf345966ab25ee067ba5fc2767c425ed7dfdd1bfac7100a35dcc0816fee15a9e39", 0x54, 0x4000000, &(0x7f00000002c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000440)={{0x3, 0x1, 0x7, 0x0, 0x5}}) write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) r7 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8000) fallocate(r7, 0x0, 0x200000000000, 0x9) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:05:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0xe, 0x1f, 0x56, 0x0}) 05:06:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x80000008, 0x4, 0x7, 0xc7, 0xfffffffffffffffe, 0x3, 0x2, 0x8, 0xfff}}, 0x43) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc3f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f0000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:00 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x690}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xa1fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c005}, 0x40000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x1f) ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) flistxattr(r0, &(0x7f0000000300)=""/151, 0x97) 05:06:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x20, 0x7, 0x4, 0x400000, 0x6, {}, {0x2, 0xc, 0x5, 0x3, 0xd5, 0x20, "93c58c99"}, 0xcae, 0x2, @userptr=0xfffffffffffffffb, 0x9, 0x0, r1}) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0xd, 0x3, 0x165, &(0x7f00000000c0)="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"}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc4be0000, 0x0, 0x0, 0x0, 0x0}) 05:06:00 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8400, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x129841) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create(0x5) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) [ 2896.960795][T21732] vhci_hcd: invalid port number 0 05:06:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc4f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:01 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000000)=0x61, 0x4) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:01 executing program 0: close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x121400, 0x0) write$midi(r0, &(0x7f0000000040)="d3674629abbef87754a802e878d0be887bf28fadce6be23f3f533e902507bbe2395a06ac116c7c67ff2d4242306822f7b49f13", 0x33) 05:06:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc5f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f0000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000500)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5aa5ea3e6dbc7fb1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa87}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140)) fallocate(r3, 0x0, 0x0, 0x1000f4) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6a1a029}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x13, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40081) 05:06:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc6f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x511143, 0x100) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) 05:06:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc7f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setflags(r0, 0x2, 0x1) 05:06:02 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @remote}) 05:06:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc8c90000, 0x0, 0x0, 0x0, 0x0}) 05:06:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000000)={0x1, 0x0, 0x4, 0xffffffff, 0x0, 0x0}) 05:06:02 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:02 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x64000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc8f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:02 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000, 0x400080) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="fe160b59304c"}) 05:06:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000080)={0x0, 0xfffe, [0x80, 0x0, 0x8]}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x100, 0x81}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) bind$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x0, 0x11000080) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="dfbc", 0x2) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)=0x7, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="952272d68f29a76454e7ad1bedaaa902d24e4ee89e41b8a2e123b8d0f3", 0x1d) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) write$cgroup_type(r7, &(0x7f0000000300)='threaded\x00', 0x9) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000001c0)={0x374, 0x6, 0x4, 0x4, 0x2, {r5, r6/1000+10000}, {0x3, 0x2, 0x5, 0x5, 0xd4, 0xd8, "29d50c42"}, 0xdfd, 0x4, @fd=r7, 0x72, 0x0, 0xffffffffffffffff}) accept$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000700)=@add_del={0x2, &(0x7f0000000680)='macvlan0\x00'}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c150000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xc9f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 05:06:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x44201, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000208010200000000000000000bfffffff300010073797a300000000006000240000400008cad44963a"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c021) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000180)={0x8, 'ip_vti0\x00', {'ipvlan0\x00'}, 0x2}) close(r0) socket$kcm(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x1d6b22fd, 0x100000000, 0x100000001, 0x5, 0x80000000, 0x4b4, 0x87}, &(0x7f0000000080)={0xffff, 0x1f, 0x0, 0x200, 0x5, 0x8000, 0x0, 0xffff}, &(0x7f00000000c0)={0xfffffffffffff801, 0x4, 0x101, 0x7, 0x7ff, 0x800, 0x2, 0x1000}, &(0x7f0000000140)={r3, r4+30000000}, &(0x7f00000001c0)={&(0x7f0000000200)={[0x1]}, 0x8}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 05:06:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r2, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7a, 0x5, 0xfe, 0x0, 0x3, 0x3, 0xa, 0x35f, 0x40, 0x20, 0xfff, 0x3, 0x38, 0x2, 0x100, 0xc6, 0x2}, [], "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"}, 0x1040) 05:06:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcaf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x24081, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x80}}, {@mode={'mode', 0x3d, 0x8000}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x3}}], [{@subj_user={'subj_user', 0x3d, '&ppp0%security'}}]}) 05:06:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 05:06:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x80f01, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c150000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcbf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a020000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x0, "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"}) 05:06:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'netpci0\x00', @random="012b2a161533"}) 05:06:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcc070000, 0x0, 0x0, 0x0, 0x0}) 05:06:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x0, "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"}) 05:06:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcc290000, 0x0, 0x0, 0x0, 0x0}) 05:06:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r4, 0x10, 0xffffffffffffffff, 0x2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x60900, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x4, 0x3, 0x101, 0x2, '\x00', 0x2}, 0x2, 0x0, 0xa6, r4, 0x5, 0x3f, 'syz1\x00', &(0x7f0000000200)=['trusted\x00', '\x00', '\x00', 'vlan0\x00', '\x00'], 0x11, [], [0xfff, 0x7ff, 0x3f, 0xfffd]}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) open(&(0x7f00000001c0)='./file0\x00', 0x280a80, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000040)="94cfaebe70", &(0x7f0000000080)=""/246, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x0, "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"}) 05:06:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xccf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @remote}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x480, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2000002) fallocate(r2, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x0, 0x8, 0x20}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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") fcntl$setstatus(r1, 0x4, 0x42000) openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6, 0x0, 0x8, 0x20}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x2000002) fallocate(r7, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8, 0x0, 0x8, 0x20}) 05:06:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a020000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:04 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c150000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:04 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f0000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcdf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xce400000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcef00000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101146) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @local}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f00000000c0)=""/108, &(0x7f0000000140)=0x6c) 05:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xcff00000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd0e80000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x82, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'macvtap0\x00', @remote}) 05:06:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f0000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd0f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x81, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time={0x0, 0xf15}, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xdf}, {0x6}, @result={0x2}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x0, 0x100}}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0x5f, &(0x7f0000000140)="15418d1f9dd215b337b33fbe4af6caf672f2de3864dc3397d0af22ca5305a162f72cc009de404b4fba60f69a238fdbb3d6d8e588db3ae5f6595a63d72d3c298e14cadeb087086a1591fb2a694e93aa00b8b7f67b55b4ab4bd41b6a8d456aab"}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r4, 0x10, 0xffffffffffffffff, 0x2) migrate_pages(r4, 0x7, &(0x7f0000000240)=0x7fffffff, &(0x7f0000000280)=0x7) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvram\x00', 0x40c100, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x2, 0x2, 0x9, 0x0, 0x0, 0x4, 0x2010, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xa1, 0x2, @perf_bp={&(0x7f00000002c0), 0xc}, 0x20400, 0xfffffffffffffffd, 0xfffffffa, 0x2, 0x4, 0x8000, 0xfffe}, 0x0, 0xd, r5, 0x1) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000200)=""/3) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000040)="89405a90454703add8f13570d3a8fa8dfcd597662bfc0f5a79f8cb0bf0b2b4a2d9e2fa7c5b2871e5e33ddf7f025cfa95652dbf108f52b1d4c5bec70535cfda2e34ab5596533eb594224b7ea89393e0b3ac5410233b15ec8296d90076470cb4272090526d59b0663a5275e68033e7cc74976cb17ea7bfd7e5dd301ee7afd4a67d457e15bf3e389c8a7d1fe2473da89cfd9c5964172bbfd1aaed8acbc021f4d39fee71d31100185e2c00c0c1238d2453774617fd300c8a06") socket$kcm(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:05 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa5090000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd1020000, 0x0, 0x0, 0x0, 0x0}) 05:06:05 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20a80, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd1f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd1fa0000, 0x0, 0x0, 0x0, 0x0}) 05:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd2f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:06 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r3, &(0x7f0000000080)=0x8001, 0x4) fallocate(r1, 0x0, 0x0, 0x1000f4) io_uring_enter(r1, 0x8, 0x3929, 0x3, &(0x7f0000000040)={[0x7f]}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa7090000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd3f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd4f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 05:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd5f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x481, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x8278}) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd6f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd7f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:07 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d010000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001100)={0x3, &(0x7f00000010c0)=[{0x4, 0x8001}, {0xfff7, 0xffff}, {0x0, 0xe000}]}) close(r0) socket$kcm(0xa, 0x5, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) sendto$ax25(r3, &(0x7f0000000040)="5665d9a6c86e3e1c10e659ba053fd08ec1d56df7ba74cac118cb2c5b040c749c33d4f66a7285842e867cc357a536478cab3e120316b2f47875004743347996038b0454b43eac7b8ecdd7a4616404bf0ca653a3bd8b840314d932845ca5bad1991d0201ddbbac58b2fd2b81899fc231470e1b0992927559b8938e9d59a95150487dd7d3f05b32511f88e7f6c10745eba6b0a2fb3f1b80ff1ea2d0d99f18faedd7ddcea2f3fb16421eea86829cfd9897ecb3ca7aa9dc2d079395badd3c6f73fa146700b85b69bfcbbab9b4396ecc8067343b971b954093763a64dd53ac5e514737a1a175c2399241cf0d92b3febc6fcf9609512225f8c2055af3fbd6b1714926f303cdd0509124e95edfcc26039b614220787b3ab35ffdceecf1839f9ef06fff129f0b81e3ba6e97b788fca675d2d01d5618cffc782f4d597f8af6b89b72fc9f8308f070f7ced1ec5e0544f71aea086012de80056ea570a5451078ec39ea0cef7870e690c85c51c019bb1c5cb21646e041dcb4173bf690083ac36d3ec38c4f6e0c51306dbadf87db56bdc3b30312346868b6f90fb8786b670bfe557e7eeb56b4bc83613787b85f43c417a85e881b1d6b201b230b28ded87e23d90dc79d6db8715ac05cc4619ab45b2a3841b9ef92ec90bbc88e052ea1d8a84a6d6582ae879acadb57128ef09a5aec8dfaab4faa3ef6607e03c6cd9171a32125dde8535ebe94e8d48eb18e11fee0c871776d8ebc2a6a2f68dbb67076fb7a6b51365493ba4637b380bd7d78ef93efb31179dddf0ef0fdd089b2f307426b6569fa9c2fb814acdc3b5d911191cb9c29655b9aad86a49b803d49d428b3fe47967d77a1020aa354e50bb678b726cddce48cb62c6933f278ba9ab14ddedd4b3c2613d9e4e87761be8be21315d21f89c07bbe8fb787c4e3f9d3dc1a4b6334836cd4ff50570406e77da837f36d0aae4d65f4fa35e3a3b7e282aa635b10261fc20bbc741cf69c050442ecb788221d01c7d4378b7b4f5a96675f9fff7f76caee56d7f46ceeb9d69a6341e3340d939c7e6061f3f83131632789f473417a7e5351a9719a788e5dd34b68a52ccd3e4ca5bac9a7b4c20bab608450f655819b9e085a6a3f05735d2b54a9fe2f247e96699311da35c735250570c3603bae6bee17d912b883092a17eecd8a3d5f3834712b27b641d5ad35768c502e75837c7345aeb436898da1845957715ff8edc1734117a579452230f45c43c706a60497068332b36b86caaad17e39cb07246177cd3abdcfc198b9d4dd9bd68b5d4a32dbe1fae3124a4ed71afa4985702237df9857e50abb5b0255593304954e1ff0f0ddbb1574727954be0b390aaecfdca1ef7223d441a0ef7b14ccd62f39534e1b4b232d933d3a58f857dd724fe98d1d23b6ceac51b0e484cedeb34a29b16cd9ad97a94beb07a254f7ccc8fef787b0e112e0a92fc4dcb5da0a09b45e8f36bc5b6685104ce86258cd99a226d89b1873fdf20967b042f7626af51f9a2fac9fe5443ceabfe047256ec2b2b2de11a38a871f4afa0589c301a5caad126f9724c33e77c833c0b63738f9b927e5f6d2135ee0aeec0a6b5002f63cc6356a5513fbc7e62e8a621d2a4ff7871b74bf8e812bb1d7824cdeb717c301aba2fe757ebb4a5c19daf8213201802ec5112dfd22ce7acb8f9f0a276d39730c74dde7783c7595f70c14bdb71de22c0dbdb9a298d2d0d507a0f173d5fb9434cd9a3f55384bc16574e1c2545c892471b21feb2ba127a6bb17b1b50ca62e3743665cc31973166d29d6ad7116f793e8f7b5e468f1a2dd04a12eb7545656cf9db9f6b5f0b9ecc6fee19a3e9364bd44043febfb78e6c77dd1552b3bc19e523d996f05631fa2d02da227f5afda5d9209e7260ce5b942e98c88e9823a49851f1fcd74e3a4cf23a6ab0f4306b11113bd3c800817524f3b478bfef5f80ea61cf401ff03ddf2c260dca7017e73e331a4428b06ee0b50a7053addb33e4f71e45eafe0b394e30862503bf5b3879b7438bdfb4aa62f9c13632608a096aa17e656393156a42da8e406e6da33995bcafa0422869bb2e72743fe6b88fc96cc075704017f2b5ef9d18702dcd38d2f149c0e46f60adb7fc7e738210a0009c9fb317b0624cc2ac4e14074b7a5007fc37c4674fce7e888281a56b0ab9a346d60f399f9e451af4e78f2b311e6bd4ad6e29af04da8443411e4112b6f09aec425d0acb176e082d7e01846e0da768db29dac0ba87a570cc180d1d6a95e5b7780427c8bb513d2912b3e5b970b91b497f634b639555ce7e12e6b0ad417389b9beca4a296f3e8c4f2bcec005cbef15d58f0a61b35b153742c2c41ea615bab8c6486b4421af171d53b0cf2cefe517545c79f6a8a532493adcf1e8f28d903a6bb142e4d983d0fbabe33c2850ea7d567c176969fc559e98eaf8afae78edd26610cebdcac46f83c78e70e8ed79da824ee7968c09bf85db236e1671eaa7b5581edfbc26a55b8e0ec1f5b25ad229f80728a379789bc5325140b742756cdaaf2a651a1b5c8cff98e0be67e235421fb358f339723d7a9035700adb69c6e917b85b06db37f901babea3ae2c17e3fc845b2ac6bc541f9868b448d73cb3d0cfb51cb65cc0618b55858c3bc5d86fe3af8c337336d78ce8eed6c5338272ac9241336107c73835775fad6e5f1a9b33db0cc24018907f18762ea863cd5864d8136c12cec5736d824d5c1fb477172f2c76ac5b1f0c57b4d5d9228dc38c9ccce6745f319dae40bb82e5327530d8d6e19cdefeb040b7dd2ca61c03e919fef20cd7c6f438d25fa25a208029495bd678faba48bfaea6bcfe8c1e892de2abadb6e1d299a94c6a8f9ccf3b34674da47ce97949048d23e5f5ee33d37b71edc535424dc566f54523c94d5b03f371f666b0b6a45a57efbfa52d7ad387be8622bc3890f0905bf070922798d9f201f6e760bae05af36c8cc8b4d0cb349870cbf3048f881d8cc5abf8f2ceacd76c64ac381bdc093979767d0dd91401c71079778d59f38b8456f86631319e7de08ac3ceee1054c1c78d9189d06e9216230cd2d5894c63399ede74f95dd507093b6b6ad339638b3b50925614f070cc7cec48ac282cca3c1c97fb3473b9c5b4e20f2ce9f0fb3914c9b5df9a6a08b246c98a3ae630a61a96a74504839fac01b43196eb60662d48587b3128a69709f4b17577d92ae1dca4611dcbcd7e5755b46165c4d479cd5f91c2bb1a9291c6892181e3e93921ed0c7ffdb7c67b22070ab410519f86c85505ceb0e13579fdb7dfb28a3554c46dffd7850fabaf4408d0cd821b3e39815282f5a683c701e97dc5db02e11f2f65fbc18cb2841906ccde043220c3a0876b4dcc49f1c6753a686eff94001b72164ff829ee895c935bbee6512c383e3e1d23ad79007e085b7dc99908199a24d7f01e0554046e1b303b9e66b9323b756d5e2c0e9d942cfa8f4172db094478abc36d5b03c397824ac7ff31521b21a6cd8cde679e31a46890148c7b9ac0b72cfc9c7ef80bb0c62ebb97665820ddcb00797efef19a939ef52521db100145efb492335a1d1a18d9fa90bd534494b955cf782ef7c5354aa643bb903a3279d976520c164b9e06f780ec3e8fa18ef1c35437723d76de7ba72de546ef54a569e257c2914d07bb8aa16ef4b0cdb90c6e268a3f54d465e4edb74bbe0e0a55e803a7877a80a75cb2bf453e935d65999b82ca305a9fb04a63cd4975f9ac0d521b49f1fa380ef77402ed2b818f44144a915da4136d4d767619c1ee90af4000edb39e960659a301b5dbb9c025490f08ebc9ca19aa41230ec9f214ecc4bf4e6623a81b3f6e0306ba05cee801a213a5081c171ed3fc1325732fc1f73bef638b844175ae6fe445a894ad57ef1b9ba7e4246b74e1cc0245aaed1732c6f9c11af0831507d1f14c6d16ac8bd1c713dff22ec40050196f1ae6cddd9ec4f0438c5535f15fa959852a223c5477a3ed5214d260438b7eb623af3b441b33259ef230a5a5f45f3bf8fa759af0fc685d0f21b1b48c9be3d83505e40c0438386821b7e9b76ff1f66f93781b4ba4dcbd80d6ca5bbccbc9c7d44f595be8e0457bc6801ed6f15e68082b521bfbb24e88f97c50d9c973b16278842254b61a99ae8e4c57e2ea4260898e38593d66ad92a24ae4099963904aff44e6946c181197dc93086eaf66a91000f2699f951c8b505264c5c3919f58c85522f1ac5d6031a38e15538b31f36898ef607b06b2d417853bb327ebe5c53c06e74327c6daa82273c5b84ac0ff89a3f351ee047cfb56271d9b0b1c96cb57ec5b2c118bc1142cb1da74c89a6f6b30ca817046db695dd7c6ba2b28a29897c5c71d2522b1b48b3bf7bf1acc05d581caa4f6eccf264f6d40abc7b3134ee65520ec3d1c4c7019c3faff19ffee02f0ae16d6e667bbf51e14ba863f6e554280fba28a74c3368b18e947837a9c91e2db7d0e174d060c31bdc5ab67ff2bd372ce10fb0580fff6f9feb6436defc56765137ebf00530617e2667a275767916a08edc6d7ab002985fc5ed36cbb720897289b4547619a90d7489e1bd698b8e49f524d9d42b41ea9ac8533cfffbc3baac6220f399b4b562a707cf3a6857f392791027f1cb1478cd370ce1f2a10219e0b4585068c85053ce49ad1bddd244b3429a1620af63888bcef2ba82e274c8925e79d1ff95b7aa6427ec43ccb3f17236be033a09c118ee5d29d8755af6570fd39e9ed2fde77fb515b5e9ad111a8c0e48c5c72ab217129aec96251a0f241b2fb88eef5da38b770117f52241e715631119b95c1b516d0a0459ae6b7c554390b8853de2345860d40d87bc47c9010431b83e7e2308f44e05f7e6ad884c2655cf0ff8332416274fec6a0f9d03befe46451445a58227696c5333bac46ee4ce85a862b8f9ff98bb0d77e479d068919747a2f01982f896de2f6f2133b627526a1f9f4c6de34bb2f61149ea12c16d50e912f723e452517170bd8ad5cbddeae92d1b9c11f2db763f8f5696f21d11b1bc9fb75c7b2c3d8ef5f1e7a1ccff481db2f3dd5febc27c7220011719f4899af58bb3d4aa2aceb8aad50b198a432fb7570708a3b60cab18133ced29f7a17c533089e18837d0638fd01d905a3b402389e7651abb9cb34aa44a7339abb152d00b766deac5868d08683fb8c958093cb4d80ede5229e080b965430311057ab21b5d1b211232bffc5a38c70cbdd5bd45dfdae76312b4c3aca9ea3e816010f95465b29fec42fb608c8a2967127c795eb03bd365045a3ef536b34486b1314adac19a3583bfc61a2d0c589e4d28a776351f31ac381a202bc0d999e3a1264daf10e4f2937a422fc5d51f3e2b1b779306c2a1f911300c3b4d48d6203bc9a2a95bae90062c5b1151cf90128a087b051bfcd047f4b57176aad683149bb5af18a9465eba760dbda694b146eb790b7197fad6425bdf236248c7b2cf6ee47a1bcbc8a5cd40a6d6bf274271faaa9e25283a2eb93e706fb45f127b838a51b118e7218559aa8e0e6d370343ec004ff6e5bb6a229d343c21c2c6f84f5f8d19eb813a3f4e80026d64a01cda92449c173fbca04cc429f4d7dcf4d376186942939af90ac5f33d8ad3fbc987f97d9fc30c717115f09873abe5eb8bcdae105d2a181a79860b9df37a75a55e154c19bd500ff00f5fd71e3b4f346f05b1d80357d2b3493bd2a6897b84bddb7876391f51e3fe57bdeb967453a6f6917ae0a098fed4ce52624242c78070d23ffccf2f5380628e7ca262320efc8f685474112996fa31490b8aa1371293e149175d4708be4dc69c96944c8e47196891719d6027c533fdb4cec4bd68a944c0541c4c734c5abfd6b4c1", 0x1000, 0xc000, &(0x7f0000001040)={{0x3, @default, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 05:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd8f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:07 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xd9f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) munlockall() ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xdaf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x7, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xdbf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) socketpair(0x1e, 0x2, 0xcd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x20, 0x20, 0x3, 0x40}, 0x6) 05:06:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3e000000, 0x0}) 05:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xdcf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xddf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x400501, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:08 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xdef00000, 0x0, 0x0, 0x0, 0x0}) 05:06:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x23ed7a5ec6c, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xdff00000, 0x0, 0x0, 0x0, 0x0}) 05:06:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x81) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x3ff, 0x0, 0x3, 0x7ff}}) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe0f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:09 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x20000, 0xc4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000014c0)=0xfffffffa, 0x4) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)={0x6, 0x0, [{0x15002, 0x7e, &(0x7f0000000080)=""/126}, {0x1, 0x1000, &(0x7f0000000100)=""/4096}, {0x10000, 0x97, &(0x7f0000001100)=""/151}, {0x6000, 0x8a, &(0x7f0000001600)=""/138}, {0x100000, 0xbb, &(0x7f0000001280)=""/187}, {0x100000, 0x5e, &(0x7f0000001340)=""/94}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe1f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe2f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000a00)={{0xa, 0x4e24, 0x8bab, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e20, 0x3c, @empty}, 0x7, [0x7fffffff, 0x93, 0xf8d, 0x3, 0xaf13, 0x8, 0xfffff801, 0x1]}, 0x5c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)=@ipx={0x4, 0x200, 0x200, "62094472cece", 0x6}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000100)="8526948341e5a7194a70833b207bb2997444405cce70a2f766ff3f07f80cf8ba6cf1130482b5016ac3162045cf30752fd6894fe59361ed57bd43d9396a605e2ace8b6ccee0ea1717c52b0b0b86408ce678ab976d96cbeab9f53fb60356b14c2a39ff324a7672e9d4163c9d6f60704875e4060fd552a3cb55de3ad959395c582fac1d2541fa3fea5f1db75ea76f0f6554a581bf724f4f482a2c6fea533dd18ed458170740dbddf6411ee9944437128dd9fc9ed7ee0d99de9aa6b239d73c761ff50dfec116a711538d1dfcd6a841b0590f06963c7170a83a20de6a01687613616b91fb4e25e62a2bec1ddc5bf01d", 0xed}, {&(0x7f0000000200)="65ceaf0079cf697372fba585eafd4a299b574926ae979338ff35efdc61c01d951daa62bce7c48c7607c6f604c7ea91e7249afdf528c0a1cce15536c13df3035b66e8b68a9a3a2078868bbc77d8f15583d2ef8d3d5288e6b5443795d00fbd91ba0559891a04dcb822c175fbc4f952f0cb9ef4f3c914734c74480be7a78a2f2ed30d32090297749f6274e695a82853bda6b21dd594d94f5b55855a91926a79fdf71e1a3e86ce0cd625a62bb36a5311ce52b1056f56d63e7a94155ae7ba0dcbff296ce3fbbe72c191d483ea6a754142e3fbc10913b8f6e78f8aac181cf353f0f363bcbf3938f1b2d63c18541b7c4cb643", 0xef}, {&(0x7f0000000300)="869d95e8a8ee45eab770ee4750469c11f65c272e97042fd3a317e34b1fa68161a8a0c04df4c3c26c123f85516d2beda9f4bd2c3f54eafdc49d69560074a8aeff78eb7534cccee8240a5f1eacfb7832cd55680772c9e7b1345525d09b421ef3a4cf1a3c4103275148494af2b29ee1e6dc33ff0c21e4b6995440fa1a8daa17e199dccbffacf5029245b01b3fabeb6410de51c13ab76bb2748813e0b383ea9ac521368cb798df6378942b65d89d82932f020269f6c7a718995e93fcf3c9a4cc828be81e70e6249c50b23739aadff847fe48730621c0f870d3cb5d3d6b59f638289e2e71315c96a810205a", 0xe9}, {&(0x7f0000000400)="b7c702d1de665bc13d6dc586725550ac20a081e1013377db11f3f477fb8a8bb20ae90c4a5cd6ecde12d55e303ef4427d1ca85ea451d13a1d70b5eec318da2a71251b445850b63a9ee89b75fb444fb5a4467a29aec09ccf7fcc71e7d36cdf1ab00f7b3eea71e893b055aa38e98d817380188d7381f33c93325ee7c40d25721aed8aa8eda2a548e9a6b4", 0x89}, {&(0x7f00000004c0)="cd33473cdb3a392f02e2979f59e3ec8931a2bb3822c8c24356c48f8c22fcc8894a7806d19310fe0ed37981dc834d08ab4950d3b7de50837bacd1c7d81165ef350c04562e205582bd3f54f1dc7deb4f2e2ea2b98484aa250ba5edfa2808e5114c76308c9aab963bf112877a6e35407cbb73e86c992d046a32a0c5e6d1be0a8ea6c8821ea42f6ae4d765b8b5b716c2c85718ddcf4ea33ebabf68cf404d00b81fa7e14f9b5a04bcef7ca032146672272f45ea4bc041a7888c5963c392cbf1f3a05839591c0d6ce6245811469dc92994b492ee973fa907033963e6b14ea5bce5c50250b8965e3b9a65c58706d03b9e9a95f05a7cc9c3c6b49e", 0xf7}, {&(0x7f00000005c0)="6a2a378dba682409be39940c0996436596de6a76e235365385b4", 0x1a}, {&(0x7f0000000600)="2eed2e21ec8a57a889f387a22fe0d0c83a2eccf85b5a0a21d3e868250249c6dd5477dbeb4bc434825ed11aec16d6d1f55295e912caff63ad387ffeb6f5100631b6bd4b76d593164090284930649b654302d6a599f02b9a2ac268b5dc77ffbc748cb34d3ee521aac88f9b266b5634f225a1bf585ec534379fb90ba120a1375f6ce7405b805dd0af205b540ba6741a25c9a2ddd9b564ea516a57e18c2e94a102046282c2f30dd746f28c8255a5b779d026baca942028730214fa2320e2d4d56eb703be6c08db36ef1b26e73e44604988e53b965d8d6099b05cc18cdb6aa04747e4c19b73", 0xe3}, {&(0x7f0000000700)="fccbd3e59cfae56c2559ef3a1837dae025", 0x11}, {&(0x7f0000000740)="4e7ae355d9655a4c7d047e7ae0712684ecf7cc2f9177a3cabcaeee5d712a15690d37b1ab1fbb3922c27c4d0693f4ae555be83d8fbc47d0900a0d4a328942a7d1eb0777", 0x43}], 0x9, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0xcc}}], 0x90}, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) prctl$PR_CAPBSET_READ(0x17, 0x5) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_genetlink_get_family_id$SEG6(&(0x7f0000001cc0)='SEG6\x00') ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000009c0)={0x0, 0x3f, 0x5, &(0x7f0000000980)=0x9}) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r4, 0x0, 0x0, 0x1000f4) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000b00)={0x9, &(0x7f0000000a80)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000c40)={r5, 0x1, &(0x7f0000000b40)=[0x7f], &(0x7f0000000b80)=[0xd6, 0x80, 0x1f], 0x4, 0xa, 0x4, &(0x7f0000000bc0)=[0x8, 0x3, 0x3, 0x7, 0x0, 0xffffffc1, 0x7, 0x8000, 0x2, 0x3f], &(0x7f0000000c00)=[0x1000, 0x40, 0x8000, 0x5, 0x80000001, 0x1, 0x1]}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x10040, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/vcs\x00', 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000cc0)="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") 05:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe38a0000, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe3f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x23f4d00c447, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:10 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe4730000, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5609, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe4f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe5f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x11, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe6e60000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe6f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe7d90000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe5f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe7f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe8f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x6b, 0x4, 0x8, "4e6abc8cb1f123ba3334fec8ece6e94b", "67dc9fe865e1386ae59c1388de4abdee44a53ce41384a55063cfe93ddf3fdedf3ce724217234209a25d5f53f84767b98d8fced8432d1e763be4cdf2aa875b565c8da470fa16fde606fd1e2e60ceabe8af1c744d8d7db"}, 0x6b, 0x3) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={r3, &(0x7f0000000480)=""/69}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000300)={r3, 0x17}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r3}) 05:06:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xe9f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf640000, 0x0, 0x0, 0x0, 0x0}) 05:06:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xeaf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xebf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b00000000c7676a2100", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x12) 05:06:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xecf00000, 0x0, 0x0, 0x0, 0x0}) [ 2908.733098][T27957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:06:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xed4e0000, 0x0, 0x0, 0x0, 0x0}) 05:06:12 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0xd) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="800627bd7000fddbdf25050000000c00000800010000", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES64, @ANYRES16, @ANYRES32, @ANYRES32], 0x9}, 0x1, 0x0, 0x0, 0x40019}, 0x4004c800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc008090}, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xedf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x0, 0x0) r1 = getuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB], 0x84) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB], 0x84) syz_mount_image$exfat(&(0x7f0000000040)='exfat\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0xa, &(0x7f0000001680)=[{&(0x7f00000000c0)="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", 0x1000, 0x7}, {&(0x7f00000010c0), 0x0, 0x7}, {&(0x7f0000001100)="1beec95d77d768998552ff5f793778e3e979ed5b8b65c1d1bcc323dcfb790b5740a2cd9219af83be4e04ebc86b7e9cb85178e0914328b64e22bbb196a487cca24c1bfc2c0880a47c467389507b2ea8bfded38f00a9343547026b06703c3cad341f8c9e69b176f3c36e1e49775203b0b2", 0x70, 0x8}, {&(0x7f0000001180)="9d5ca8c66818e0837588d1907890d9b0aa31c747a0ccd4c917963c73402bacb3a54772b2ae30918781b6ce02da6d75e0622b4a4a100396c8eb721c318d4bcd122e7fb6389c0d5f5cf8", 0x49, 0xf3d}, {&(0x7f0000001200)="98756ce35077076937e7b10cb015efc6bb54cd2dc0e37c9efdc382f30784523d4eb67d23f17b65c4987cd4683554020d08fce8e212a000d85ef2c01a49edf0235c9066d0aeb2a3b6a0f4", 0x4a, 0x9}, {&(0x7f0000001280)="41cdbfb9afe31ae80c88c6f548c0bbc73ec4b607fb1e0a6037ce97e4e26593f1aee3aa94c9ab9f3ed8e7559211be1021723732700f902ad6695d6d104e2609c28432c275e2d1b17a4eb2b9da161dccd556f9a8ce58991bec244d6228228dbeb8abd0046993fcb3dd2f59289cb6ae5790afa88d7d08073402c666ee6bc827bb4ace115fa2363892ca8c646925ee86225e307a9eecc58a874fbaaee79bfbd2c8ed89ef8c24159d9e83e336a1302e8bba881f0fb725ed59cb9e6d2b56a0d9c89299afb06e45bb5c224ec2dc35d661e426ca80c7e5bc477efe8520331d93fb52af52d292f221eef850b4205bb47be59bf5d0de3bb9e76350", 0xf6, 0x10000}, {&(0x7f0000001380)="d9057b838a48ece29b6275b5597d526c1db1dcc9fb8ada8300defe1b0011427fe150c2cc2e2baffa7cc9dc887826290ad8c68611cadd7ff60eecda8ae88e74077e909bd8a38bfe5a874d40c60796a026693cbbaaa55f5bbf0c06b4748b97da41a8d0cf04ff0efa67ae05d4d02177267986242a6dbcba0bdd4521581077be725fed35367430ca2304600a470b6ab13cb10bc5fdba1f800ac89373c19ab0275a8d929b6c27d30c5128f10130a1ab0a191c3f3f8da03e", 0xb5, 0x4ea}, {&(0x7f0000001440)="5222a100922daebeea442f47dc00d1a00f3266847a85dcf8d063796e8fda1dd496d5fa124f66721680d8f296137fbf459dc055695bdd930b29dd00ed6de3fb9bd391dd3e98b24847952adaf3f94b09892f2b46e8ccfa91b224ca4c6e25cb48440ec0eadf9cac7728d84683d1059f524e91365e73b34793ef4777503212dd7a333206c1a998b2cab6dde8ce062478d8b2d098e5604a8a46429e4f2292971cfb3b976736fb7559897a44cc95cca9bd4c52a1806c86d6001d195b9e7c9db9b3860a182769cebe37685a4ab52c76ea2135cf94d22467a683", 0xd6, 0x8}, {&(0x7f0000001540)="5a91bafe353e87739cf1318417462d9cb0cef42fe38c433b806d273e4d3e6459c338c9d2c81044f6333b186c8a45049636ede46701cb2f7d9b34e2c1b1ab1db2a5288debde44c526b0be6fc25cc8e3947e613f32c64f99", 0x57, 0x6}, {&(0x7f00000015c0)="da310f52883227afe28e707a328f0d13a11e9b6eb524f3a09564850c13e603563193d2149c23dfdbb42e8757b401e6a7814487af6f0f8f88cf9be42b75aef979a06501f202a164c85194a240e3a468d204aef7796f0311427b91fc02bd571c4c65aa630f8e8bd51368ea937729dd00c4d7ec156e6758494400f600340c7a22cab0cdbaffcb33", 0x86, 0x9b}], 0x1100c20, &(0x7f0000001780)={[{@errors_continue='errors=continue'}, {@errors_continue='errors=continue'}, {@allow_utime={'allow_utime', 0x3d, 0x401}}, {@uid={'uid', 0x3d, r1}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r2}}, {@uid_gt={'uid>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x38, 0x66, 0x65, 0x37, 0x34, 0x33], 0x2d, [0x57, 0x35, 0x35, 0x66], 0x2d, [0x32, 0x34, 0xe, 0x32], 0x2d, [0x66, 0x63, 0x34, 0x35], 0x2d, [0x62, 0x37, 0x38, 0x33, 0x33, 0x66, 0x35, 0x61]}}}, {@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xeef00000, 0x0, 0x0, 0x0, 0x0}) 05:06:13 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xeff00000, 0x0, 0x0, 0x0, 0x0}) 05:06:13 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0xa2, 0x2, 0x4, 0x80000, 0x7ff, {r0, r1/1000+30000}, {0x3, 0x2, 0x4, 0x0, 0x4, 0x27, "57be74c4"}, 0x6, 0x3, @planes=&(0x7f0000000080)={0x6, 0x8, @fd, 0x1}, 0x2, 0x0, r2}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x4000, 0x0) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'caif0\x00'}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r5) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8, 0x200) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) poll(&(0x7f0000000200)=[{r6, 0x100}], 0x1, 0xffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xc9, 0x1c801) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x14, 0xff, 0x89e4, 0x0, 0x2, r1, 0x1, [], r3, 0xffffffffffffffff, 0x5, 0x1}, 0x3c) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf08c0000, 0x0, 0x0, 0x0, 0x0}) 05:06:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b00000000c7676a2100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r8}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x48}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 05:06:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf0f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x62, 0x1a8e, 0x2ba8, 0x2793, 0x7f, 0x1}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x440640, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x3, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040410}, 0x80) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) [ 2910.202097][T28613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:06:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x195, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x240400) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @time={0x7}, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x3, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x6, 0x9a4, [0x0, 0x20000180, 0x200003c4, 0x200003f4], 0x0, &(0x7f0000000140), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x42, 0x88e5, 'lo\x00', 'vlan0\x00', 'syzkaller1\x00', 'erspan0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}, @common=@ERROR={'ERROR\x00', 0x20, {"5dd35028ae673871e61384c8aa0073bd2c340850c182a0e97d20e59590f7"}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}, {0x9, 0x64, 0x6006, 'hsr0\x00', 'netdevsim0\x00', '\x00', 'veth1_vlan\x00', @remote, [0xff, 0xff, 0xff], @dev={[], 0x3c}, [0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0xae, 0xfe, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xffff, {0x5}}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', {0xfce}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x11, 0x10, 0x8, 'netdevsim0\x00', 'sit0\x00', 'nr0\x00', 'batadv0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xae, 0x156, 0x186, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x48}, {0x9}], 0x1, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x7, 0xbb, 0x0, 0x0, "98e660b220c8f8a54cced2f13a9d087b68941d7dede509729d1d45d2149e091621053f1199ac5fc763a8d25a46c4cc4c0f83441480dac0e3990c5bed634c0a0d"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3}}}}, {0x0, 0x6, 0x1c, 'veth1_to_hsr\x00', 'batadv0\x00', 'lo\x00', 'bridge_slave_1\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @random="236d30abd05f", [0x0, 0xff, 0x0, 0xff], 0x6e, 0xce, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xff}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x4, {0x800}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x11, 0x10, 0x86dd, 'veth0_macvtap\x00', 'hsr0\x00', 'caif0\x00', '\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x1e}, [0xff, 0x0, 0x0, 0x101, 0x0, 0xff], 0x11e, 0x16e, 0x19e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x20, {0x3, 0x20, 0x7, @random="fb3c9bb9cce5", [0xff, 0x0, 0x0, 0xff, 0xff], 0x81, 0x0, 0x3ff, 0x9, @broadcast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x4e22, 0x4e22, 0x1, 0xfffc, 0x6, 0xffff, 0x9, 0x40, 0x8, 0xf8d8}, 0x40, 0x40}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0xd, 0x3, 0x0, 0x9, 0xfffffffe}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xd3, 'syz0\x00', {0x4}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}, {0x3, 0x20, 0x890d, 'rose0\x00', 'veth1_to_batadv\x00', 'ip6gre0\x00', 'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0xff], @link_local, [0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x23e, 0x28e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x4}}}, @quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x4, {0x44}}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x5, {0x6}}}}}]}]}, 0xa1c) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 05:06:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf1f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b00000000c7676a2100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r8}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x48}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 05:06:14 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_ts_info={0x41, 0x0, 0xfffffeff, 0xfff, [0x0, 0x401, 0x6], 0x8, [0x0, 0x1f, 0x7]}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf2880000, 0x0, 0x0, 0x0, 0x0}) 05:06:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x7fffffff, 0x4, 0x1, 'queue0\x00', 0x400}) 05:06:14 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2910.923678][T29345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf2f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b00000000c7676a2100", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r8}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x48}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 05:06:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x3) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf3f00000, 0x0, 0x0, 0x0, 0x0}) [ 2911.371212][T29562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf4f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:15 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="8da894fd57e3d9e5f52b66eb1549be5e0de21dd6739d2291ac3551fdf56a1a4eb1b69416d4f7d7cb888fb8b4188d7c5ea0d170ec58d319ea9d6fffbae8c4c2e0597f821d5e5c8a94e9f4b916cce587f2571243953cfebebcb86828dfd6794ae469e31dd375e1b5b2eb7bf0eba837b310e0bb307f29f8d63b3b230ce40fc3bb332613e3ab9633454d979b8d5cf5f3c57e111e2f566d2fca82f85e1b6e3bbef8857bee5add7c1d9135087f4132cf90bf69ed2a1bb0ae1f23e94e340ae02f8a7044cd26223dc9bebf238f5cac292a8858af080f75727f8cacfbc6ee3ef3f4b376ce60818a256cbf", 0xe6}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000000000007070000009402000a00000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000020000000011000000000000000000000001000000fe00000000000000"], 0x50}, 0x80) close(r0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r3, r2) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r5, 0x10, 0xffffffffffffffff, 0x2) write$P9_RGETLOCK(r4, &(0x7f0000000040)={0x2b, 0x37, 0x2, {0x1, 0x1f, 0x34, r5, 0xd, '/dev/net/tun\x00'}}, 0x2b) 05:06:15 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f00000000c0)={0x7, 0x400, 0x12, 0x3, 0x0, 0x4}) socket$isdn(0x22, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2}, 0x4}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="27ca2251e0e30f1a3ad7231b99226f9773ebce5cff9d8c54fe43f2f7495b631cbc24919ae4591cefb94de993d2efa508606257b665f4a9c61aed241f3fd2973cdbcb5e6679c193ba778f74bcacf7274e49a4e0219bdf20dd5f4b84a89f5656ffb7723f1fa20d9a68d743ba34489a05938dc6e9", 0x73}, {}, {&(0x7f0000000180)="68edc541c1b7ce8f78407927d6aeff125a8a7c2428aae644a231e930e7d7a7d64e070634cc96e0c9b762a732a71bfd3b2b80760fbb42c64a4dc2a25ca6ede9f09f16b6851fe77f7b67f98edbb9794a28a8c065877bab35217f9af0e292a01d2709306254a3ff61beff06752b370814d46197e8f8f0e1ff4f371e71198741e67f0ecf104e11e407ebf8c29d2b96b3d813baa9883585039e917938fb632bd66a10e9a1f24fe37b93c4f198", 0xaa}, {&(0x7f0000000240)="4213ac99406266198c1188031cf93935b205f82f2cc420c2fe9ec58d415d7ded7d5f4f2f40f2a9df4105cef18d", 0x2d}], 0x4, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffc1}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0xa8}, 0x20000045) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r5, &(0x7f00000006c0)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xda}, {}, @result={0x7a6}}, {0x0, 0x0, 0x0, 0x0, @tick=0xffffffff, {}, {0x8, 0x14}, @time=@time}, {0x2, 0x8, 0x0, 0x6, @tick=0x6, {0x1, 0x4}, {0x20, 0x2}, @quote={{0x20, 0x4}, 0x6c, &(0x7f0000000680)={0x0, 0x18, 0x1, 0x3, @tick=0x1, {0x9, 0x20}, {0x7f, 0x6f}, @ext={0x67, &(0x7f0000000600)="f0aef521531d8cb5323e4f591115b934f946141c58723f33e71cb20813fd0826e131f2c10d130d48ad4fa0144ea6ed4f0ff2110f6e03c254ab03dce67b37fb525bd12badec7c87d7c0056926258c1921f04cefb2c446fb498b264482e38b34b1b96b7397f45a9c"}}}}], 0x8c) fallocate(r5, 0x0, 0x0, 0x1000f4) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x16, 0x1, '/dev/loop-control\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x80, @mcast1, 0x7}], 0x1c) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:15 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0xad4, 0x0, 0x0, 0x4}}) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x0, 0x80400000, 0x8, 0x6, 0x8c, "ebfcc8b940cdf92480887257da134d2f345c6a"}) 05:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf5f00000, 0x0, 0x0, 0x0, 0x0}) [ 2911.787947][T29962] QAT: Invalid ioctl 05:06:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) socket$kcm(0xa, 0x2, 0x0) gettid() r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fadvise64(r2, 0xfffffffffffffffc, 0x100, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "99bf571beb6fc090", "c65a2d5211b0d451fcc03a61b3171d4f74805a982f96c03f51f24d3e732230e4", "948a6e03", "ef6091fce4d6d688"}, 0x38) 05:06:15 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x404, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r3, 0x4b52, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r3, 0x4b40, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf6980000, 0x0, 0x0, 0x0, 0x0}) 05:06:16 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600000, 0x0) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @remote, 0x200}}, 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0x8) 05:06:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000080)={0x9, 0x0, [0xffec, 0x4]}) r2 = syz_open_pts(r1, 0x28000) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf6f00000, 0x0, 0x0, 0x0, 0x0}) 05:06:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) syz_extract_tcp_res(&(0x7f0000000080), 0xff, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x80800) sendmmsg$sock(r2, &(0x7f0000000c80)=[{{&(0x7f0000000300)=@nfc={0x27, 0x0, 0x1, 0xd80ad739ed4c3eb5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="a00fba30e2f58669a10b26b9cd0f49", 0xf}], 0x1}}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="17681d25695867d2d3cc1a13e93af4b75c91bdb83c6e0cb121e42f0ffac8f2c6fe", 0x21}], 0x1, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xe24}}], 0x48}}, {{&(0x7f00000005c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)="b008fad78a52ba23ea84dde34448b7485db893da69b996ff5728f52f89e3201294c9933dab36a54303e9c84c8524a5dee6ab47d0fd601bf69040d9e88c659d952fa07d2804d860e1e29a262b3ede0d97c4c762ca5d59", 0x56}], 0x1, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x663d}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xc0}}, {{&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x3, @local, 'veth1_vlan\x00'}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)="5f8a38adaddf1480a7c7f8016e68629501bbd909f4b04b15000ea61a8b300ed9c2c381a0aa5cbd2c93f038ddc7d81d4882b0611795d93a5b6579bb7ee7ceb50bc5f285b6b145d07bb5a3be6ae5d6933691a25b527923095259ceafabd07171c2a64729a5149ffc302fc76c060cabfe7376757c6507f1fcf7ea00a4f5f86bed90bb14e1a1a39ec08a6a89a4969904c72430dc41affb56add43be3aa476466c67b64dd8ac04b465a36a192579863cdb08797515dc40102cf706d9a7219c55caba2d1bf71e748635a686869fcfd6a6aae58018f8c88db7d8c08170dbc6d", 0xdc}, {&(0x7f0000000940)="e9560ccf7511820fa3cb4ac884cab4eab33e5e94b0b85e59c967", 0x1a}, {&(0x7f0000000980)="8abefc2f51e44aeb2142ecf527434f094b7cfe9530", 0x15}], 0x3, &(0x7f0000000a00)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2d}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="76379b3f430b2fcdb87de7e06763941b1c4644389b7fc88ba137b25ce2da8991d5453ef820c3a1131d47", 0x2a}, {&(0x7f0000000b00)="10a62bdbd0da8479946bf0b40d9054ac81da9f5b10af978ce5822d5b555fbdd4700f0c5427847371735e5bda2f961caa89c5a8fe8f17f7da92dedee68c4bab93cb2e8a68f41e8fdbcd7bde186d5e5f38b32a8f7afd80e1a80dcdfbda5ac227bd5d9ea23ff0ea8908cfa0db3ec421fe6954255f99373c22a121516ebb373ebc50bf57424ba00dfceab52059530c03e74158c4a49c7719dbf4c35036865ea2c8f0ddafb1e93b0e5f7c0fb2840c494e62b2fd41c1bc611a8f1e81dbb5a00d25652d76c9ca2768ed5d2308d2d39a554b62c59f7473e5c17fdcac0f1f0089f5af8430be6f6cdade35f52698bd3c8ba9484b3a7d531ef77bd17c", 0xf7}], 0x2, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}], 0x30}}], 0x5, 0x40800) r4 = accept4$rose(r1, &(0x7f00000000c0)=@short={0xb, @dev, @bcast, 0x1, @rose}, &(0x7f0000000100)=0x1c, 0x80000) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000140)=""/177, &(0x7f0000000240)=0xb1) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'veth0_macvtap\x00', @remote}) 05:06:16 executing program 3: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r0, 0x10, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x41, 0x104) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x8}}, 0x18) r3 = syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000140)=0xffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000180)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r5, &(0x7f0000000000)={0x22, 0x61, 0x77, 0x7b, 0x81}, 0x6) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4000, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f00000000c0)=0x8000, 0x4) 05:06:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf77e, 0x0, 0x0, 0x0, 0x0}) 05:06:16 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:16 executing program 0: memfd_create(&(0x7f0000000040)='\x00', 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200001, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1ff, 0x4000) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000000c0)=0xfffffffe) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:16 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4d01000000000000, 0x0, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf77a0000, 0x0, 0x0, 0x0, 0x0}) 05:06:16 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x41, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x6}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r0, 0x0, 0x0, 0x1000f4) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0xfffffff9}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r2, 0x10, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1, 0xad, 0x200, &(0x7f0000000380)="bf7dc8804f2b32ac0477dc64582a4f976370795debd7d5cbf0387a369b47b17dcabab1857409da08370123ab962d5ab0e06f684df523e9ff4720c303ebc728c6c9737b6bbcaa727e02da039be03da48ae7d7ddfd80ff1e7f2c56578c8ec10f2d077eef96130f7fa88552bbbbfc48473b1d9cecdf79a83bd10e63276e3ae97ddd6478fb2929f95e095953a00a6a1eb18e6569e7eab8db1c1921ae4e55a73e0f3c0848d5c939534e79584273976c"}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f00000000c0)={r4, r5, 0x26f508af}) 05:06:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf77e0000, 0x0, 0x0, 0x0, 0x0}) 05:06:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000040)={0x0, @reserved}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'ip6_vti0\x00', @random}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001940)='/proc/capi/capi20\x00', 0x2081, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="40001300311d6b5cd10000000000000000000000610f16c0cd957e284844406de80b7763555e3d6bbb3fd58fab8d47336f", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003740)={'vxcan1\x00', r4}) bind$can_raw(r1, &(0x7f0000003780)={0x1d, r5}, 0x10) 05:06:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf7e60000, 0x0, 0x0, 0x0, 0x0}) 05:06:17 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$pppoe(0x18, 0x1, 0x0) 05:06:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0) close(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) getgid() socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r2, 0x1) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="f3cfbd427f418f2652118e28e8af46e2ee2a151f67436b7a3875d0bde072cadbb9b9f4b01a83c01781033dc6372eca8fcb00e737c359aee47a70611b74442f25064a938c736ba11a14a9d4911926b61858b2179c89a7ee4e5a1ec4dca630add387aab2da33b974742cc51e3bec2155eec7b195bf3acefb0011e599dcdf12434741ac6b318357f02a31e9056a0ce78464f251ac1a2b", 0x95, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r3, 0xb8, 0x1000}, &(0x7f00000013c0)=ANY=[@ANYBLOB="656e633d72617720686173683d736861315f6d6200000000000000000000000000000000000000ebffffff000000000000000000000000000000000000000000dd3c5cdc463189ea1a5ed582541d4a7d5a000000000000000000000000000068245d87d669533aa5e37b1c314daab7558f31031f3ddac5ff56055be2341214afb2cff0041fa5d8802808f2b99c822b25f4745f1624438f183a96f3aef517bdc73ce1d24b22ff91103842d6"], &(0x7f0000000240)="4bb29a5362ef7216586108b2f57d8dc95bec9ad567a06884d4cdff8074fe0c2d5abbe97987c11c1c78828c21856b2db0c22cd5f73530505b33909f117b9cf8e01c84757343125e4e0939f341c66461bf3cc448a1165757451839e0525f2dcf75a8b87d8132bbca9a74010f8ec1406291f42bfa0209acd9f1f234418dfa1a6a84238fffc06d80ebfe61ac35d0b56c6e7ba72e076a4905b4a316851e18f441979981747d19919c4bbaeaafda633a54b6c691f4f02a3a69f388", &(0x7f0000000300)="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") 05:06:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf7f00000, 0x0, 0x0, 0x0, 0x0}) [ 2913.679865][T31364] FAULT_INJECTION: forcing a failure. [ 2913.679865][T31364] name failslab, interval 1, probability 0, space 0, times 0 [ 2913.717448][T31364] CPU: 1 PID: 31364 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2913.726536][T31364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2913.736658][T31364] Call Trace: [ 2913.739972][T31364] dump_stack+0x11d/0x181 [ 2913.744563][T31364] should_fail.cold+0xa/0x1a [ 2913.749298][T31364] __should_failslab+0xee/0x130 [ 2913.754215][T31364] should_failslab+0x9/0x14 [ 2913.759037][T31364] __kmalloc+0x53/0x690 [ 2913.763527][T31364] ? terminate_walk+0x1d0/0x250 [ 2913.768413][T31364] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 2913.774533][T31364] tomoyo_realpath_from_path+0x83/0x4c0 [ 2913.780125][T31364] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 2913.785758][T31364] tomoyo_path_number_perm+0x10a/0x3c0 [ 2913.791396][T31364] ? __fget+0xb8/0x1d0 [ 2913.795557][T31364] tomoyo_file_ioctl+0x2c/0x40 [ 2913.800343][T31364] security_file_ioctl+0x6d/0xa0 [ 2913.805422][T31364] ksys_ioctl+0x64/0xe0 [ 2913.809775][T31364] __x64_sys_ioctl+0x4c/0x60 [ 2913.814383][T31364] do_syscall_64+0xcc/0x3a0 [ 2913.818964][T31364] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2913.824961][T31364] RIP: 0033:0x45b159 [ 2913.828879][T31364] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2913.848776][T31364] RSP: 002b:00007f3999825c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2913.857208][T31364] RAX: ffffffffffffffda RBX: 00007f39998266d4 RCX: 000000000045b159 [ 2913.865540][T31364] RDX: 0000000020000240 RSI: 0000000000004b49 RDI: 0000000000000003 05:06:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) 05:06:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf8e30000, 0x0, 0x0, 0x0, 0x0}) [ 2913.873959][T31364] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2913.881950][T31364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2913.889933][T31364] R13: 0000000000000360 R14: 00000000004c462b R15: 0000000000000000 [ 2913.911453][T31364] ERROR: Out of memory at tomoyo_realpath_from_path. 05:06:17 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:18 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x605, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r2) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'vlan0\x00', @broadcast}) 05:06:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf8f00000, 0x0, 0x0, 0x0, 0x0}) [ 2914.150112][T31580] FAULT_INJECTION: forcing a failure. [ 2914.150112][T31580] name failslab, interval 1, probability 0, space 0, times 0 [ 2914.178770][T31580] CPU: 1 PID: 31580 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2914.187485][T31580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2914.197606][T31580] Call Trace: [ 2914.200948][T31580] dump_stack+0x11d/0x181 [ 2914.205474][T31580] should_fail.cold+0xa/0x1a [ 2914.210341][T31580] __should_failslab+0xee/0x130 [ 2914.215271][T31580] should_failslab+0x9/0x14 [ 2914.219996][T31580] __kmalloc+0x53/0x690 [ 2914.224386][T31580] ? tomoyo_encode2.part.0+0xd9/0x260 [ 2914.229798][T31580] tomoyo_encode2.part.0+0xd9/0x260 [ 2914.235035][T31580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2914.241305][T31580] tomoyo_encode+0x34/0x50 [ 2914.245822][T31580] tomoyo_realpath_from_path+0x14a/0x4c0 [ 2914.251609][T31580] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 2914.257016][T31580] tomoyo_path_number_perm+0x10a/0x3c0 [ 2914.262611][T31580] ? __fget+0xb8/0x1d0 [ 2914.266721][T31580] tomoyo_file_ioctl+0x2c/0x40 [ 2914.271943][T31580] security_file_ioctl+0x6d/0xa0 [ 2914.277077][T31580] ksys_ioctl+0x64/0xe0 [ 2914.281271][T31580] __x64_sys_ioctl+0x4c/0x60 [ 2914.286250][T31580] do_syscall_64+0xcc/0x3a0 [ 2914.292627][T31580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2914.298837][T31580] RIP: 0033:0x45b159 [ 2914.302778][T31580] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2914.322541][T31580] RSP: 002b:00007f3999825c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2914.331290][T31580] RAX: ffffffffffffffda RBX: 00007f39998266d4 RCX: 000000000045b159 [ 2914.339538][T31580] RDX: 0000000020000240 RSI: 0000000000004b49 RDI: 0000000000000003 05:06:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x200, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800, 0x6) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) sendfile(r3, r4, &(0x7f0000000180)=0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$SIOCAX25GETINFO(r5, 0x89ed, &(0x7f0000000040)) 05:06:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf9a60000, 0x0, 0x0, 0x0, 0x0}) 05:06:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x28, r4, 0xe48e1e879b3e185d, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x80) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000080)={0x3, 0xa0, "667fbc23766d08486fd5873da00c4d3eac8a6083d1830bd9ed20a698cdb5aeaf2813bfea6da816b768f1dedc13839f633488106ab6016b5c76b8de887cb9fa26b0d0edefe0713234ad1dcb2b334eda6b8e4276d606bf55de04e31464073f08574f46d1b8ee6389a1af10000d364546054f720c332a53d3a8cba7cd2bad4814a2ac6e9a5a5008323e9ff5dcad195342cee051d2d77dfec927ef569518ce763752"}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) openat$cgroup_int(r1, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) r7 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000280)='posix_acl_accesscpusetnodevvmnet1&&&\x00', 0x0, r7) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2914.347641][T31580] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2914.355695][T31580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2914.364026][T31580] R13: 0000000000000360 R14: 00000000004c462b R15: 0000000000000001 [ 2914.418032][T31580] ERROR: Out of memory at tomoyo_realpath_from_path. 05:06:18 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:18 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:18 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e22, @empty}}}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2914.640953][T32006] FAULT_INJECTION: forcing a failure. [ 2914.640953][T32006] name failslab, interval 1, probability 0, space 0, times 0 [ 2914.731467][T32006] CPU: 1 PID: 32006 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 2914.741079][T32006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2914.751838][T32006] Call Trace: [ 2914.755176][T32006] dump_stack+0x11d/0x181 [ 2914.759537][T32006] should_fail.cold+0xa/0x1a [ 2914.764220][T32006] __should_failslab+0xee/0x130 [ 2914.769166][T32006] should_failslab+0x9/0x14 [ 2914.773870][T32006] kmem_cache_alloc_trace+0x2a/0x5d0 [ 2914.779249][T32006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2914.786667][T32006] ? ns_capable_common+0xb4/0xc0 [ 2914.791827][T32006] vt_do_kdgkb_ioctl+0x6f/0x8e0 [ 2914.797099][T32006] ? security_capable+0x92/0xb0 [ 2914.802069][T32006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2914.809013][T32006] ? ns_capable_common+0xb4/0xc0 [ 2914.814841][T32006] vt_ioctl+0x3b9/0x1c80 [ 2914.819443][T32006] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2914.825673][T32006] ? tty_jobctrl_ioctl+0x5e/0x790 [ 2914.830867][T32006] ? complete_change_console+0x200/0x200 [ 2914.836923][T32006] tty_ioctl+0x93c/0xe10 [ 2914.841280][T32006] ? tty_vhangup+0x30/0x30 [ 2914.845927][T32006] do_vfs_ioctl+0x84f/0xcf0 [ 2914.851141][T32006] ? tomoyo_file_ioctl+0x34/0x40 [ 2914.857536][T32006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2914.865046][T32006] ksys_ioctl+0xbd/0xe0 [ 2914.869248][T32006] __x64_sys_ioctl+0x4c/0x60 [ 2914.874095][T32006] do_syscall_64+0xcc/0x3a0 [ 2914.879170][T32006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2914.885243][T32006] RIP: 0033:0x45b159 [ 2914.889820][T32006] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2914.910899][T32006] RSP: 002b:00007f3999825c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2914.919515][T32006] RAX: ffffffffffffffda RBX: 00007f39998266d4 RCX: 000000000045b159 05:06:18 executing program 0: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xf9f00000, 0x0, 0x0, 0x0, 0x0}) [ 2914.928081][T32006] RDX: 0000000020000240 RSI: 0000000000004b49 RDI: 0000000000000003 [ 2914.937123][T32006] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2914.945283][T32006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2914.954045][T32006] R13: 0000000000000360 R14: 00000000004c462b R15: 0000000000000002 05:06:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfac30000, 0x0, 0x0, 0x0, 0x0}) 05:06:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="0100ce60fc90"}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) flistxattr(r1, &(0x7f0000000040)=""/132, 0x84) 05:06:19 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x800002, 0x11, r0, 0x40000000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x181000, 0x0) r3 = socket(0x800000000010, 0x803, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) fsmount(r4, 0x1, 0x72) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) lseek(r4, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380)={r5, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x1a, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x18, 0x45e, 0x4, 0x9}, 0x14) lseek(r0, 0xe327, 0x3) 05:06:19 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfaf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:19 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfbf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:19 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x900000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0x7, 0x8]) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x804, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000005c0)={0xf, 0x8, 0xfa00, {r4, 0x7}}, 0x10) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@tick=0x6}], 0x70) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000180)) ioctl(r2, 0x6, &(0x7f0000000380)="3c8b2315f125382aa5673bf8f6b1eb2888e2180591e589bd090ae75ea573104a8fc4d017a493238c6fb7625e0db0aa74411cd30474fda404fde79bb4b9297f9ce321d55d1e63093e8dd2de32e16a7e94c4a3378477871b0c2825524d5e6834c312bd7c7f5def596ba68f37de374afc2f61cd91158f90fc97b6a19da4c86791e6d0222aee3c10dfd0e89a") sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x3, 0x2000200, 0x10001, 0x7fffffff, 0x10000, 0x7, 0x10}}) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000480)=""/220) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/71) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x23, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x8}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3, 0x40}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x0, 0xc7}}], 0x70) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = dup(r4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086201, &(0x7f00000000c0)) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000240)={0xffffffff}, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r6}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(r8, 0x4040ae75, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) 05:06:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x2, &(0x7f0000000240)={0x47, "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"}) 05:06:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x10, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfcf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'veth1_to_hsr\x00', @random="01003a1e2410"}) 05:06:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b2f, &(0x7f0000000240)={0x47, "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"}) 05:06:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfd340000, 0x0, 0x0, 0x0, 0x0}) 05:06:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x2080, 0x0) close(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x220000, 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) dup2(r0, r0) ftruncate(r4, 0xfffffffffffffff7) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x280000a, 0x11, r5, 0x84aeb000) ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f00000000c0)={0x9, "74fc6c2e6a632f92d516bb6e9c6f0dccc5f8bc29270cb11a0c0c738f4cc111fb", 0x2, 0x1, 0x5, 0x0, 0x2}) socket$kcm(0xa, 0x2, 0x0) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pipe2(&(0x7f0000000040), 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r7, &(0x7f00000001c0)="d98fbecc799ee8926449b793e8647e93cffa6dca089f3800fdc32a3df8e55d87547f286d09f43cd7719ac46f8ddb15ba706ed340fde03c6629d1379c9ebaa4ebce", 0x41, 0x4004000, &(0x7f0000000280)=@caif=@util={0x25, "e49fdac3f70ad424fc8a890e4a1d6b2d"}, 0x80) r8 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000300)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r10, 0x4b52, &(0x7f0000000000)) 05:06:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfdf00000, 0x0, 0x0, 0x0, 0x0}) 05:06:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x28000, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r3, 0x0, 0x3}) 05:06:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b30, &(0x7f0000000240)={0x47, "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"}) 05:06:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x733606, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="010006bdd668"}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) 05:06:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}) 05:06:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b31, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x119800, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40c200, 0x6) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'veth0\x00', @random}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x22c980, 0x0) 05:06:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00020000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfef00000, 0x0, 0x0, 0x0, 0x0}) 05:06:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b32, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0xfffffffe, 0xfffffffe, 0x0, 0x0}) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=@md5={0x1, "20ce860534dd3d3fbf227c61af2f0266"}, 0x11, 0x3) 05:06:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xff000000, 0x0, 0x0, 0x0, 0x0}) 05:06:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b33, &(0x7f0000000240)={0x47, "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"}) 05:06:21 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSSERIAL(r0, 0x541e, &(0x7f0000000100)={0x0, 0x2, 0x9, 0x2, 0x9, 0x3c5bc1eb, 0x20, 0x2a5, 0x7, 0x20, 0x40, 0x3, 0x80, 0x3, &(0x7f0000000080)=""/89, 0x8, 0x800, 0x200000000000000}) 05:06:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b34, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfff00000, 0x0, 0x0, 0x0, 0x0}) 05:06:21 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'bridge_slave_0\x00', {0x5c7}, 0x545}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:21 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) pipe(&(0x7f00000013c0)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000001400)={0x0, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x3, 0xe9e3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a091c, 0x400, [], @p_u16=&(0x7f0000000000)=0x7}}) sendmsg$nfc_llcp(r4, &(0x7f0000001380)={&(0x7f0000000100)={0x27, 0x0, 0x0, 0x6, 0x5e, 0x4, "f5e2c2e31fa276e8ce90496d33ffad4d0b427ddb6fba905483ce730c0def826893d8ff5790bcb7683d2a0755300659c425498f4cdbe0eda97a29e0d526fdd3", 0x17}, 0x60, &(0x7f0000001280)=[{&(0x7f0000000180)="a4b8e63890d1e0ea697dda4c051d53201c23767522007803c63dc6d637e54f20d94f5aa806b68789e40299163de6c0b195c8847387e837724ec5f9c989771a5f697591162a7f9859970d8f1656f4da3569e1bf6ef0386164df4847aab80b3be1bfba8b006b9996c22c4fbb22b32dad0c02f90aabedba54a47a18d9cfe492de453c7808a0128767a0f0ca37cbfb0085829abe30c22a92bbbc93889b3d0d93ace11f5c75af13c541c25b25144cf8dc7724eb034818bd8d205b5c77084c5d443e12b6afa6f5c22def9431346628ff5bca6bf1e249f705278d294bdf9b2d36daa58044d2115ff643c9b3fc40d79dac40f4704b318b8a2080ce6972a38e8a201a71a948abdf52594e2bf5af7cb3689a50c5a0912d1f990cea790fc9b7745cc2aff9a0e18ca7ef2e49f1d22d09b0a1851e10ea482d3d186aafb2de239107e93ca606f6955fcfca20e931e4995308f86f5771ca3fa761a7aaaf89be652138d73827d6271fed376fb139d3391ff010a486f034572f4821e2dd3d64b278917ba0fb890125cb10905f9509238d8110fef92252209bc4752945d385450a2038e56dc4f42d32c1339b2ea08384b38ae57a32560cafdd3bac6f18bd6deb6e1cf4669865b61449568518365b7a75ec634a433e915d4d59960acb94986c532276626d840fe5f4a1db6175cefb701ca8d06fdd48c2fc9c7f4dc0e381e51f2fe631c1ebe758f0e6de1d3c22bc91abcdd819900cacc1c8088768bedcd5341b314b98266582f8e3bef99f3f7a2bdc89c6e8c95a0bf72a35bc079063f53ac72da0828ee572eecc8d7441f1a2f26261f9fc8ebe113a81131c7b2cf368fde409ab45a4345e494a8adb30158226dff1788b99f23c3f6d3df48c48f34b95625970293c9a76e6c64789d5100ea689f1279865c749b412a7b886bc3a97ee50831747cd7b71527ad987703db18a10568b54c56bdedc18b04f3b619f2a961381a18c6601e863fcd18f323d91ee6f97c7acdbb2532f18bed7171ac513c21642613005f0b01ff0043d1927d06fa289d29eaade1cff0d44ecad2e698494688e600c249f60b72daf316caceadc6fdebcdbc36ff74626e18b0c460ee4c3d014d2e16554e04ab1072a4f21dc6af1ffdabe370fb39e0223b0627ffe4e64ddc34fafdce9367f536ab311c8648742d2d0b500d9a2c3eb7d90e19dc265821e2ec0febf727c2c13e330636f314d9c5b9c84c6c3d7d3bb563235a1f521e7c6e39a507bc142a2bfebdcf19a63aab09b2fedee2c297ff28491a261fc6aa427874c669ac0583ce4a25bd74a43ebdbbcfce35f8cb2d0f6be1aa30179b214c55a7249dfe207f13172fd36044e2a43fe5087886338c74a844af152c53a3b08530c75162372e81db8b9a98a191705a8a9397713a3c6398d26d3c0c60e143ea00003373c79f10a67fffbe37e63610a2e7dd11bf25eb1c72ac1fc3ac423e56bb894ac9e02f78b4c1a684bdc2d653295fd7f72de739ad8196b57fa9cb05ac09e6a74935f6dc73f5970c802a44c0b564527c5ed825e4ad1652a1151b732f06f138481a5ad4a3f6f4f03c0bd23a80aad77135ead4ddb0f159f1bfc9439bdbfb1097cff3efa5d23a40c2f82b3a9ef726380391b866abfc659491b00bdcd9c75a3da63bdb6a8c664a9f5bd8c742d4cbe43e38b4f161653d9dadcb1fa2f460455d3d902fc163e0f00dab9a539f3a2244f461de6720ea4fd240ff88a17106476c19e4167836c8d7b14ab2b12dfe7a4617c02d4b2ee1a54ffec33808fa7a9e141efe161babb50f2fecfde5e27ddaaea08938a85901bda8aa8792b7b1bbd8a50a9ea423e22decd0d7c928848daab6388a1c60c48678923dfdc94e5fbe4e115278f80944a53d4968ca3865dee5bcc87008c6179b0a3a88ebb30dc6ac82b0f73e1c04c189b31d5f35706f2b360c53735f118e91e1e45f02d9089b91d2b2bc730b46acfeb3883596d9211ab23e780815174836fc6db599edba8ec5dfd62433e3652ac1222c600376aea478216092605373d210628b5a2c845f97a961aa9ce5f5060aadc9fe0a6f0d2354514d79a4e2e27422a35b8420b509971da93c79e9179f44ad55af03c3ece39f13f4da0d13b2cd7fc40675c01eb181e9c7b6a41d5ab05647847c3796c78da7567ba99ac8cbc734a05b88c33cc3c77b734518a81ae55e5f84dec81459f4aeb8e236a8a801cad8dbbc154f715863d72665671b559d2cc259cb64edb02149c74ff3a024e7c02b39d8b9f40a6863df48c4ba9306abfeb152e8d4e0ea09f1ab0a6dfca3521e7d1c727f3f2442256461903f0e6b5b8badd22c171fa14fd55d6b3f18f30871505389476a35d199c64e9b8f638e02ce9c48f3f7b1d01cf430d314fecfd48702bb66e2a46e2835d02584a8bedbac83418e8401a77bc6a2e901aad3647758f38e9e61e6a8c83f86a5853b33f543ead445ab3f396e367e401dc3e3542494bf6947ea0f7204522e3bc39da2a57c438f8b89897bbd2f8fa7371e341bfbfa1c1e401245fff622032b1368aa604bb8ff0c94195765e87ebba4e5a8c6535c952b5c6352b4427e749881d9c339e2b1158908b487a820b33bdf13183f2387c09a900e26b1de16cb2b3cafe3350b0b502b6c8ff2635cf0caa5d7ecd8e210841f8447e4a790ec8e7c8bf1995e199262f368b318743619d038f52779cdc87617825e7116d783e009589854a13c12145bc60d7d06bc46c10e919aa9d32ddaee7b8bd4f82db6789d8205cc77ba96349f3b1d9dea82e25daf3e27e9e27a3cf769e891f7e44c1bbe779ad775068d4544caf5f9e64d7ff48561511e59a40edc75691d70cace64f5968423474e858ea54c8b797d31df1375492e0e3365797cef6dfffdb61c2ae7f7acea1bdc109351b7a9a99e488049a3c7b1cce2e5eb280dd8dd66b4df58ec435dd1930c58cae2ee58313cf708662c48f5afdc9d6a0db935d778d6fdcfa4b49cfd9e84bbd380aba3298dff4249428467b4cacf28c71172b11c1acbc298f781e8399d3c28c80f4623759c2ee45b8b078d0d4fabc1dcdc10c05172738711bc4ae9b12c47d4a914a13cc93f10d9eeb8b3d8222d110ccba263c98efc335e2316011d3ba416fc487a449ded964ebdb4409f8b3462775ed4fe9158a4a0263a457b9a8de500dacbb0971906cc525bcb88d1064fa7975c49b6fe94a7dd2a92362502d955e144e8eaa8888f7598a2c3f49cd458d13391ef782af91e9282e62f90784d16562620a010b2a19daf5d14e2a8ac81c8ae298630ebc347d7464ac9447cf2bfe94d325623a38bae1aaeb35e189aaa1333b0990910cc7a8f39330c1c24811bad159580efaf4ea1bc2be509652b7c7a13243026870a41eb6327e2b16da9fb3c6550c479facab54aca3c8629c68b078b87f415f190f3149773b42bcc3bff8b7986d77aefb1921a46655dfa938b5534acaab50f61695d0b108837b97bfcc6e1648eb6da89f033dc38085246fe89f783899f95f3809894e19210572d800e1a5e420c35372c20f0e3dac687ff723713299308940ec3fed103b0e810e6df3279ee19f9e7edd387a0a4e21b9fc0b9e1766843921995acb2538a85426bbd50871e4fd985021f49d113e54492b3b4d712213d3e52cff8b3c56ed7fa951bca96b6fd84a090ddd46ca1110860c9d52c8b05bf4e63403fddc2a3b7420d2fbcf7241c7b8965687839571d3c581af01dee7f8795a1c2eac08adebeede2a41b390b530962d19894fb2bed00a2d6528ec4ef9c5afbe27b8609188646eda0a062d81563907b5a6067db51f7849d4bef8a620c6d093307e1a5cfdd1abc5efc27ffab35637a7924d95147a2adf615208bcc2b51476b3f1033e8e66ba559190afdbac96e61ba5c808b0b77df80bcb15ce0d843ccb9aee265e949993286c7e2cdbffb96d961f5be24d5ede2553b1bd38a186224da25f00c5896ddc21a1ae4947c5745d51ebcfd4f997e54bf5539c3ae9bf4d9e04943af44d29079103671b12fe8e3e5fb5864fd4c76b8c8e0b4f98e812f7f13abd82cf2828655a6e0757bc8fad8070571b2471d4bd4514c962112bb8e5fda9ca55599e811085dbe49abcb369557513992a0c4af180deed940e6bb8ecf908441ba961045a21f63514324a21dfc662e39c50fa8e0d7fea254c34b7eb9ea695ecb018b737c3b257da428646b085107db18bd6e18919a4ea4f74b40bcc9fb00b843e4b4aa8ee6e337fd816e29a8380093b3beeccef1567b7594bd6066601e53d53a30e334ecc1d8188f11796083d158d0a5041008a92a6becc0c478f428e239331de63a64c72a6acf8afd53be8816e412402b90d6ecd170e75db85c1a4ec0cc74a99cc3a8b480c92914583feddea540bc4bf770575dfd86eec5b03c5762a4fabf6bd56d9f7816ef7f5cc7a4a3da8242078ffa7b0a96d09c704d84c40d1c6ddce396c62ba3cd759f766ad232d3663613a2364a05dcb827ea9d5fcd837cef2bd9ea04ee69b2e5dc4660bec1f4ac2a56ca35a00c514d1dca42b04135afd5c3265d3003564015682f4b3ed23295ef360bf7990bb23597ef05a09de5dd7f7197506bf7f9073ce5ae335d3965821a0faabcaf1bf15f37be0d608f8833197e6edc8e9a8f58934b37bad3d1f17ebd43a75410bec6ad4fa483b047224ff3d118fdfdcfb0d332a161193bb11c11ac9ddf2553250a28de5359a4edfc03bc073d9b49d3b892b04d9162fc05fd0569ddc95da52359be773e17fe8df5450bc4a0e3e8fc9f3b9618f018b11f39c3e6d0780837044a3064f6564547635dacfcdd51a202c077649aa42c6a106b16ff777a42679fa89198c512c8b58328e366e3f435c01bf682022aed828f8da5119ac853ad964f449cd80fbfd55d53570f6c951f4163cb833d49c5ede1783943cf942ff990c6a168c0ab2d52a1b5ad5d513c7087d4f355417d95d6844e514c1da8e7635ed791a8b606eea1958a99dbdc0dbc12268a4c3da8df4b30f0d6876f7d601cc3d0cb67cb8c5b32bcc444584c2c1fb97636b4ca3c0d91cd6f79d838b310bed5b4d678584c115f059ad99090ca02a38a56035cfd5aa92053dd4e0d92fde89bd134014d65674381d44c466f2a5054528162aa274e2fcdb3873ef8b8214ceb4fdd6d8ae61a546ccde80c3b2d00115a49a5b0a794e0fc6fe6736372ec90aa1e8db86c87dab5508ad76b76eadfbd310d4c97d6c532ae71ee795e0d6eaf9c5e47a9bc90084c65adfaabd2be76d4f2d6eba2a8798e03e9fda1e997976b9542ecdb7dfedbe1e6f617a6058f4155d85c82c0246c047d8e54c3cdd69d9eb428dd696ad2f0b2eb5a07d6cb8781480cce443e04459384c32c6b0e97d1e0d8b683e44cc1b8541cd0f88ef857ffa970e0fd27c47d47a2cd15166b3d9ea2b872b01a846da45b5af858694aa9620999667b3c0dd092265f73aab3e7d9d371bafd83d0cd867835f0c3bb95770cf555df7fdead4540fb491b59671abbc433d21c5394e9ba621b382472e1577af583de724ddc386ca50d22722d515c0f18522c8ebb4edc8e195d1b55c76d3574165f84f0ac41c63635980a917473c575ff24337a1bb48c32b946fa5201b48e8043954837d54b86ae1a539ca58130ec25623d2631ebae9f861210af8988e1964afe37e24e9dedb0dca63a787adc2d93e9b68f0aa0336dbfe8c7a9bf9bd656d52e0d55569bb05769bbf64cd1b6e4e8ab760e68cda26eca9c5be95f9f0df722597bafab6fe190be03d74b4c2e5d636e34c40225a1c5875269266b941177ac6ddbb7d3fe39c00b1475c7e1cee0cbd2cd5bbe9c16f7e01da4dc882b898989be4b3c5cade0c22350781", 0x1000}, {&(0x7f0000001180)="42458274e07d31fdc4096c046560cc2a1081cfc14dee6382f768ed097ed25d671d4be5b37bb837887414dfc1614fb8d53d2e74895b9a8206757b7585befa690cce76169146a901d36a3624eb9d4b41ed1693e92b1d92cb980f87fb07aeedc970bc86cfc28f2be5e072c77209d6cc3896a20fa20674b30823025226d08beb0e06bb650212dc292aae4bb45c17a7e6afb33f2d4f2a6e2e4648", 0x98}, {&(0x7f0000001240)="b032af0f61441966118f5471c86b3640a5fe3c803900961b", 0x18}], 0x3, &(0x7f00000012c0)={0xa0, 0x29, 0x46, "c0b1c471d8942f75d2600f0b2b94afa4f4a544c6a17a4e32b5fbeebf68ff025e52ac29f85aa9bc88433f1df22b4bf93b73cd5327a13a83ffcebf90a8c611d0e4ceaa64af47fc1aad9d46c6a6e61e841292fccf02b1f75b177cd6e2a8a1a53d52202800c74ead7e94efb2c4aca31dccd06c47254e58220a7b92823e58da3b35681fc7d837b9212454b2"}, 0xa0, 0x2004c000}, 0x4000090) 05:06:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b35, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}) 05:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:22 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00020000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) bind$x25(r1, &(0x7f00000001c0)={0x9, @remote={[], 0x3}}, 0x12) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/131}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b36, &(0x7f0000000240)={0x47, "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"}) 05:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x80200) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000100)=0x10000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) 05:06:22 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b37, &(0x7f0000000240)={0x47, "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"}) 05:06:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000480)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x3}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r2, 0x10, 0xffffffffffffffff, 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000004c0)=r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x4, 0xff}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x81, 0x1f, &(0x7f0000000080)="04f8329509d3b4ef38e1ad4712da12d10e8ae82f4c80d80b2263e2e7200be12fd69111bc406a4b5a503b3b1920632ef4203415c3412b022d977038141d0b70a4b04629479514ee24cc955b5a6869c4baa4f1757e33a1f049628db253ddefa5ce52d01519ea4f44c74a51b2d5adaad60765bda68dc78d58e5684dc5ea38b172da3807b560da67e52691c688e45587be0491b0ed1c141e45d0785ecf0d74fd36f5b0421d9f3676bd46ecb87a3f985c5a9a28d5a003dc9eef974a2af47ac465b3150adde2f4aecbead495bc1c57b34a5dea280dbad3105aff050d0d7bfa9698001f1b4e761edc62cb7ef9ba811051b8ffa55ac62aaecb1140de0abc1c3643f82bb732ceb91aa55d092e0f71c10ac1b59e85948e0f430c8be835012b414b29290eb04169e92f7d21d742d3fb1663ef973189d16203baca63e5f875ebb0b40a013f8cc3d4c3e6782597830e573f62f30fbb498b651fadabbf5a730a97b304da7c9b2666e5bba73b17339acaae85b9abb1cb717e010c3c1a7e5aeae0a34073c6d6de5d8ed1db9f2e749e8f4107cf47a0b7f13257cc62518c5bb7eca3fd1f2304e7447d3086f382a349c24fc6397a00889a0a3d761301cf8883c17e037f4731c181cc318cc75bde6a6da50e244be83149c4c2c80f72a2a6351aacaa8da29230def09a9e9f0183d194abfb854a2a1cdc74157e369111574d3c6f77aa3ca5f2454fd11723e208089f20c94b5bd11c62fd68e955668143683634304a3a70162a6012b1101841a922583cfc300d0b77ead94164068e5a74a5036b2372852508a48360e35ebe68d7b7c71def4d0f655812b8f046c2cfc954b8c3f3a1af897fe25de2ad45d6bf42bdfa29805faf9255b8dfc5deec4daab04e150828142355feac95a6c48ce0a20390be4ca766d9aa251bbd60d6f4cbff91a4941dcb31a135007a1ced53105ba1788113f8667b808381fe57878dc8a2e96ea5052623949225dd798c57f02d685d0d8c2dec1ecc4a0cd0b554f5dc978831ee3255236cc3520e5ce93620e3bb9efad0c4d27c0e1a413d711687e8b79cf52b4f8c1d97f0da7c74e41a3890daaa0b2f79aeb18dc4fab66362b7e58aa2aa6c3ff9820be53e0f609686c69627631cff6043643716011f05e0f68d6eddaa6f9c3826fc7c32b23c013d1b86718072428422ddd093826536a26c3fa718f63b5f88b884938583d95ece57cc828f55b11cfdf49e836f5d21fdd0bffa40ec1f984bca6a4e510107b46895b0bd970309eeed9d8f139a7e9229ff57f6511410853ef515b105064b88b08c5e4e96d5cfc86116808ed4558b0d4363b4af8d40dc10fd0e59e706972ebfb8c0ef8a1a3403310429ee08ce2a4d413d572f5cd363323708bc9fe75e1ac9486a78b72ab011291bccbbf41702cad284970a5394152c31d6d7d4edf5c733165fd8c506e53a903a8bcffc1925"}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x13, 0x0, 0x0}) 05:06:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0}) 05:06:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @remote}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x1, r2}) 05:06:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc00000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b3a, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0}) 05:06:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000180)="d962176de876ed9ba16f82b6c43a821196263a8b16ea22a7ad7c5b1f9aff20d48bc4754b02a5db5ad68d7e3f8c0ae4d7ffd33a1e98107113b8f7c0fc671f766e2c39c4c8e1ef860458d37814720ceb5297cc2172cf7de6dd623a306d333d316f68fee9cba51ab16865915909fe586ff99842f32fce30f05eb1fa8d04cbecf35a0cd081ba8931d90fa58f5a15ca8d93e69f4acef9df6b5f86639b58c763db9db2ed34a4fcaff71462f24c43a4e99b7a76a1bd909d01a5ffe77f6b82b4358b5a46167089c6c2ecb271c13ced1c5464eedb8b634b8cbf", 0xd5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/userio\x00', 0x102, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x1, 0x401, 0x6, 0x20, 0xe, "5d62e4688df471f9"}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0xe4200, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000140)={0x2, 0x9, [0x1, 0x7fff, 0x2e, 0x1, 0x8000], 0xc958}) r3 = semget(0x0, 0x4, 0x210) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000280)={0x2, 0xd4e3, 0x8}) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000080)=""/122) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @raw_data=[0x95c, 0xfffff1ee, 0xedaf, 0x7fffffff, 0x3, 0x401, 0x3, 0x0, 0x0, 0x3, 0x7, 0x2, 0xa00, 0x6, 0x4, 0x24c339e1, 0x9, 0x400, 0x5, 0x2, 0x7, 0xa5, 0x7fffffff, 0x9, 0x8, 0x10001, 0x67f0, 0x411, 0x2, 0xc0000000, 0x8000, 0x7fffffff]}) getpeername$packet(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x14) 05:06:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, 0x0}) 05:06:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b3b, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0xffff, 0x1000], 0x2}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x404800, 0x0) close(r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0x0, @sliced={0x7ff, [0x4, 0x8, 0x101, 0xfc6f, 0xf897, 0x9, 0x2e69, 0x0, 0x5, 0x5, 0x4, 0x1356, 0x3ff, 0x3, 0xff01, 0x9, 0x5, 0x2, 0x6, 0x1, 0x2, 0x29, 0xd3d9, 0x1000, 0x0, 0x3, 0x8, 0x3, 0x3d, 0x80, 0x6, 0x200, 0x7, 0x7fff, 0x7f, 0x3, 0x0, 0x0, 0x7, 0x6, 0x101, 0x7, 0x401, 0xc3, 0x3, 0x7a, 0x8001, 0x9], 0x4}}) socket$kcm(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @broadcast}) 05:06:23 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:23 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:23 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x105480, 0x0) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000012c0)=[{&(0x7f0000000080)="7648f98266174b73627ae8d4cbee1ca920b77448a14414ea33010e9f96d45a6ce7719ed44113641824285b5054fc874f8ffebb2c58f780c1c00f547de9d2661538cad40461fa19604a856bf47980dc4a64be6aada59ed7c155f84f0ea948e4a1fa0d4fceed7b69ccf6eefaf555da6d0da84d384a3266208bb341087be6cce4c693180b2ec9ddcdf805b70ce1f2d20729f3a14a34fdd67c017b6cec088063945f6f9931b486cad2a4c194b9a51df82e4e4f4159bdc3d3168b6d8c53324cff59f21ef7b90528a9d6c89507485c024a9ebfbf2613247ed77c44", 0xd8}, {&(0x7f0000000180)="1384b53dee4ddffd6d96aca49a1b85340d96010d6ee6f9358159c989c025fb157cedcf8a5784516b8f8f816d0c21106a87d5f646b8198588ad50ac8aff177c0c9d5882ca6cbddea70018625bd3bdf02825ef853b757696faabf2649d876f3eaca61f04472c72115d61abe2fcdd8395e2e9efecf6188988f10fb00ecb2e25cb6247770b628a4904de8dee2b0cd709a9cd9a0e6b782d848df194d63c0136f9ddf7cd5bd03f406c7a3095b3e4b3086c0904b80976e9780db3b7a329ee10f0430b70dc95d77c85e4da82745345a31ba52c2c", 0xd0}, {&(0x7f0000000280)="2d5c0381d86fd3257fcbf6674b53ae1aa474cc763d6b75bdaf718a8d0074e99dae6308ffd622ba677dd8c6a6295c25dd56203189732887c88e6a77871cae4a7426c5dc019d1a1ce8b5de4a51ae83f4befe22e55b4324e98237d50a777f4da09154cd9082559cccbaef1d4165f0fdd944719bffeafebe02da6b8b34317cab950c8de6717bef9aaf9759612b1c11c08017b55471693a606a66ecd68f35c56616673574da1dec0e8bf101099fd79d75a7bec56c60820b5827fc812da80e9f2e3594b58241be4c80d1021640d91848646e68d85f9e236233a73a55265f542e4cc9e320ce3f27a7888c34a67417c186ed8a708b2143e2b7189d424f5b76afffea5d7222e0434f8828132b07f813f53bd6b62feb28695350c6eb3df276b9f05da12e1c284dc104c170d2964863b39209e641cd64427c132e9f00885f8290d2871b2f2c0749c17bbd71fe03ca09d764909d12dfd4955e0db523e4ee8d767303f6cb7c220d4e643e1807f8000da5615eaacc4df98373c549877e46a28384248ac2f248780431c2130f7d967f1e68f805450061d2fbdac66fe98646533175e7602aa8c28e859c4da7eb942af32612d1a4b1b236a0beb9c546ac7b90f9fe23190a5e726ced76dff2e9305c04b1fc99aab5acf8b000017361e8bf64e22dd6d330013d37e9aadd4ef699ce559745c2c5640bfb4d50111092df9c89536a88112a0afaab75da808814aa34f2682768717426d8f677f6bffc6ce522dc76541f0310a1e18f49422e5c70b65be72603ed73eb53b1beb9716d5c94c8f29a7454859eb56cb74a135c2a4671f533b7578e1078a38d01af1df2abb1ec2444f011b6a21f6f3603d1dae83f3cd817377d884963b984debf57a5e62196dac4a1a98ec5a872973361d39469fc5d8b729c6b42e5c37b4a2b4de7e7d09e9835ba363b974624ea95f015b48f758798d7db6389056ffb327bc696e41e66c1b16af791cbd51662c8318950f251448b6e4f3b1be278367f1640880a0738b6dd8976caf0a733366f3c30ca266041053ee672ef50836efb3c8e02f041c2be4f9ffe4fb730f938bb841b51fa2a7211b58585ebb0ccab14446c92b101a76f53349fede997b58d1964a9961a83c5062c0cab423e2a31a2ae796a60dc29ea45feb11a8efb94188e8e615813d34081fd879d923c9cbb6f7a26a8faf9b677f2a4d583e84c8954ad4c5499dd6bee528deb0c8f158cf53bac6c033cbd9b336471da870ad368a62b67fd68c53bd972753b6085c10e6e58de86127c250e0b252a3c481462ce3fd99fa03b6cca45460b1db3691614d8e85ab078a73a9a102ec1f980b3c66f491df6e591866df3fc71a67fbc626040740f15a91098c3d523072a90341c404bc7fe3399c399281bba043acb4afd50b0bb0e4b89d96e3db254d735351027c1140018ade1d8d7c9c12db176621aea854cd43b4cf6a3c5242ce296ecf6abdda8b2743f4a315c483b0e438facbb6019dc41ab7ee0d2c71191ca614240cf2fbeb72c0d1ea327ea9685db4f3e90de66222ea88f698494636e26d4231d77de3bcf4e98ad241c3845c3e5afba2403b023687f560cfdf6be461573bd0b5292c74805e1cc8c8171171723c0233fce3d14f4ba1cb666441e01128d005639272d2333f4d2f31ea2364a79fb6601c3c477dd7550a53fa83f350d56f8ca7c43e8d40cccd05cc2c6c40c9ea1895edcba8064c5cb5b9b06ab21342e6319d0d0ad804f65d6614882d74ed4b7539e5e6b48bb3a8c63c8863da85270cf05057eec96043088b232ceee48f0c982c470b4629ceac74be99f9c49acd8f4106ade46c4f4a9770d46395046fd3f32ddc278db86f513203de9fc213320c37a6613d57fbb248318b6c399d0b9ca2148d17afa480107910d673070c3f513800ef4aa5892c16a522ed2a02471cda7de21b58e9b29abef7418a1514d84d31d98d4e8e4590852426b26ab20769c1e43f594ac4b5f7a1d5425d557ce75118d0ecaaca3bac59c2a831cf72759f26c364461d83690a1ee59690c67ae21ba92642fba5ea6c5a0a461fb7a3b6a824ad38d8b3193e359ab92a8e8323a62f8d960714fbcffb80aa5c61c78ede5d59f53656f6e514c9b2bccdf0baa20f68bc65b2357f0302d5ac9cfc36c776ee677d4772b547d82f1110b71cfc432a221e3f1c947a6d6a2a14129ff0bc4905de448feb00fe666a2bd8697d7d143369a283470a77ac55613e94376854dff8e20a3555a2a48e832545c3dff3cf139c05f4e63b313498bc816aa223fb8ad9dd93cc71d8ef184c30ec062e6cb731abf72e1b449bc26714609f3d5c47ab3c80b42dc6bc37ffafff81368ca313020674be2ee2786c4fcb7479d24c85cbedd29db6095f4051585a11facb1f196393fa0ec6813fa5e49889bfba0c8f63ca5b7751177e0eba37e6f533f894bf3a469ab4f5e86ff2b5ed201a1df8a82efdaf9cd699dfa7afa8367daa5ecf3c0d316dccac805eab501d990bb09ccb48c535f292c221833d8442980994f41f9277ba65530d18730ef4b5bc779b7d394b28f4809d6ed13ac07aeeeb44d8b0d6be24142ca87dcc545f422afa39ab6bb079ad120a067a87fc385fffe96b82951132bcb3ce1d4f196bbc9ac071ee167f13ba22461437e28873df0e701958201927b91986f92f31a4a87a187b1bd2b3a319b03d0ccc412380e69e9eefb830d6d6f853cd1973c553abe1f631954c0a02e20bc8dcedd07b0dc8ccefaa5eb1f95b68269e6f5425706de306d6dfc2475d97bb59fbaa69befcc000a3e97e69b83ba5642dac17d84d8ce6265868f823cf1024371d85e34d7fe72fe92caacaa4bd56f1fe5d51f2f3b3973eabdc2d0d1c8f87867b4b79f648edc78f54b22e2dc5accfcf24d2e8dc3e30017858b259a8665e412fd7efb58ce4046f992cd026c59cda69b0743052895e8f39b7ed546e669a7c815bfdaca6a9b4be790a354b22ac9c2030909250c5436fcec7f73539fba10c65ab90f1a824085950ca5416805a141817f4936e4732db330d212425b2a5fd4d8cadc28d8351dd2c16e9eb8aaa86ce98661cd11a1d3598968a496556ea8911d5ea2fdd2c3836f7f471d8a55c8dec3b8747e0889607418cbce1af8e99ceb1d5d59ff69207e98130834fa05a3b86d348b8b16fa9d897501a1720f098c72ebf3e1a3c2f4005f36af85f837a0daa441f2530137f0fb56daa29065f865bde080f2336f488db7bd099d7ced18624f4a52b7d5e74e9a981465a8369ecd7c655d5f1d4026e267f8921624c9689a7629fc6c103e05d4375187caeefc38ec965818cd2dcb2ccf487a92c5f5028fb65c38794f406ad0816d01b29b9d817816b0968e09b3045a7d0cd6bdb160b460280f98a62be3e3915faafa0941fde7dbc5dd2d725851fd08fa361dcb970275bd06c026ee63d94e882656ea94bb77609d494a63fe9fca1c8d201888193ca47a29d04d1519f4a890b317cc4fe6ef4eab601c0e2010928bcad655e6fac402997a0e4c4280278dd21ef3db01fc9c0f31839b28144f2b59f5e549b7512b398c46ce65844717f55cdaee64b02f64869b0746c24d725ff9085a4613a26511b8e4a9809715d4f28cdb25dd5305fe0f20a3fedfd3f4f693bcb84fdb4bc1c95037cf0b44256ace87a3f546b8c3e039aad25494a9a137fddbb08cef4d2f0817a82ae6fec6faaaea2822c57779a09cee2d50b2f5303c02a019fa4a21086349e921b952002b5ef10cfcb870e60ed056705a044a7543b478ae9abd41b248c7a35d28f662103e2dd558ab2fdeb21fa4a4027923f42deb685884956cd5cc80169de531b4ff57c2472eed9f1528698d1f972a3e946e72a167a843a0b4d3056eeb6d27e6d12674e4b7065e7726b2d30c4a208cca6df1b6c94d218f9eaa8661abe8d004d932bae2f3f23ae1bff798437c4716c8f2ff9216af73fcd9b6c0877a39916183f3e7f51a4f634ca33a3ebdc0cec51c2bc586d0af779a90fe71dda9397eddbd257da834ac33d9d897ae01f143daf2455e53c539707d542ff7407297d6e97bb8e198e081da8ce14211a21ca2dff18420036e83cc7663be6068cba915f9e7c12e53ac36ed2ee2499f52eb6cb2200957fde1fd8762889ef9da566a5cd6b00cf1374e03702914dede2ba1ab07ce80b71dfff5e4f3e55e482ac42d70785ca9deeeec1e943f19f7bca1c591fee5ac409d01849f98cd5281cfd9f8c47ca8c92cc30b2b6de7eff422d3ca7641eacc97b696cd96673028cf0d50aa9533d0cf77afdc07803e57626f6674cf0d477d0184d4ead23fba9895a91a7f3c3d9ddf5ec2b4d09c609ee22fa40d3f7fc011f2aa68182e505eb169e236a17b6c726db3cdc9889724ab16efc81f4bbec4dd1125feb0c82c59debac28dd9b7485cee28c308f7d78c91447197e00c08d6029b46ec9d4d853a9aaa1c6833e8c89cda53a10aaa77e9f393ea32bb522c4d0e789352f4a7cef24cecc03e745035cc02d640330fa4bb8e6bcb204d19cd93a7ae09c762fa5fa28f74ed2ae1205705d2b515dc075237f61cb0bf35a81fcaf1ac59f315ed5036f0d54a7bdd196f47344a33be42de8c4807b5a3e7eba558eacd7edfc0e5f47dec8ed7fd197b8571326538d74b7811ff2c7ee07e392abe5e93390d3b25024063ae8196548009f9614b8f5bcfcd54a2b453ce04eb87b8706f97ec6c62ad2adcb308c74fd467c69e3350a24674e8c361c6c6b0d7049b77458390571a5982cae99365a0d5d2b8b07684e17fe898e0537bbbac605cb1fc5db7ed7c6fccaa823dad1f5b4b731ea35a37702af6bb7bd2db5207741786179c1d9e045e4e372ce97d8edfc86b46af0fbeafb88c02a3e79e7704309ee04dcf0a123de6a9fd68a6db6eef3400e79680b1297413533d11fbdd0008d591358c0a2ccfc2c1a23291b4f7267f23f517e7a1d1c3a32bec41556aba5be196652fd79778cf89505c751793d2112e4b3e69110ca0c9e82dbb726c77ba164f51549d9bc834687ef69a46431702ed2418cdad36fd7d2e0fb243f18237005372b9bf586084419f9e387a434bfc945e538860936c066f27503dc218bb465a72a6847d358a5affd5ae8e27737510eb29ae2d5d7c46a49a03a86d529ea8c4efb59ab90a157cdc52f608d8f447f3b8a528d17d40814a2ef0b7f54c9696ee09e7201d0ce10f1c107f413d661538353b3be3cefc708c45d7754e87803affc9a49e56315ba950026a5a26ae78d7d8c067c5af9d03e1660da6aec4d5cbc06145c5950331f72cd77428c423c154205b13139724eda522167026b44837f6aa6ace6c089931299bde0a7a8b037ff5573950cefe0c508865587cc458b643d9852978eed30520d207ccd4dc2deee2b5c16221753e1c10aef3e31188f31689d6fb6dfc58f40a3f5b0eea5df532254edaa3f04b754deda4a8a995a2db615a0ee56dc576093f73eb9c8f163653f115803a0a40f77c2b4ff093135432a4d58546e1f3604ac089fc28daac3efb80cf59613ba75fdacec63019493ba16afde64c5854674f17c00c48dc244c446cd2e660278d3903f89c34c3d325d331e384d71d748e085bac1dfe9da994ac4790e14fbad118d855594c6e88e996fc7f22bb1bd1aa8ff7c070a0bb416b49633d180a0465b1523a8c0bc80243238c439ff61783fc94ec4bdcd6e5efe92b61bda92e0d44534d9544e197b7e99678f995e18d1a393bbb0cf7fb21ee45023dee69b22886d7969decd6eed0535cc23a20b99d4d8606a10236f3d25dfe7647f1a2e47fed3d57b5d82c088d22f37f732e3473f68b2eb9d6513b1bf95a05d02e8409d8812d1baaebab6a5b84", 0x1000}, {&(0x7f0000001280)="6dbe2a05a022d71cda423bac77b8b1937aa04430ae1d670d547ce1", 0x1b}], 0x4, 0xa3fc8b37855cd89c) 05:06:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x0, 0x0, 0x0}) 05:06:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b3c, &(0x7f0000000240)={0x47, "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"}) 05:06:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xa4) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0x2, 0x5, 0x4, 0xbbb42963ae2122ee, 0x4, {}, {0x1, 0x8, 0x80, 0xd0, 0x9, 0x1, "661f523e"}, 0x0, 0x2, @userptr=0x7f, 0x5, 0x0, r0}) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000200)) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000280)={0x19b, 0x15, &(0x7f0000000380)}) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20004001) 05:06:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b3d, &(0x7f0000000240)={0x47, "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"}) 05:06:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x0, 0x0, 0x0}) 05:06:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0xf8341, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x7, 0x13, 0xfffffbff, 0x0, 0xf, "a5f549530fda48505b5d8be35985ab9c017d6c"}) 05:06:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b40, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x0, 0x0, 0x0}) 05:06:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4000, 0x0) close(r0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x800, 0x10400) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r2, r0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x3b, @multicast2, 0x4e20, 0x4, 'lblc\x00', 0x2, 0xfffffffa, 0x62}, {@empty, 0x4e21, 0x2000, 0x2, 0xb5, 0x4}}, 0x44) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x41e003, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f00000001c0)) bind$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @empty, 0x4}, 0x10) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x4008a1, 0x0) connect$l2tp(r5, &(0x7f0000000280)={0x2, 0x0, @multicast2, 0x2}, 0x10) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000300)={0x6, 0x100}) r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141002, 0x0) socket$kcm(0x29, 0x7, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) accept4$tipc(r7, 0x0, &(0x7f0000000000), 0x80000) 05:06:24 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b41, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1a, 0x0, 0x0, 0x0}) 05:06:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x426000, 0x0) r2 = socket(0x800000000010, 0x803, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) fsmount(r3, 0x1, 0x72) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40002200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="200027bd7000ffdbdf25010000000800060005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x5c, r5, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x100, 0x20]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2400c8c1) fallocate(r3, 0x3, 0x0, 0x8020003) lseek(r3, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r6, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r6, 0x1a, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x80000000, 0xc05, 0x6, 0x1000, 0x5, r6}, &(0x7f0000000100)=0x20) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x2, 0x100, 0x2ab8, 0x7, 0x5, "040000007f000020"}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b44, &(0x7f0000000240)={0x47, "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"}) 05:06:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x0, 0x0}) 05:06:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b45, &(0x7f0000000240)={0x47, "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"}) 05:06:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:25 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r3}) 05:06:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3e, 0x0, 0x0, 0x0}) 05:06:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b46, &(0x7f0000000240)={0x47, "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"}) 05:06:25 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000500)={0x5, &(0x7f0000000080)=""/213, &(0x7f0000000480)=[{0x7, 0x20, 0xffffffc1, &(0x7f0000000000)=""/32}, {0x640, 0xf5, 0x0, &(0x7f0000000180)=""/245}, {0xffffffc1, 0xb5, 0x94e, &(0x7f0000000280)=""/181}, {0xffffffff, 0xb7, 0x5, &(0x7f0000000340)=""/183}, {0xb780, 0x64, 0x9, &(0x7f0000000400)=""/100}]}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0}) 05:06:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b0, 0x0, 0x0, 0x0}) 05:06:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b47, &(0x7f0000000240)={0x47, "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"}) 05:06:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x9, 0x800, 0x2}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000000)={0x1, 0xffffffff, 0x13, 0x20, 0x1000, 0x0}) 05:06:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1f9, 0x0, 0x0, 0x0}) 05:06:26 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x2d1, 0x0, 0x0, 0x0}) 05:06:26 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1300000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 05:06:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x47, "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"}) 05:06:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x300, 0x0, 0x0, 0x0}) 05:06:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4a, &(0x7f0000000240)={0x47, "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"}) 05:06:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x313, 0x0, 0x0, 0x0}) 05:06:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, 0x409, 0x6, 0x8, 0x3ff, 0x1}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x4, 0xafe, 0x3, 0x2, 0xf, 0xffff, 0x6}, &(0x7f0000000280)=0x9c) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @reserved="5f2596396790f079b8fd4416aa7a53fb1f520c7eabe76f89881b194854c3de6f"}}) 05:06:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x31f, 0x0, 0x0, 0x0}) 05:06:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4b, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2923.038718][ T26] audit: type=1800 audit(1579410387.021:187): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16536 res=0 05:06:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x32d, 0x0, 0x0, 0x0}) 05:06:27 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:27 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4c, &(0x7f0000000240)={0x47, "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"}) 05:06:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x26002, 0x0) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000080)={'netdevsim0\x00', @ifru_hwaddr=@broadcast}) r2 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @ipx={0x4, 0xfff, 0x800, "4eb6c481e467", 0x25}, @phonet={0x23, 0x0, 0x3, 0x56}, @phonet={0x23, 0x9, 0xe}, 0x38f, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3ba8000, 0x7, 0x7ff}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x43b, 0x0, 0x0, 0x0}) 05:06:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4fe, 0x0, 0x0, 0x0}) 05:06:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4d, &(0x7f0000000240)={0x47, "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"}) 05:06:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) 05:06:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x500, 0x0, 0x0, 0x0}) 05:06:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4e, &(0x7f0000000240)={0x47, "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"}) 05:06:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x16, 0x13a, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x105040) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001100090500000000000080001d6b5cd1", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [], @rand_addr=0x3f}, r4}, 0x14) 05:06:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x581, 0x0, 0x0, 0x0}) [ 2924.173005][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 05:06:28 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b52, &(0x7f0000000240)={0x47, "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"}) 05:06:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x25, "2401aa76a4ad07066baf5db1d381f00bb7720510c79f2212f97728f7f7a008d7", 0x22, 0x1eb, 0x400, 0x2, 0x3}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x600, 0x0, 0x0, 0x0}) 05:06:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b60, &(0x7f0000000240)={0x47, "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"}) 05:06:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x67a, 0x0, 0x0, 0x0}) 05:06:28 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'cpu'}]}, 0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000380)={0x5, "7239b821f88a78e5724ee779ac16283aa89b4f9b6d28692f463832e5363cfbb40344fc8c8befae6737256f0a3960c3403089ad271458bfbb62ffe99721995caa39d147c65acf26ca4db2183446bc0c0455ce3883f265e98d98e5126b74cd6d05604b48aedab88afe7065a9948b350e212a00b1fa61c45c08ad9c616deb9c486626699860aaaa8daadb319419da1f1b9680c62704ebd395c86234fa7c808c4b2d9dbcaff78a01d31ecc0f2e9130615744f97a7f724454f594d4399d7652d9ab3237214534d5af32c5870285f364040aa802acc211f1f6bdc62caf7d5bea51f2b8d74f62f8c0278f00ba82195b81f8f3d3b9810b7843dcca7f7469c536f893ee19538f1f0d50f0592047c33f73e3b880db6aceefdff52000334e1898aba86896a27a86c9a0deeb12f9165ac447849636389fab8d058c97dcce6c6486a76509206ef06c73b63396d01d067acf1d3694a46a40042af2487e51fbeb15d50ab8b0e3c699b458fc0429c278b02858be5311ce55d47c8819c5d3295035fa8b59675386e315cd66f06aef7819e2c9c05be1b8294b453f79e4bebd4718f96ececef8f515fbc065397f0e79a3326aab7b80ae87db9364815d92768f2fff5ea2a98e485df01039425b70a93ecb254aacc315e58fdc393dc3ce99f4a1206ee4ad178c8b4a2a7beb1de85e275e05c792d619df7cb28b6cdd185bf7367cf770626ec9e8bbc14196"}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r4, 0x0, 0x0, 0x1000f4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) recvfrom$packet(r4, &(0x7f0000000080)=""/27, 0x1b, 0x2001, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0x3456, 0x7, 0x0, 'queue1\x00', 0x6}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b61, &(0x7f0000000240)={0x47, "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"}) 05:06:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x700, 0x0, 0x0, 0x0}) 05:06:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b62, &(0x7f0000000240)={0x47, "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"}) 05:06:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xc, 0x0, 0x0}) 05:06:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7cc, 0x0, 0x0, 0x0}) 05:06:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b63, &(0x7f0000000240)={0x47, "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"}) 05:06:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x68000, 0xc) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 05:06:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7fb, 0x0, 0x0, 0x0}) 05:06:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b64, &(0x7f0000000240)={0x47, "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"}) 05:06:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x884, 0x0, 0x0, 0x0}) 05:06:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b65, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0xf5) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r3, 0x4b52, &(0x7f0000000000)) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000080)) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240)='/dev/udmabuf\x00', 0x2) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="12000039ded07bf0"], &(0x7f00000002c0)=0x1a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={r4, 0x9c, &(0x7f0000000380)=[@in6={0xa, 0x4e25, 0x5, @remote, 0x3}, @in6={0xa, 0x4e22, 0x2, @rand_addr="0f05ed8f4aaf372a1bf6720cde2decc8", 0x8}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x782, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x1fffc, @loopback, 0xc34}, @in6={0xa, 0x4e22, 0x9, @mcast2, 0x2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) 05:06:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x995, 0x0, 0x0, 0x0}) 05:06:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b66, &(0x7f0000000240)={0x47, "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"}) 05:06:30 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0xa1d, 0x0, 0x0, 0x0}) 05:06:30 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:30 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x341580, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x2, 0xd97, 0x0, 0x7, 0x9, "2b51c1131fe1cc20be3fc9092ac7ef6032fadf"}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b67, &(0x7f0000000240)={0x47, "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"}) 05:06:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0xacc, 0x0, 0x0, 0x0}) 05:06:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b68, &(0x7f0000000240)={0x47, "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"}) 05:06:31 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket(0x800000000010, 0x803, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) fsmount(r3, 0x1, 0x72) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r3, 0x3, 0x0, 0x8020003) lseek(r3, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r4, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r4, 0x1a, 0x6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r4, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r5, 0x3, 0x2}, 0x8) 05:06:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x401f000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0xb4c, 0x0, 0x0, 0x0}) 05:06:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b69, &(0x7f0000000240)={0x47, "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"}) 05:06:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b6a, &(0x7f0000000240)={0x47, "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"}) 05:06:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0xf64, 0x0, 0x0, 0x0}) 05:06:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000000)=""/34, 0x22}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000440)=""/39, 0x27}, {&(0x7f0000000480)=""/225, 0xe1}], 0x9, &(0x7f0000000640)=""/182, 0xb6}}, {{&(0x7f0000000700)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000840)=""/74, 0x4a}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000900)=""/50, 0x32}, {&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000980)=""/249, 0xf9}, {&(0x7f0000000a80)=""/42, 0x2a}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/20, 0x14}], 0xa, &(0x7f0000000c00)=""/208, 0xd0}, 0x6}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/213, 0xd5}, {&(0x7f0000001e00)=""/44, 0x2c}], 0x3, &(0x7f0000001e80)=""/176, 0xb0}, 0x7}, {{&(0x7f0000001f40)=@l2, 0x80, &(0x7f0000002400)=[{&(0x7f0000001fc0)=""/15, 0xf}, {&(0x7f0000002000)=""/213, 0xd5}, {&(0x7f0000002100)=""/213, 0xd5}, {&(0x7f0000002200)=""/217, 0xd9}, {&(0x7f0000002300)=""/193, 0xc1}], 0x5, &(0x7f0000002480)=""/50, 0x32}, 0x1000}], 0x4, 0x10000, &(0x7f00000025c0)={0x77359400}) 05:06:31 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6ceca5d73e020000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b6b, &(0x7f0000000240)={0x47, "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"}) 05:06:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0xfeb, 0x0, 0x0, 0x0}) 05:06:31 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x47c4004d3f020000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x6, 0x301000) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000340)={0x81, 0x6, 0x4, 0x100000, 0x800, {0x77359400}, {0xd1942f452b5be360, 0x0, 0xe6, 0x1f, 0x81, 0xf9, "a49dc257"}, 0x200, 0x3, @planes=&(0x7f0000000300)={0x9, 0x855, @userptr=0x69, 0x4}, 0xfff, 0x0, r6}) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000003c0)={0x0, 0x3f, 0x9, 0x3, 0x3, 0x3}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000440)={r9, 0x3, 0x5, 0x7ff, 0x10000, 0x80000000}, 0x14) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f00000000c0)) prctl$PR_SET_TSC(0x1a, 0x2) r10 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x900) setsockopt$packet_int(r10, 0x107, 0x3, &(0x7f0000000280)=0x4, 0x4) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, 0xffffffffffffffff, 0x1f3) r11 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) write$cgroup_type(r11, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000480)=0x1, 0x4) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b6c, &(0x7f0000000240)={0x47, "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"}) 05:06:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1303, 0x0, 0x0, 0x0}) 05:06:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x148f, 0x0, 0x0, 0x0}) 05:06:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b6d, &(0x7f0000000240)={0x47, "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"}) 05:06:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2004) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:32 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4d01000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x14dc, 0x0, 0x0, 0x0}) 05:06:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b70, &(0x7f0000000240)={0x47, "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"}) 05:06:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x414000, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) 05:06:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1570, 0x0, 0x0, 0x0}) 05:06:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b71, &(0x7f0000000240)={0x47, "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"}) 05:06:32 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan0\x00') ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x10, 0x0, 0x0, 0x0}) 05:06:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b72, &(0x7f0000000240)={0x47, "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"}) 05:06:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x15ba, 0x0, 0x0, 0x0}) 05:06:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x40000, 0x5, {}, {0x5, 0xc, 0x1, 0x20, 0x6, 0x40, "15d20942"}, 0x3, 0x2, @offset=0x101, 0x7fffffff, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000374d55c9dceda06fba44359e351f827cab154ac0751e7", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fedbdf2505000000050005000000000008000900020000000600020000000000050021000000000006001d000600000008000c00010000000500050000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24008044}, 0x8080) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000200)={0xf040, 0x59555956, 0x2, @discrete={0x2, 0x3}}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000001380)) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000380)={[0x9, 0x5, 0xfb8, 0x0, 0x2, 0x95, 0xffff, 0x37af8a15, 0xfffffff8, 0x1, 0x7, 0x8, 0xb5, 0x401, 0x1, 0x2, 0x401, 0x1, 0x400, 0x10000000, 0x2, 0x20, 0x7c73, 0x9, 0x9, 0x3016, 0x101, 0x4, 0xffff, 0x3f, 0x7fffffff, 0x200, 0x7fffffff, 0x800, 0x100, 0x3, 0x300000, 0x8, 0x4, 0x5, 0xff, 0x19b, 0x200, 0x9, 0xc1b8, 0x3, 0x0, 0x4, 0x39819985, 0x2, 0x1, 0x40, 0x4, 0x20, 0x7, 0xaf5d, 0x5, 0x1e, 0x0, 0x2, 0x80, 0x2, 0x0, 0x5, 0xffffffff, 0x1, 0x9, 0x10000, 0x3, 0x11f, 0xfc, 0x2, 0x800, 0x7ff, 0x35, 0x8, 0x1000, 0x5, 0x1f, 0x8, 0x9a1b, 0x0, 0x3, 0x0, 0x8000, 0x4, 0xffff, 0x3ff, 0x1, 0x4, 0x0, 0xffff, 0xd97, 0x3, 0x8000, 0x4, 0x7ff, 0x5, 0x5, 0x5, 0xf5, 0x3ff, 0x9, 0x8, 0x8000, 0xed7951d1, 0x200, 0x5529, 0x9, 0x4, 0x8, 0x4, 0x100, 0x7ff, 0x2, 0x31b945a7, 0x10001, 0x3f, 0xffffff8b, 0x4, 0x40, 0x3, 0x4b, 0x2, 0x1, 0x9, 0x200, 0x1ff, 0x2, 0x7fff, 0x9e02, 0xe821, 0x101, 0x3f, 0xb1a, 0xfffeffff, 0x4, 0x3, 0x2, 0x1, 0x7, 0x8113, 0x3ff, 0x1, 0xffffffff, 0x10000, 0x9, 0x1, 0x9, 0x7, 0x3e66, 0x3, 0x5, 0xf4ab, 0x81, 0x0, 0x3ff, 0x1, 0x5d, 0x7605, 0xfffffff9, 0x3, 0x8, 0x8, 0x3, 0x5, 0xffffffff, 0xff, 0x5, 0xff, 0x9, 0x0, 0x9, 0xd90e, 0x7fffffff, 0x401, 0x3, 0xff, 0x6, 0x8, 0x1, 0x684, 0x6, 0x9, 0x8000, 0x2, 0x101, 0x8001, 0xddf7, 0x9, 0x3, 0x7fe00, 0x9, 0x7, 0x4, 0x9, 0x7, 0x7, 0xfffffffe, 0x9, 0xffff, 0x400, 0xde42, 0x0, 0x9, 0x97e8, 0xfffff633, 0x7, 0x0, 0x1, 0x80000000, 0x1, 0x40, 0x3, 0xf6be, 0x6, 0x5, 0xffffffff, 0x1, 0x8000, 0x3, 0x7bc, 0x800, 0x8, 0x4, 0x100, 0x6d3171ab, 0x7, 0x4, 0x1f, 0x4, 0x2, 0x1, 0x8, 0x2, 0x5, 0x4, 0x9, 0x9, 0x9, 0x0, 0x68, 0x6, 0x146, 0x1fe, 0x4, 0x6, 0x825, 0x0, 0x8, 0x0, 0x4, 0x8, 0xfffffffe, 0x18, 0x9, 0xfffffffe, 0x81, 0x5, 0x1fe00, 0xffffffff, 0x7, 0xfe, 0x2ec, 0x8, 0x5, 0x8001, 0x4, 0x20, 0x8, 0x6, 0x1800, 0x4, 0x8, 0xffff, 0x2, 0x0, 0x1, 0x40, 0x6, 0x0, 0x1, 0x0, 0x81, 0x7ff, 0x81, 0x4, 0x6, 0x3, 0x2, 0x8, 0xffffff9b, 0x3ff, 0x6e2, 0x8, 0x5, 0x7ad1, 0xffffffff, 0x9, 0x1f, 0x7fff, 0x10000, 0x3, 0x3f, 0xada, 0x9, 0x40, 0xba2, 0x3, 0x7, 0x0, 0x3ff, 0x80, 0x5, 0x4, 0x9, 0x9, 0x9, 0x3d8, 0x100, 0x4, 0x1, 0x7f, 0x7, 0xfffffffe, 0x1, 0x3ff, 0xe, 0x8, 0x2, 0x4, 0x5, 0x8000, 0x652, 0x800, 0xfff, 0x1127, 0x7fffffff, 0x0, 0x8001, 0x4, 0x6, 0xff, 0xfff, 0x90d, 0xc88d, 0x1, 0x6af, 0xa3, 0x0, 0x131ed9f7, 0x8000, 0x99, 0x5, 0x9, 0x7fffffff, 0x7, 0x98ed, 0x101, 0x0, 0x3, 0x7ff, 0x7ff, 0x0, 0x8d, 0x7fffffff, 0x3f, 0x7fff, 0x3, 0xffff, 0x5, 0x2, 0xfffffff7, 0xf56, 0x7e, 0x4, 0x1, 0x20, 0x1000, 0x9, 0x3, 0x7, 0x2, 0x5, 0xfffffff9, 0x7f5, 0x7, 0x8, 0x100, 0x9, 0x7ff, 0x4, 0x9, 0x3ff, 0x7, 0x400, 0x5, 0x6ab, 0x5, 0x1, 0xffff, 0x6, 0x8, 0x6, 0x83, 0x400, 0x8000, 0x3, 0x9, 0x4, 0x1, 0x7, 0x8, 0x6, 0xa71d, 0x15cd, 0x16, 0x10000, 0x5, 0x100, 0x800, 0x3, 0x5, 0x7, 0x7, 0x800, 0x401, 0x4, 0xffffff01, 0x1, 0x3, 0x10000, 0xffffffff, 0x5, 0x8001, 0x6, 0x10001, 0x0, 0x40, 0x10000, 0x1, 0x7, 0x3, 0x8, 0x7072513, 0x401, 0x2, 0x1, 0x65e, 0xfffffffd, 0x5, 0x2, 0x8ccc, 0xfff, 0x1, 0x5, 0x9, 0x3ff, 0x8, 0x4, 0xc964, 0x0, 0x4, 0x3df5, 0xdd9, 0x5, 0xb716, 0x0, 0x7, 0x7, 0x80000000, 0xff, 0x3, 0x4, 0xaaf, 0xfffffe01, 0x0, 0x7fffffff, 0x7, 0x4, 0x1, 0x9, 0x9, 0x94cf, 0x7, 0x6, 0x1, 0xa1, 0x0, 0x3, 0x9, 0x9, 0x3, 0x8, 0x80000001, 0x0, 0x3c6b, 0xe64, 0x80, 0x899, 0x7ff, 0x8001, 0x8c, 0x8, 0x80000001, 0x101, 0x1, 0xfff, 0x2, 0x5, 0xffff, 0x96, 0x4040f94, 0x0, 0x8, 0x7, 0x8, 0x5, 0x8000, 0x0, 0x5, 0x81, 0x4, 0x7f, 0x2, 0x4, 0xc0, 0x81, 0x400, 0x4, 0x8, 0x5e, 0x10001, 0x5, 0x8, 0x101, 0x80000001, 0xffffffff, 0x2, 0x1, 0x6, 0x8, 0x5, 0x6d4, 0xc5eb0000, 0x7, 0x3, 0x80000001, 0x40, 0x1093, 0xfff, 0x3, 0xe8, 0x6, 0x100, 0x9, 0xdfe8, 0xfffffffe, 0x0, 0x9eea, 0x9, 0x4, 0x7, 0x2, 0x8, 0x6, 0x8, 0x3, 0x8, 0x5, 0x10001, 0x9, 0x4, 0x401, 0x1, 0x0, 0x800, 0x80000000, 0x2, 0x100, 0x7f, 0x401, 0x5f46, 0x8001, 0x0, 0x1f, 0x3, 0xefb, 0x401, 0x7ff, 0x4, 0x10001, 0x9, 0x3, 0xee8e, 0x5, 0x7, 0x7, 0x8, 0x9, 0x5, 0x8, 0x5, 0x4, 0xfff, 0x2, 0xab, 0x7, 0x57f, 0x0, 0x8, 0xfffffffb, 0x0, 0x2c9, 0x6, 0x1f, 0xce7, 0x8d, 0x7ff, 0x1000, 0x4, 0x6, 0x3ff, 0x4, 0x1, 0x7, 0x3, 0x4, 0x7, 0x2, 0x6, 0x80000001, 0x1, 0x800, 0x0, 0x0, 0x81, 0x10000, 0x200, 0x2, 0x100, 0x3f, 0x6, 0x8, 0x2, 0x6, 0x20, 0x7, 0x7, 0x8, 0x6, 0x80000001, 0x5, 0x5, 0xffffff42, 0xff, 0x8001, 0x2, 0x1, 0x100, 0x0, 0x3ff, 0x2, 0x800, 0xfff, 0x7, 0x6, 0x7, 0x4, 0xde0, 0x8, 0x3, 0x10001, 0x8, 0x7fffffff, 0xffb, 0x0, 0x20, 0x1, 0x81, 0x5, 0x660e, 0x6, 0x7, 0x8, 0x676, 0xa449, 0x3, 0x8, 0x7f, 0x80, 0x68, 0x7fff, 0x7f, 0x5c4, 0x1, 0x80000000, 0x3f, 0x1e, 0x5, 0x2, 0x0, 0x0, 0x8, 0x4, 0xa1f, 0x4, 0x2, 0x3ff, 0x9, 0x40, 0x0, 0x3, 0xfffffffc, 0x9, 0x28, 0x6, 0x5a, 0xfffffff7, 0x1000, 0x10000, 0x4, 0x8, 0x7, 0x1f, 0x9, 0x7f, 0x8, 0x0, 0x7f, 0x400, 0x4, 0x1f, 0x1, 0xf0a9, 0x2668, 0xfffffffd, 0x0, 0x7, 0x8, 0x80000001, 0x9, 0x8, 0xd2, 0x9, 0x4a, 0x45, 0xfffffffd, 0x1800000, 0x4, 0x1f54, 0x1, 0x100, 0x0, 0x7fff, 0xfffffffb, 0x7, 0x2, 0x101, 0x5, 0x9, 0xc0, 0x7, 0xbc, 0x200, 0x4, 0x3, 0x80, 0x6, 0x80000001, 0x1, 0x7f, 0x8000, 0x3f, 0x101, 0xcfb, 0x5f9d, 0x2, 0x8, 0x0, 0xffffffff, 0x1, 0x63, 0x400, 0x1, 0xf7, 0x400, 0x6, 0x8, 0x8, 0x40, 0x2, 0xc17, 0x7, 0xec6, 0x0, 0x8, 0x5, 0x5, 0x1, 0x2, 0x0, 0x400, 0x746, 0xb8, 0x8, 0x3, 0xffffffff, 0x5, 0x3, 0x1f, 0x1f, 0xfffffffb, 0x7, 0x2, 0x80, 0x8, 0xfc, 0x8000, 0xa3, 0xff, 0x78c, 0x1, 0x6a5, 0x7fffffff, 0x75, 0x3ff, 0xffffffff, 0xfffff1d1, 0x5, 0xffffff81, 0xff, 0x3, 0x6a0a2250, 0xdbb, 0x3f0d, 0xffffffff, 0x205, 0x8, 0xe449, 0x200, 0x9, 0xfc6b, 0x377deaf4, 0x80000000, 0x0, 0x7fffffff, 0x9, 0x0, 0x2, 0xffff, 0x6, 0x336, 0x5, 0x9, 0x6, 0x8, 0x2, 0x2, 0xb05, 0x1f, 0xffffffff, 0x6, 0x80000001, 0x5719, 0xa7, 0x3ff, 0x1000, 0x28, 0xffffff0f, 0x80800, 0x7, 0x7fff, 0xac1, 0x6, 0x4, 0x781c, 0x7, 0x20, 0x3, 0x7, 0x7fffffff, 0x10001, 0x7, 0x8, 0x2, 0xffffffff, 0xffff8001, 0xa8, 0x3, 0x3, 0x208b0, 0x7, 0x100, 0x2, 0xf83, 0x8, 0x10001, 0xfffffff8, 0x0, 0x95, 0x800, 0x3903, 0xd68, 0x3ff, 0x3, 0x0, 0xffff, 0x6, 0x1, 0x4d6, 0x5, 0x8001, 0xfffffff8, 0x2, 0x800, 0x1, 0x5, 0x1ff, 0x6, 0x8001, 0x5, 0x80000000, 0x0, 0xbcb, 0xc6, 0xc9ca, 0x9e7, 0xa1c6, 0x88600000, 0x38ba, 0x6f, 0x9, 0xfffffead, 0x5, 0x1, 0x3, 0xfffffc3b, 0x9, 0x8, 0x4, 0x48, 0x7, 0xc50, 0xfffffffe, 0x2, 0x2, 0x7, 0xf3fc, 0x4, 0x1, 0x7, 0x1, 0xffffff81, 0x832, 0x20, 0x8, 0x101, 0x0, 0xfffffffb, 0x0, 0xfff, 0xfffff646, 0x8, 0xfffffffa, 0x14b, 0x0, 0x4, 0x7, 0x3, 0x4, 0x7, 0x9, 0x1, 0xff, 0x3, 0x1, 0x8000, 0x0, 0x8, 0xfffffffa, 0x9, 0x8, 0x9, 0x8, 0x2, 0x2, 0x2, 0x0, 0x4, 0x9, 0x30, 0x6, 0x800, 0x7ff, 0x8, 0xfffffffc, 0xffff, 0x2, 0x64a28006, 0x2, 0x7, 0x7, 0xddc, 0xfffffffd, 0x1, 0x6, 0x3, 0x84ab, 0x20, 0x1, 0xc0, 0x5, 0x4, 0x4, 0x1, 0x9, 0x6, 0x8, 0xfff, 0x80000001, 0x7, 0x4, 0x47]}) 05:06:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4bfa, &(0x7f0000000240)={0x47, "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"}) 05:06:33 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6400000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1629, 0x0, 0x0, 0x0}) 05:06:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000100)={0xd9, 0x4, &(0x7f0000000300)="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"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x901, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000080)={0xf0c0, 0x5, [0x6, 0x8a, 0xfff, 0xfcea, 0xffff]}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f00000000c0)={0x0, 0x100, 0x1, 0x1, 0xfffffffe}) 05:06:33 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4bfb, &(0x7f0000000240)={0x47, "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"}) 05:06:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x16aa, 0x0, 0x0, 0x0}) 05:06:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4c01, &(0x7f0000000240)={0x47, "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"}) 05:06:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) 05:06:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5409, &(0x7f0000000240)={0x47, "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"}) 05:06:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x17ac, 0x0, 0x0, 0x0}) 05:06:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1848, 0x0, 0x0, 0x0}) 05:06:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x540b, &(0x7f0000000240)={0x47, "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"}) 05:06:34 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7c15000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x540c, &(0x7f0000000240)={0x47, "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"}) 05:06:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x200100, 0x0) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1963, 0x0, 0x0, 0x0}) 05:06:34 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1a00, 0x0, 0x0, 0x0}) 05:06:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x540d, &(0x7f0000000240)={0x47, "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"}) 05:06:35 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b00, 0x0, 0x0, 0x0}) 05:06:35 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x540e, &(0x7f0000000240)={0x47, "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"}) 05:06:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b22, 0x0, 0x0, 0x0}) 05:06:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x200300) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0}) 05:06:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x540f, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b47, 0x0, 0x0, 0x0}) 05:06:35 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x80880, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 05:06:35 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa509000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5410, &(0x7f0000000240)={0x47, "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"}) 05:06:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1ba6, 0x0, 0x0, 0x0}) 05:06:36 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9a02000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5412, &(0x7f0000000240)={0x47, "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"}) 05:06:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000)) 05:06:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1ca6, 0x0, 0x0, 0x0}) 05:06:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5413, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmod(0xffffffffffffffff, 0x0) 05:06:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1cda, 0x0, 0x0, 0x0}) 05:06:36 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa00f000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5414, &(0x7f0000000240)={0x47, "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"}) 05:06:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1d0a, 0x0, 0x0, 0x0}) 05:06:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0x500080) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1f03, 0x0, 0x0, 0x0}) 05:06:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5415, &(0x7f0000000240)={0x47, "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"}) 05:06:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x8000000, 0x130, 0x0}) 05:06:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x2083, 0x0, 0x0, 0x0}) 05:06:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5416, &(0x7f0000000240)={0x47, "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"}) 05:06:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x7fff, 0x2) 05:06:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x221b, 0x0, 0x0, 0x0}) 05:06:37 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xa709000000000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5418, &(0x7f0000000240)={0x47, "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"}) 05:06:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x237c, 0x0, 0x0, 0x0}) 05:06:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000080)={0xffff, @local}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) 05:06:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x541c, &(0x7f0000000240)={0x47, "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"}) 05:06:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x25eb, 0x0, 0x0, 0x0}) 05:06:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'vlan0\x00', @random="01003a1e2410"}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x400000) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x2, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x40}}, {0x0, 0x0, 0x0, 0xfe, @tick, {}, {0x8, 0x14}, @time=@time={0x0, 0xffffffff}}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) r4 = socket$inet6(0xa, 0x8000a, 0x21) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r8, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r8, 0x0, 0x0, 0x1000f4) r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='notify_on_release\x00', 0x2, 0x0) fallocate(r9, 0x0, 0x0, 0x1000f4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000, r5}) 05:06:38 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x2002, 0x4) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300), 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x80000) 05:06:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x541d, &(0x7f0000000240)={0x47, "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"}) 05:06:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x2916, 0x0, 0x0, 0x0}) 05:06:38 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x29cc, 0x0, 0x0, 0x0}) 05:06:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x52, 0xa, 0x4, 0x4000000, 0x9, {0x0, 0x2710}, {0x5, 0xc, 0x7f, 0x5, 0x10, 0x7f, "ec907341"}, 0x0, 0x3, @planes=&(0x7f0000000080)={0x6, 0x2, @userptr=0x8000, 0xd21}, 0x0, 0x0, r1}) accept$ax25(r2, 0x0, &(0x7f0000000140)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x541e, &(0x7f0000000240)={0x47, "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"}) 05:06:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x2d03, 0x0, 0x0, 0x0}) 05:06:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x541e, &(0x7f0000000240)={0x47, "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"}) 05:06:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3138, 0x0, 0x0, 0x0}) 05:06:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x440042, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000080)=@bpq0='bpq0\x00', 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x0, 0x0, [{{r0}, 0x8001}, {{r2}, 0x5}, {{r3}, 0x7fff}, {{r4}, 0x6}]}) r5 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000100)={0x0, 0x1}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x25, 0x200000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400070500000000000080001d6b5cd1", @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070510000b00000000c7676a2100", @ANYRES32=r12, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@deltclass={0x30, 0x29, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x10034, 0x3}, {0xfff2, 0xe}, {0x8, 0x6}}, [@tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4004840) ioctl$int_in(r6, 0x800000c0045002, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) 05:06:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5421, &(0x7f0000000240)={0x47, "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"}) 05:06:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3195, 0x0, 0x0, 0x0}) 05:06:39 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b66, &(0x7f0000000240)={0x47, "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"}) 05:06:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5422, &(0x7f0000000240)={0x47, "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"}) 05:06:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x13, 0xf, 0x10, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x6) 05:06:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x34fd, 0x0, 0x0, 0x0}) 05:06:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5423, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x35b4, 0x0, 0x0, 0x0}) 05:06:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000080)={&(0x7f0000009000/0x1000)=nil, 0x782, 0x2, 0x1a, &(0x7f0000ffe000/0x2000)=nil, 0xff}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x14) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x3, [0x3, 0x2, 0x9]}) 05:06:39 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5424, &(0x7f0000000240)={0x47, "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"}) 05:06:39 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x26002, 0x0) ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000080)={'netdevsim0\x00', @ifru_hwaddr=@broadcast}) r2 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @ipx={0x4, 0xfff, 0x800, "4eb6c481e467", 0x25}, @phonet={0x23, 0x0, 0x3, 0x56}, @phonet={0x23, 0x9, 0xe}, 0x38f, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3ba8000, 0x7, 0x7ff}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3742, 0x0, 0x0, 0x0}) 05:06:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0xc000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5425, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b48, &(0x7f0000000240)={0x47, "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"}) 05:06:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x2000, 0x5e3a5ea5, {0x77359400}, {0x4, 0x1, 0x0, 0x1, 0x2e, 0x42, "3208f905"}, 0x3f, 0x6, @fd, 0x3, 0x0, 0xffffffffffffffff}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB], 0x84) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB], 0x84) getgroups(0x3, &(0x7f0000000000)=[0x0, 0xee00, r6]) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0), &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[], 0x0) write$P9_RSTATu(r2, &(0x7f0000000100)={0x4f, 0x7d, 0x2, {{0x0, 0x3a, 0xe5, 0x1, {0x0, 0x3, 0x2}, 0x380000, 0x7ff, 0xa5800000, 0x5, 0x0, '', 0x0, '', 0x0, '', 0x7, 'system-'}, 0x0, '', r3, r7, r8}}, 0x4f) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3831, 0x0, 0x0, 0x0}) 05:06:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5427, &(0x7f0000000240)={0x47, "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"}) 05:06:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/251, 0xfb) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') 05:06:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b47, &(0x7f0000000240)={0x47, "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"}) 05:06:40 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3a53, 0x0, 0x0, 0x0}) 05:06:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5428, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x4, 0x70bd2d, 0x7fffffff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb71fad0b57a9d9af}, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r4, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x7c}, @control={0x20, 0x5, 0x919}}, {0x0, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @quote={{0x4, 0x6}, 0x8, &(0x7f0000000080)={0x20, 0x1f, 0x0, 0x20, @time={0x80, 0x1}, {0x8, 0x6}, {0x8, 0x1f}, @addr={0xd4, 0x7}}}}, {0x6, 0x20, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x81, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r4, 0x0, 0x0, 0x1000f4) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x9bea0a0bba52e4f6, r4, 0x8000000) 05:06:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x9, 0x800, 0x2}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000000)={0x1, 0xffffffff, 0x13, 0x20, 0x1000, 0x0}) 05:06:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3b04, 0x0, 0x0, 0x0}) 05:06:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5429, &(0x7f0000000240)={0x47, "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"}) 05:06:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x7, 0x4, 0x0, 0x7dc4}, {0x7, 0x2, 0x6, 0x10000}, {0x3, 0x8, 0x1f, 0x7}, {0x8001, 0xc9, 0x0, 0x4}, {0x6, 0x9, 0x2, 0xe40}, {0x1, 0x8, 0xc8, 0x6}]}) 05:06:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3b3b, 0x0, 0x0, 0x0}) 05:06:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5437, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x0, 0x0}) 05:06:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 05:06:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3e00, 0x0, 0x0, 0x0}) 05:06:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5441, &(0x7f0000000240)={0x47, "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"}) 05:06:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x1b, 0x0, 0x0, 0x0}) 05:06:41 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5450, &(0x7f0000000240)={0x47, "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"}) 05:06:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x3e7b, 0x0, 0x0, 0x0}) 05:06:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000480)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x3}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r2, 0x10, 0xffffffffffffffff, 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000004c0)=r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x4, 0xff}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x81, 0x1f, &(0x7f0000000080)="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"}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x13, 0x0, 0x0}) 05:06:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x23a, 0x2, 0x4, 0x40000000, 0x7, {r3, r4/1000+10000}, {0x1, 0x0, 0x1, 0x40, 0x1, 0x80, "c2e1a756"}, 0x5, 0x2, @fd=r1, 0x731, 0x0, 0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x2000}) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x10003, 0x0, &(0x7f0000ffc000/0x4000)=nil}) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000180)=""/212) 05:06:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x40ce, 0x0, 0x0, 0x0}) 05:06:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5451, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:42 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:42 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000480)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x3}) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x8, 0x0, 0x1000, 0x0, 0x5c}, r2, 0x10, 0xffffffffffffffff, 0x2) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000004c0)=r2) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000500)={0x0, {0x4, 0xff}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x81, 0x1f, &(0x7f0000000080)="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"}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x13, 0x0, 0x0}) 05:06:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x415f, 0x0, 0x0, 0x0}) 05:06:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r1, &(0x7f0000000000)="b3762bd42527340c3a6d06898e1295dc8e726abc2b673120a687abc6580e65b9ce3772219fab6a0580b8e201a1", &(0x7f0000000080)=""/143, 0x4}, 0x20) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x1, 0x20000000, 0x0}) 05:06:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5452, &(0x7f0000000240)={0x47, "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"}) 05:06:42 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000002}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x545d, &(0x7f0000000240)={0x47, "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"}) 05:06:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x41a4, 0x0, 0x0, 0x0}) 05:06:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x100, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x4) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x34, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4014}, 0x44) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) accept4$tipc(r2, &(0x7f0000000640)=@id, &(0x7f00000005c0)=0x10, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x12f, 0x1, &(0x7f0000000080)}) 05:06:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0xff000000, 0x0, 0x0, 0x0, 0x0}) 05:06:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4237, 0x0, 0x0, 0x0}) 05:06:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5460, &(0x7f0000000240)={0x47, "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"}) 05:06:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0x168, 0x19, &(0x7f00000000c0)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r3, 0x4b52, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000004c0)) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000080)={0x1, 0x0, 0xffffffff, 0x9, 0x0, 0x0}) 05:06:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x424a, 0x0, 0x0, 0x0}) 05:06:43 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5600, &(0x7f0000000240)={0x47, "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"}) 05:06:43 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000003}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5601, &(0x7f0000000240)={0x47, "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"}) 05:06:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4395, 0x0, 0x0, 0x0}) 05:06:43 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa00c0, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x18, &(0x7f00000001c0)="4c19d5a4ef72ec8aa487541d0e1029a935bc2423ec6d3e97", 0xe2, 0x0, &(0x7f0000000200)="0f7b808c67291e7ee15ea45bc8f4b91cab7e8034a093fc95f12859804e2d590cf36e1b3b1698694eef6b3c6d6abbba6c234889b45bfcb5d68a1a6a7bccda5a79d965b201210f1fcbe74913b8f5ac6767c721e29b6f16cd9876334ffddb9952bbf69f107ec2835c01cec2d1f391ef2f6dda2aecf9c5b665c20add25d57e14094cb4c0997937f1dcb58263190062a540b4c0074c81b3fc425a1a3a989741c27ba3b1735b6d5ce1a69c41c8d6210d37dd5d5dd97af5c5bb299139eb62a11c54dc27992a604168055a10dfb41a1b9466267cad04067683bfe8aaaa71bd9108b68eea85c9"}) mq_timedreceive(r1, &(0x7f00000000c0)=""/129, 0x81, 0x3, &(0x7f0000000180)={0x0, 0x1c9c380}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x4cf2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:43 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000004}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5602, &(0x7f0000000240)={0x47, "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"}) 05:06:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x43be, 0x0, 0x0, 0x0}) 05:06:44 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0xb, 0xd, 0xa0, 0x0}) 05:06:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5603, &(0x7f0000000240)={0x47, "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"}) 05:06:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)={0x168, 0x19, &(0x7f00000000c0)="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"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r2, 0x4b52, &(0x7f0000000000)) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r3, 0x4b52, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000004c0)) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000080)={0x1, 0x0, 0xffffffff, 0x9, 0x0, 0x0}) 05:06:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x457c, 0x0, 0x0, 0x0}) 05:06:44 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5605, &(0x7f0000000240)={0x47, "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"}) 05:06:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB], 0x84) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB], 0x84) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB], 0x84) r9 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r9, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r11, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r11, 0x0, 0x0, 0x1000f4) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) r13 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r13, 0x0) ioctl$NS_GET_OWNER_UID(r13, 0xb704, &(0x7f00000003c0)=0x0) r15 = getuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000003a00)=ANY=[@ANYBLOB="b000000000000000af0e0000000000000100000000000000010000000000000000000000000000000400000000000000000001000800000000000000000000000000000000000000ffff00000000000008000000000000008000000000000000ff070000000000007000000009000000020000000800000000000000", @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB], 0x84) r18 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2, r1}, {0x2, 0x1, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r7}, {0x2, 0x6, r10}, {0x2, 0x2, r12}, {0x2, 0x6, r14}, {0x2, 0x4, r15}, {0x2, 0x7, r16}], {0x4, 0x7}, [{0x8, 0x0, r19}, {0x8, 0x1, 0xffffffffffffffff}], {}, {0x20, 0x4}}, 0x84, 0x1) r20 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) ioctl$sock_inet6_SIOCADDRT(r20, 0x890b, &(0x7f0000000080)={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, 0x0, 0x400, 0x12, 0x500, 0x3, 0x800100e0}) 05:06:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x46b1, 0x0, 0x0, 0x0}) 05:06:44 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000005}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000280)=[0x7, 0x8]) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x804, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000005c0)={0xf, 0x8, 0xfa00, {r4, 0x7}}, 0x10) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r5, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@tick=0x6}], 0x70) fallocate(r5, 0x0, 0x0, 0x1000f4) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000180)) ioctl(r2, 0x6, &(0x7f0000000380)="3c8b2315f125382aa5673bf8f6b1eb2888e2180591e589bd090ae75ea573104a8fc4d017a493238c6fb7625e0db0aa74411cd30474fda404fde79bb4b9297f9ce321d55d1e63093e8dd2de32e16a7e94c4a3378477871b0c2825524d5e6834c312bd7c7f5def596ba68f37de374afc2f61cd91158f90fc97b6a19da4c86791e6d0222aee3c10dfd0e89a") sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r6 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x3, 0x2000200, 0x10001, 0x7fffffff, 0x10000, 0x7, 0x10}}) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000480)=""/220) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000026c0)={'vlan0\x00', @random="01003a1e2410"}) 05:06:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5606, &(0x7f0000000240)={0x47, "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"}) 05:06:44 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000006}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x471b, 0x0, 0x0, 0x0}) 05:06:45 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r0, 0x4b52, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000080)={0x1, 0xfffffffd, 0x15, 0x10, 0xc7, 0x0}) 05:06:45 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x800002, 0x11, r0, 0x40000000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x181000, 0x0) r3 = socket(0x800000000010, 0x803, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) fsmount(r4, 0x1, 0x72) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) lseek(r4, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380)={r5, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x1a, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x18, 0x45e, 0x4, 0x9}, 0x14) lseek(r0, 0xe327, 0x3) 05:06:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5607, &(0x7f0000000240)={0x47, "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"}) 05:06:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x0, 0x0, 0x0}) 05:06:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x47ae, 0x0, 0x0, 0x0}) 05:06:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000007}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5608, &(0x7f0000000240)={0x47, "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"}) 05:06:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:45 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x800002, 0x11, r0, 0x40000000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x80000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x181000, 0x0) r3 = socket(0x800000000010, 0x803, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) fsmount(r4, 0x1, 0x72) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) lseek(r4, 0x19, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380)={r5, 0x23, "2aaba1d7cf6b2b8be28150b0aaafe4ad72b95e07accfce175bfaa628ccb66360578d6e"}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={r5, 0x1a, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x18, 0x45e, 0x4, 0x9}, 0x14) lseek(r0, 0xe327, 0x3) 05:06:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{0x2, 0x3}], {}, [{}, {}, {}]}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @time={0x101, 0x7fff}, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0xff, 0x0, 0x0, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @quote={{0x21, 0x5}, 0xff, &(0x7f00000002c0)={0x7, 0xc0, 0x3, 0x54, @time={0xd4b, 0x6}, {0xf8, 0x71}, {0x8}, @control={0x2, 0x0, 0x3}}}}, {0x4, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x11}, @time=@time}], 0x70) fallocate(r2, 0x0, 0x0, 0x1000f4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x401, 0x1, 'client0\x00', 0xffffffff80000002, "cf745e9a291d90d7", "709403df4f7ae592d3e092177d4b0a7e7d0fdc468a96706b6256283b2bc8a8bc", 0x6c9, 0x9d96}) 05:06:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4818, 0x0, 0x0, 0x0}) 05:06:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x5609, &(0x7f0000000240)={0x47, "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"}) 05:06:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4879, 0x0, 0x0, 0x0}) 05:06:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560a, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:46 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2942.180312][T15774] overlayfs: conflicting lowerdir path 05:06:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x498f, 0x0, 0x0, 0x0}) [ 2942.339724][T15885] FAULT_INJECTION: forcing a failure. [ 2942.339724][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 2942.389576][T15885] CPU: 0 PID: 15885 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 2942.398546][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2942.408912][T15885] Call Trace: [ 2942.412298][T15885] dump_stack+0x11d/0x181 [ 2942.416672][T15885] should_fail.cold+0xa/0x1a [ 2942.421426][T15885] __should_failslab+0xee/0x130 [ 2942.426320][T15885] should_failslab+0x9/0x14 [ 2942.430848][T15885] __kmalloc+0x53/0x690 [ 2942.435289][T15885] ? terminate_walk+0x1d0/0x250 [ 2942.440163][T15885] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 2942.445919][T15885] tomoyo_realpath_from_path+0x83/0x4c0 [ 2942.451489][T15885] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 2942.456978][T15885] tomoyo_path_number_perm+0x10a/0x3c0 [ 2942.462715][T15885] ? __fget+0xb8/0x1d0 [ 2942.466812][T15885] tomoyo_file_ioctl+0x2c/0x40 [ 2942.471618][T15885] security_file_ioctl+0x6d/0xa0 [ 2942.476614][T15885] ksys_ioctl+0x64/0xe0 [ 2942.480804][T15885] __x64_sys_ioctl+0x4c/0x60 [ 2942.485414][T15885] do_syscall_64+0xcc/0x3a0 [ 2942.489952][T15885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2942.495852][T15885] RIP: 0033:0x45b159 [ 2942.499919][T15885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2942.519633][T15885] RSP: 002b:00007fdbc9d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2942.528404][T15885] RAX: ffffffffffffffda RBX: 00007fdbc9d796d4 RCX: 000000000045b159 05:06:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4a42, 0x0, 0x0, 0x0}) [ 2942.536500][T15885] RDX: 0000000020000040 RSI: 000000000000560f RDI: 0000000000000003 [ 2942.544884][T15885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2942.552965][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2942.561062][T15885] R13: 000000000000034a R14: 00000000004c44bc R15: 0000000000000000 05:06:46 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000008}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:46 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2942.688894][T15885] ERROR: Out of memory at tomoyo_realpath_from_path. 05:06:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560b, &(0x7f0000000240)={0x47, "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"}) 05:06:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4c0b, 0x0, 0x0, 0x0}) 05:06:46 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:46 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:46 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vsock\x00', 0x90880, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r1, 0x0, 0x0, 0x1000f4) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001680)={0x0, 0x5c04, 0x68a5, 0x3, 0x3f, 0x200, 0x2, 0x0, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x7, 0xfffff001, 0x3, 0x2d16}}, &(0x7f0000001740)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001780)={0x9, 0x2, 0x4, 0x0, 0x101, 0x2, 0x1, 0x4, r2}, &(0x7f00000017c0)=0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560c, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4cb4, 0x0, 0x0, 0x0}) [ 2943.017425][T16109] FAULT_INJECTION: forcing a failure. [ 2943.017425][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 2943.033578][T16109] CPU: 0 PID: 16109 Comm: syz-executor.0 Not tainted 5.5.0-rc1-syzkaller #0 [ 2943.044730][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2943.054926][T16109] Call Trace: [ 2943.058241][T16109] dump_stack+0x11d/0x181 [ 2943.062604][T16109] should_fail.cold+0xa/0x1a [ 2943.067429][T16109] __should_failslab+0xee/0x130 [ 2943.072427][T16109] should_failslab+0x9/0x14 [ 2943.076974][T16109] __kmalloc+0x53/0x690 [ 2943.081224][T16109] ? tomoyo_encode2.part.0+0xd9/0x260 [ 2943.086837][T16109] tomoyo_encode2.part.0+0xd9/0x260 [ 2943.092218][T16109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2943.098485][T16109] tomoyo_encode+0x34/0x50 [ 2943.102966][T16109] tomoyo_realpath_from_path+0x14a/0x4c0 [ 2943.108711][T16109] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 2943.114113][T16109] tomoyo_path_number_perm+0x10a/0x3c0 [ 2943.119625][T16109] ? __fget+0xb8/0x1d0 [ 2943.123712][T16109] tomoyo_file_ioctl+0x2c/0x40 [ 2943.128560][T16109] security_file_ioctl+0x6d/0xa0 [ 2943.128644][T16109] ksys_ioctl+0x64/0xe0 [ 2943.128674][T16109] __x64_sys_ioctl+0x4c/0x60 [ 2943.142568][T16109] do_syscall_64+0xcc/0x3a0 [ 2943.147195][T16109] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2943.153107][T16109] RIP: 0033:0x45b159 05:06:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560d, &(0x7f0000000240)={0x47, "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"}) [ 2943.153140][T16109] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2943.176679][T16109] RSP: 002b:00007fdbc9d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2943.185274][T16109] RAX: ffffffffffffffda RBX: 00007fdbc9d796d4 RCX: 000000000045b159 [ 2943.193316][T16109] RDX: 0000000020000040 RSI: 000000000000560f RDI: 0000000000000003 [ 2943.201377][T16109] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2943.209645][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2943.217659][T16109] R13: 000000000000034a R14: 00000000004c44bc R15: 0000000000000001 [ 2943.246576][T16109] ERROR: Out of memory at tomoyo_realpath_from_path. 05:06:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4e97, 0x0, 0x0, 0x0}) 05:06:47 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000009}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:47 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000001740)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x10, r1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000200)={{0x7f, 0x2, 0xfc, 0x6, 0x5}, 0x7eb, 0x7, 0x7, 0xfff, 0x8, "42b3ba3793fc329bae99007c57533daa0d1df6bdbdb9a215907a12786517361c9d6d9b06ca8c8a10060cce8e651e47f7510bbd4c97bc16a5a17ce97f49c0af0295c943b3cf1fa33d7beb5843a74a171ff5365f2d03f02f36339eabee0336f70641c44488d2be61e725b777932eda0171be5ccf8f0130533a474ee14037440f5b"}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x201) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000080)}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:06:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560e, &(0x7f0000000240)={0x47, "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"}) 05:06:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:47 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x4eed, 0x0, 0x0, 0x0}) 05:06:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x560f, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x6364, &(0x7f0000000240)={0x47, "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"}) 05:06:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x533a, 0x0, 0x0, 0x0}) 05:06:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000000)="4b54e30ceaf6b401aaf01ac2187eed2ac81c15c4bd66f2c6554211f91184d5c23276") 05:06:48 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x10, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x5461, 0x0, 0x0, 0x0}) 05:06:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000140)) ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000100)) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x13) 05:06:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x8933, &(0x7f0000000240)={0x47, "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"}) 05:06:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xae01, &(0x7f0000000240)={0x47, "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"}) 05:06:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x55ba, 0x0, 0x0, 0x0}) 05:06:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x2405, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:48 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xae41, &(0x7f0000000240)={0x47, "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"}) 05:06:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x57f1, 0x0, 0x0, 0x0}) [ 2944.967606][T17093] FAULT_INJECTION: forcing a failure. [ 2944.967606][T17093] name failslab, interval 1, probability 0, space 0, times 0 [ 2944.998379][T17093] CPU: 0 PID: 17093 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2945.007219][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2945.017535][T17093] Call Trace: [ 2945.020847][T17093] dump_stack+0x11d/0x181 [ 2945.025344][T17093] should_fail.cold+0xa/0x1a [ 2945.029956][T17093] __should_failslab+0xee/0x130 [ 2945.034878][T17093] should_failslab+0x9/0x14 [ 2945.039449][T17093] kmem_cache_alloc_trace+0x2a/0x5d0 [ 2945.044751][T17093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2945.051192][T17093] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2945.057192][T17093] alloc_pipe_info+0xf8/0x3b0 [ 2945.061897][T17093] splice_direct_to_actor+0x4b3/0x540 [ 2945.067283][T17093] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2945.073143][T17093] ? security_file_permission+0x88/0x280 [ 2945.079057][T17093] ? rw_verify_area+0xee/0x250 [ 2945.083842][T17093] do_splice_direct+0x161/0x1e0 [ 2945.088740][T17093] do_sendfile+0x384/0x7f0 [ 2945.093355][T17093] __x64_sys_sendfile64+0x12a/0x140 [ 2945.098627][T17093] do_syscall_64+0xcc/0x3a0 [ 2945.103176][T17093] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2945.109077][T17093] RIP: 0033:0x45b159 [ 2945.113046][T17093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2945.132715][T17093] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2945.141166][T17093] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2945.149145][T17093] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2945.157130][T17093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2945.165117][T17093] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2945.173280][T17093] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000000 05:06:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xae80, &(0x7f0000000240)={0x47, "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"}) 05:06:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b2f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x586c, 0x0, 0x0, 0x0}) 05:06:49 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:49 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000b}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xae9a, &(0x7f0000000240)={0x47, "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"}) [ 2945.412052][T17309] FAULT_INJECTION: forcing a failure. [ 2945.412052][T17309] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.463737][T17309] CPU: 1 PID: 17309 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2945.472458][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2945.482516][T17309] Call Trace: [ 2945.485823][T17309] dump_stack+0x11d/0x181 [ 2945.490179][T17309] should_fail.cold+0xa/0x1a [ 2945.494951][T17309] __should_failslab+0xee/0x130 [ 2945.500034][T17309] should_failslab+0x9/0x14 [ 2945.504597][T17309] __kmalloc+0x53/0x690 [ 2945.508767][T17309] ? kmem_cache_alloc_trace+0x1e9/0x5d0 [ 2945.514325][T17309] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2945.520684][T17309] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2945.526707][T17309] ? alloc_pipe_info+0x20e/0x3b0 [ 2945.531741][T17309] alloc_pipe_info+0x20e/0x3b0 [ 2945.536524][T17309] splice_direct_to_actor+0x4b3/0x540 [ 2945.542026][T17309] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2945.547707][T17309] ? security_file_permission+0x88/0x280 [ 2945.553366][T17309] ? rw_verify_area+0xee/0x250 [ 2945.558151][T17309] do_splice_direct+0x161/0x1e0 [ 2945.563259][T17309] do_sendfile+0x384/0x7f0 [ 2945.567739][T17309] __x64_sys_sendfile64+0x12a/0x140 [ 2945.572999][T17309] do_syscall_64+0xcc/0x3a0 [ 2945.577530][T17309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2945.583425][T17309] RIP: 0033:0x45b159 [ 2945.587342][T17309] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:06:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x400454ca, &(0x7f0000000240)={0x47, "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"}) 05:06:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b30, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2945.607015][T17309] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2945.615445][T17309] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2945.623494][T17309] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2945.631549][T17309] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2945.639568][T17309] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2945.647542][T17309] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000001 05:06:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x5cdb, 0x0, 0x0, 0x0}) 05:06:49 executing program 3 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:49 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b31, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x40049409, &(0x7f0000000240)={0x47, "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"}) [ 2945.940084][T17431] FAULT_INJECTION: forcing a failure. [ 2945.940084][T17431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2945.974407][T17431] CPU: 1 PID: 17431 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2945.983209][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2945.993527][T17431] Call Trace: [ 2945.996862][T17431] dump_stack+0x11d/0x181 [ 2946.001311][T17431] should_fail.cold+0xa/0x1a [ 2946.005953][T17431] should_fail_alloc_page+0x50/0x60 [ 2946.011180][T17431] __alloc_pages_nodemask+0xd2/0x310 [ 2946.016483][T17431] alloc_pages_vma+0xc1/0x3a0 [ 2946.021179][T17431] shmem_alloc_page+0x67/0xf0 [ 2946.025909][T17431] shmem_alloc_and_acct_page+0x125/0x450 [ 2946.031573][T17431] ? process_measurement+0x149/0x1190 [ 2946.037007][T17431] shmem_getpage_gfp+0x2f2/0x1390 [ 2946.042082][T17431] shmem_file_read_iter+0x224/0x720 [ 2946.047382][T17431] ? iov_iter_pipe+0xfa/0x120 [ 2946.052238][T17431] generic_file_splice_read+0x35c/0x500 [ 2946.057813][T17431] do_splice_to+0xf2/0x130 [ 2946.062237][T17431] ? add_to_pipe+0x1c0/0x1c0 [ 2946.066834][T17431] ? add_to_pipe+0x1c0/0x1c0 [ 2946.071441][T17431] splice_direct_to_actor+0x1b6/0x540 [ 2946.077548][T17431] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2946.083137][T17431] do_splice_direct+0x161/0x1e0 [ 2946.088009][T17431] do_sendfile+0x384/0x7f0 [ 2946.092520][T17431] __x64_sys_sendfile64+0x12a/0x140 [ 2946.097734][T17431] do_syscall_64+0xcc/0x3a0 [ 2946.102324][T17431] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2946.108216][T17431] RIP: 0033:0x45b159 [ 2946.112153][T17431] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2946.131849][T17431] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:06:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b32, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x5f41, 0x0, 0x0, 0x0}) 05:06:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4008ae89, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2946.140273][T17431] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2946.148291][T17431] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2946.156275][T17431] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2946.164530][T17431] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2946.172522][T17431] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000002 05:06:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x60aa, 0x0, 0x0, 0x0}) 05:06:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b33, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4008ae90, &(0x7f0000000240)={0x47, "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"}) 05:06:50 executing program 3 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2946.629519][T17660] FAULT_INJECTION: forcing a failure. [ 2946.629519][T17660] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2946.691792][T17660] CPU: 1 PID: 17660 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2946.700623][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2946.710788][T17660] Call Trace: [ 2946.714088][T17660] dump_stack+0x11d/0x181 [ 2946.718442][T17660] should_fail.cold+0xa/0x1a [ 2946.723047][T17660] should_fail_alloc_page+0x50/0x60 [ 2946.728265][T17660] __alloc_pages_nodemask+0xd2/0x310 [ 2946.733583][T17660] alloc_pages_vma+0xc1/0x3a0 [ 2946.738280][T17660] shmem_alloc_page+0x67/0xf0 [ 2946.743009][T17660] shmem_alloc_and_acct_page+0x125/0x450 [ 2946.748906][T17660] shmem_getpage_gfp+0x2f2/0x1390 [ 2946.753962][T17660] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2946.759933][T17660] shmem_file_read_iter+0x224/0x720 [ 2946.765165][T17660] generic_file_splice_read+0x35c/0x500 [ 2946.770736][T17660] do_splice_to+0xf2/0x130 [ 2946.775175][T17660] ? add_to_pipe+0x1c0/0x1c0 [ 2946.779781][T17660] ? add_to_pipe+0x1c0/0x1c0 [ 2946.784533][T17660] splice_direct_to_actor+0x1b6/0x540 [ 2946.789925][T17660] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2946.795547][T17660] do_splice_direct+0x161/0x1e0 [ 2946.800630][T17660] do_sendfile+0x384/0x7f0 [ 2946.805227][T17660] __x64_sys_sendfile64+0x12a/0x140 [ 2946.810422][T17660] do_syscall_64+0xcc/0x3a0 [ 2946.815013][T17660] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2946.821007][T17660] RIP: 0033:0x45b159 [ 2946.824912][T17660] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2946.844868][T17660] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2946.853282][T17660] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2946.861269][T17660] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2946.869392][T17660] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2946.877393][T17660] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2946.885424][T17660] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000003 05:06:50 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6154, 0x0, 0x0, 0x0}) 05:06:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b34, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x40186366, &(0x7f0000000240)={0x47, "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"}) 05:06:50 executing program 3 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) [ 2947.035402][T17773] FAULT_INJECTION: forcing a failure. [ 2947.035402][T17773] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.048058][T17773] CPU: 1 PID: 17773 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2947.056949][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2947.067003][T17773] Call Trace: [ 2947.070309][T17773] dump_stack+0x11d/0x181 [ 2947.074698][T17773] should_fail.cold+0xa/0x1a [ 2947.079321][T17773] __should_failslab+0xee/0x130 [ 2947.084400][T17773] should_failslab+0x9/0x14 [ 2947.089049][T17773] kmem_cache_alloc+0x29/0x5d0 [ 2947.093840][T17773] ? should_fail+0xd4/0x45d [ 2947.098442][T17773] xas_alloc+0x208/0x240 [ 2947.102749][T17773] xas_create+0x1b0/0x920 [ 2947.107102][T17773] ? debug_smp_processor_id+0x43/0x137 [ 2947.112950][T17773] ? __read_once_size.constprop.0+0x12/0x20 [ 2947.118873][T17773] xas_create_range+0x129/0x300 [ 2947.123752][T17773] shmem_add_to_page_cache+0x2f0/0x6b0 [ 2947.129367][T17773] shmem_getpage_gfp+0x3fd/0x1390 05:06:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x62b7, 0x0, 0x0, 0x0}) [ 2947.134591][T17773] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2947.140494][T17773] shmem_file_read_iter+0x224/0x720 [ 2947.145721][T17773] generic_file_splice_read+0x35c/0x500 [ 2947.151321][T17773] do_splice_to+0xf2/0x130 [ 2947.155775][T17773] ? add_to_pipe+0x1c0/0x1c0 [ 2947.160390][T17773] ? add_to_pipe+0x1c0/0x1c0 [ 2947.164994][T17773] splice_direct_to_actor+0x1b6/0x540 [ 2947.170425][T17773] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2947.176012][T17773] do_splice_direct+0x161/0x1e0 [ 2947.180895][T17773] do_sendfile+0x384/0x7f0 [ 2947.185376][T17773] __x64_sys_sendfile64+0x12a/0x140 [ 2947.191327][T17773] do_syscall_64+0xcc/0x3a0 [ 2947.196009][T17773] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2947.201912][T17773] RIP: 0033:0x45b159 [ 2947.205824][T17773] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2947.225774][T17773] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2947.234353][T17773] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2947.242428][T17773] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2947.250420][T17773] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2947.258528][T17773] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2947.266508][T17773] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000004 05:06:51 executing program 3 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x62d6, 0x0, 0x0, 0x0}) 05:06:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4020940d, &(0x7f0000000240)={0x47, "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"}) 05:06:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b35, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2947.375740][T17884] FAULT_INJECTION: forcing a failure. [ 2947.375740][T17884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:06:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2947.442549][T17884] CPU: 1 PID: 17884 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2947.451552][T17884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2947.461712][T17884] Call Trace: [ 2947.465016][T17884] dump_stack+0x11d/0x181 [ 2947.469367][T17884] should_fail.cold+0xa/0x1a [ 2947.474225][T17884] should_fail_alloc_page+0x50/0x60 [ 2947.479442][T17884] __alloc_pages_nodemask+0xd2/0x310 [ 2947.484869][T17884] alloc_pages_vma+0xc1/0x3a0 [ 2947.489562][T17884] shmem_alloc_page+0x67/0xf0 [ 2947.494373][T17884] shmem_alloc_and_acct_page+0x125/0x450 [ 2947.500016][T17884] shmem_getpage_gfp+0x2f2/0x1390 [ 2947.505108][T17884] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2947.511100][T17884] shmem_file_read_iter+0x224/0x720 [ 2947.516330][T17884] generic_file_splice_read+0x35c/0x500 [ 2947.522181][T17884] do_splice_to+0xf2/0x130 [ 2947.526686][T17884] ? add_to_pipe+0x1c0/0x1c0 [ 2947.531324][T17884] ? add_to_pipe+0x1c0/0x1c0 [ 2947.535961][T17884] splice_direct_to_actor+0x1b6/0x540 [ 2947.541535][T17884] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2947.547262][T17884] do_splice_direct+0x161/0x1e0 [ 2947.552143][T17884] do_sendfile+0x384/0x7f0 [ 2947.556756][T17884] __x64_sys_sendfile64+0x12a/0x140 [ 2947.562004][T17884] do_syscall_64+0xcc/0x3a0 [ 2947.566541][T17884] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2947.572448][T17884] RIP: 0033:0x45b159 [ 2947.576383][T17884] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2947.596086][T17884] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2947.604548][T17884] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2947.612883][T17884] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2947.621120][T17884] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2947.629100][T17884] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2947.637215][T17884] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000005 05:06:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x62ed, 0x0, 0x0, 0x0}) 05:06:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4020ae46, &(0x7f0000000240)={0x47, "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"}) 05:06:51 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000010}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b36, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:51 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:51 executing program 3 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6319, 0x0, 0x0, 0x0}) 05:06:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4090ae82, &(0x7f0000000240)={0x47, "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"}) 05:06:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b37, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2948.095728][T18115] FAULT_INJECTION: forcing a failure. [ 2948.095728][T18115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2948.149179][T18115] CPU: 1 PID: 18115 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2948.158012][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2948.168289][T18115] Call Trace: [ 2948.171657][T18115] dump_stack+0x11d/0x181 [ 2948.176093][T18115] should_fail.cold+0xa/0x1a [ 2948.180713][T18115] should_fail_alloc_page+0x50/0x60 [ 2948.185926][T18115] __alloc_pages_nodemask+0xd2/0x310 [ 2948.191542][T18115] alloc_pages_vma+0xc1/0x3a0 [ 2948.196348][T18115] shmem_alloc_page+0x67/0xf0 [ 2948.201404][T18115] shmem_alloc_and_acct_page+0x125/0x450 [ 2948.207057][T18115] shmem_getpage_gfp+0x2f2/0x1390 [ 2948.212127][T18115] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2948.218045][T18115] shmem_file_read_iter+0x224/0x720 [ 2948.223276][T18115] generic_file_splice_read+0x35c/0x500 [ 2948.229045][T18115] do_splice_to+0xf2/0x130 [ 2948.233571][T18115] ? add_to_pipe+0x1c0/0x1c0 [ 2948.238174][T18115] ? add_to_pipe+0x1c0/0x1c0 [ 2948.242806][T18115] splice_direct_to_actor+0x1b6/0x540 [ 2948.248196][T18115] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2948.253775][T18115] do_splice_direct+0x161/0x1e0 [ 2948.258651][T18115] do_sendfile+0x384/0x7f0 [ 2948.263234][T18115] __x64_sys_sendfile64+0x12a/0x140 [ 2948.268501][T18115] do_syscall_64+0xcc/0x3a0 [ 2948.273062][T18115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2948.278972][T18115] RIP: 0033:0x45b159 [ 2948.282883][T18115] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2948.302845][T18115] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2948.311576][T18115] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2948.319586][T18115] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2948.327583][T18115] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2948.335564][T18115] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:06:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6393, 0x0, 0x0, 0x0}) [ 2948.343637][T18115] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000006 05:06:52 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:52 executing program 3 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4138ae84, &(0x7f0000000240)={0x47, "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"}) 05:06:52 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000011}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3a, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x640f, 0x0, 0x0, 0x0}) [ 2948.630039][T18436] FAULT_INJECTION: forcing a failure. [ 2948.630039][T18436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2948.692656][T18436] CPU: 1 PID: 18436 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2948.701376][T18436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2948.711439][T18436] Call Trace: [ 2948.714872][T18436] dump_stack+0x11d/0x181 [ 2948.719230][T18436] should_fail.cold+0xa/0x1a [ 2948.723851][T18436] should_fail_alloc_page+0x50/0x60 [ 2948.729066][T18436] __alloc_pages_nodemask+0xd2/0x310 [ 2948.734369][T18436] alloc_pages_vma+0xc1/0x3a0 05:06:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x648d, 0x0, 0x0, 0x0}) [ 2948.739093][T18436] shmem_alloc_page+0x67/0xf0 [ 2948.743927][T18436] shmem_alloc_and_acct_page+0x125/0x450 [ 2948.749586][T18436] shmem_getpage_gfp+0x2f2/0x1390 [ 2948.754788][T18436] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2948.760698][T18436] shmem_file_read_iter+0x224/0x720 [ 2948.766063][T18436] generic_file_splice_read+0x35c/0x500 [ 2948.771631][T18436] do_splice_to+0xf2/0x130 [ 2948.776071][T18436] ? add_to_pipe+0x1c0/0x1c0 [ 2948.780681][T18436] ? add_to_pipe+0x1c0/0x1c0 [ 2948.785286][T18436] splice_direct_to_actor+0x1b6/0x540 [ 2948.790811][T18436] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2948.796508][T18436] do_splice_direct+0x161/0x1e0 [ 2948.801464][T18436] do_sendfile+0x384/0x7f0 [ 2948.806019][T18436] __x64_sys_sendfile64+0x12a/0x140 [ 2948.811408][T18436] do_syscall_64+0xcc/0x3a0 [ 2948.815937][T18436] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2948.821866][T18436] RIP: 0033:0x45b159 05:06:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3b, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2948.825847][T18436] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2948.847946][T18436] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2948.856380][T18436] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2948.864379][T18436] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2948.872362][T18436] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2948.880349][T18436] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:06:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x80045432, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2948.888349][T18436] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000007 05:06:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6568, 0x0, 0x0, 0x0}) 05:06:53 executing program 3 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x80045440, &(0x7f0000000240)={0x47, "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"}) [ 2949.181264][T18458] FAULT_INJECTION: forcing a failure. [ 2949.181264][T18458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2949.225878][T18458] CPU: 1 PID: 18458 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2949.234675][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2949.244734][T18458] Call Trace: [ 2949.248035][T18458] dump_stack+0x11d/0x181 [ 2949.252465][T18458] should_fail.cold+0xa/0x1a [ 2949.257071][T18458] should_fail_alloc_page+0x50/0x60 [ 2949.262472][T18458] __alloc_pages_nodemask+0xd2/0x310 [ 2949.267856][T18458] alloc_pages_vma+0xc1/0x3a0 [ 2949.272550][T18458] shmem_alloc_page+0x67/0xf0 [ 2949.277498][T18458] shmem_alloc_and_acct_page+0x125/0x450 [ 2949.283172][T18458] shmem_getpage_gfp+0x2f2/0x1390 [ 2949.288223][T18458] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2949.294287][T18458] shmem_file_read_iter+0x224/0x720 [ 2949.299525][T18458] generic_file_splice_read+0x35c/0x500 [ 2949.305093][T18458] do_splice_to+0xf2/0x130 [ 2949.309600][T18458] ? add_to_pipe+0x1c0/0x1c0 [ 2949.314259][T18458] ? add_to_pipe+0x1c0/0x1c0 [ 2949.319065][T18458] splice_direct_to_actor+0x1b6/0x540 [ 2949.324655][T18458] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2949.330249][T18458] do_splice_direct+0x161/0x1e0 [ 2949.335251][T18458] do_sendfile+0x384/0x7f0 [ 2949.339710][T18458] __x64_sys_sendfile64+0x12a/0x140 [ 2949.344990][T18458] do_syscall_64+0xcc/0x3a0 [ 2949.349551][T18458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2949.355454][T18458] RIP: 0033:0x45b159 05:06:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3c, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x659d, 0x0, 0x0, 0x0}) [ 2949.359447][T18458] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2949.379058][T18458] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2949.387579][T18458] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2949.395568][T18458] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2949.403674][T18458] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2949.411766][T18458] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2949.419752][T18458] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000008 05:06:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000013}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x800454d2, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b3d, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:53 executing program 3 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:53 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x666c, 0x0, 0x0, 0x0}) 05:06:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x80086301, &(0x7f0000000240)={0x47, "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"}) [ 2949.863322][T18785] FAULT_INJECTION: forcing a failure. [ 2949.863322][T18785] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2949.906956][T18785] CPU: 0 PID: 18785 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2949.915676][T18785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2949.925802][T18785] Call Trace: [ 2949.929180][T18785] dump_stack+0x11d/0x181 [ 2949.933551][T18785] should_fail.cold+0xa/0x1a [ 2949.938203][T18785] should_fail_alloc_page+0x50/0x60 [ 2949.943560][T18785] __alloc_pages_nodemask+0xd2/0x310 [ 2949.949061][T18785] alloc_pages_vma+0xc1/0x3a0 [ 2949.953893][T18785] shmem_alloc_page+0x67/0xf0 [ 2949.958612][T18785] shmem_alloc_and_acct_page+0x125/0x450 [ 2949.964359][T18785] ? apic_timer_interrupt+0xa/0x20 [ 2949.969538][T18785] shmem_getpage_gfp+0x2f2/0x1390 [ 2949.974806][T18785] shmem_file_read_iter+0x224/0x720 [ 2949.980040][T18785] generic_file_splice_read+0x35c/0x500 [ 2949.985616][T18785] do_splice_to+0xf2/0x130 [ 2949.990171][T18785] ? add_to_pipe+0x1c0/0x1c0 [ 2949.994777][T18785] ? add_to_pipe+0x1c0/0x1c0 [ 2949.999556][T18785] splice_direct_to_actor+0x1b6/0x540 [ 2950.005106][T18785] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2950.010788][T18785] do_splice_direct+0x161/0x1e0 [ 2950.015735][T18785] do_sendfile+0x384/0x7f0 [ 2950.020188][T18785] __x64_sys_sendfile64+0x12a/0x140 [ 2950.025687][T18785] do_syscall_64+0xcc/0x3a0 [ 2950.030258][T18785] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2950.036152][T18785] RIP: 0033:0x45b159 [ 2950.040065][T18785] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2950.059675][T18785] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2950.068099][T18785] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2950.076082][T18785] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2950.084141][T18785] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2950.092228][T18785] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:06:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x80086601, &(0x7f0000000240)={0x47, "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"}) 05:06:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x80dc5521, &(0x7f0000000240)={0x47, "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"}) 05:06:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b40, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2950.100328][T18785] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000009 05:06:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x66c4, 0x0, 0x0, 0x0}) 05:06:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b41, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:54 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000014}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x8138ae83, &(0x7f0000000240)={0x47, "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"}) 05:06:54 executing program 3 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b44, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2950.559847][T18915] FAULT_INJECTION: forcing a failure. [ 2950.559847][T18915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2950.587593][T18915] CPU: 1 PID: 18915 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2950.596419][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2950.606572][T18915] Call Trace: [ 2950.609875][T18915] dump_stack+0x11d/0x181 [ 2950.614259][T18915] should_fail.cold+0xa/0x1a [ 2950.618986][T18915] should_fail_alloc_page+0x50/0x60 [ 2950.624286][T18915] __alloc_pages_nodemask+0xd2/0x310 [ 2950.629596][T18915] alloc_pages_vma+0xc1/0x3a0 [ 2950.634343][T18915] shmem_alloc_page+0x67/0xf0 [ 2950.639270][T18915] shmem_alloc_and_acct_page+0x125/0x450 [ 2950.645231][T18915] shmem_getpage_gfp+0x2f2/0x1390 [ 2950.650426][T18915] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2950.656467][T18915] shmem_file_read_iter+0x224/0x720 [ 2950.661748][T18915] generic_file_splice_read+0x35c/0x500 [ 2950.667932][T18915] do_splice_to+0xf2/0x130 [ 2950.672355][T18915] ? add_to_pipe+0x1c0/0x1c0 [ 2950.677081][T18915] ? add_to_pipe+0x1c0/0x1c0 [ 2950.681769][T18915] splice_direct_to_actor+0x1b6/0x540 [ 2950.687151][T18915] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2950.692774][T18915] do_splice_direct+0x161/0x1e0 [ 2950.697671][T18915] do_sendfile+0x384/0x7f0 [ 2950.702131][T18915] __x64_sys_sendfile64+0x12a/0x140 [ 2950.707438][T18915] do_syscall_64+0xcc/0x3a0 [ 2950.711972][T18915] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2950.717916][T18915] RIP: 0033:0x45b159 [ 2950.721921][T18915] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2950.744530][T18915] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:06:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6775, 0x0, 0x0, 0x0}) 05:06:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b45, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc0045878, &(0x7f0000000240)={0x47, "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"}) [ 2950.753162][T18915] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2950.761194][T18915] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2950.769177][T18915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2950.777256][T18915] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2950.785347][T18915] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000a 05:06:54 executing program 3 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x67bd, 0x0, 0x0, 0x0}) 05:06:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc0045878, &(0x7f0000000240)={0x47, "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"}) 05:06:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b46, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2951.096382][T19063] FAULT_INJECTION: forcing a failure. [ 2951.096382][T19063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2951.163963][T19063] CPU: 1 PID: 19063 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2951.172690][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2951.182751][T19063] Call Trace: [ 2951.186071][T19063] dump_stack+0x11d/0x181 [ 2951.190596][T19063] should_fail.cold+0xa/0x1a [ 2951.195254][T19063] should_fail_alloc_page+0x50/0x60 [ 2951.200555][T19063] __alloc_pages_nodemask+0xd2/0x310 [ 2951.205888][T19063] alloc_pages_vma+0xc1/0x3a0 [ 2951.210592][T19063] shmem_alloc_page+0x67/0xf0 [ 2951.215342][T19063] shmem_alloc_and_acct_page+0x125/0x450 [ 2951.220999][T19063] shmem_getpage_gfp+0x2f2/0x1390 [ 2951.226203][T19063] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2951.232225][T19063] shmem_file_read_iter+0x224/0x720 [ 2951.237633][T19063] generic_file_splice_read+0x35c/0x500 [ 2951.243220][T19063] do_splice_to+0xf2/0x130 [ 2951.247676][T19063] ? add_to_pipe+0x1c0/0x1c0 [ 2951.252280][T19063] ? add_to_pipe+0x1c0/0x1c0 [ 2951.256921][T19063] splice_direct_to_actor+0x1b6/0x540 [ 2951.262396][T19063] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2951.267971][T19063] do_splice_direct+0x161/0x1e0 [ 2951.272907][T19063] do_sendfile+0x384/0x7f0 [ 2951.277456][T19063] __x64_sys_sendfile64+0x12a/0x140 [ 2951.283600][T19063] do_syscall_64+0xcc/0x3a0 [ 2951.288313][T19063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2951.294221][T19063] RIP: 0033:0x45b159 [ 2951.298157][T19063] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2951.318060][T19063] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2951.326672][T19063] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2951.334653][T19063] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2951.342639][T19063] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2951.350634][T19063] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2951.358805][T19063] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000b 05:06:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6865, 0x0, 0x0, 0x0}) 05:06:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b47, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:55 executing program 3 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000015}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc008ae05, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2951.600690][T19253] FAULT_INJECTION: forcing a failure. [ 2951.600690][T19253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2951.644391][T19253] CPU: 1 PID: 19253 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2951.653370][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2951.663436][T19253] Call Trace: [ 2951.666809][T19253] dump_stack+0x11d/0x181 [ 2951.671232][T19253] should_fail.cold+0xa/0x1a [ 2951.675848][T19253] should_fail_alloc_page+0x50/0x60 [ 2951.681097][T19253] __alloc_pages_nodemask+0xd2/0x310 [ 2951.686411][T19253] alloc_pages_vma+0xc1/0x3a0 05:06:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6887, 0x0, 0x0, 0x0}) [ 2951.691162][T19253] shmem_alloc_page+0x67/0xf0 [ 2951.695876][T19253] shmem_alloc_and_acct_page+0x125/0x450 [ 2951.701534][T19253] shmem_getpage_gfp+0x2f2/0x1390 [ 2951.706588][T19253] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2951.712585][T19253] shmem_file_read_iter+0x224/0x720 [ 2951.717853][T19253] generic_file_splice_read+0x35c/0x500 [ 2951.723458][T19253] do_splice_to+0xf2/0x130 [ 2951.728054][T19253] ? add_to_pipe+0x1c0/0x1c0 [ 2951.732659][T19253] ? add_to_pipe+0x1c0/0x1c0 [ 2951.737282][T19253] splice_direct_to_actor+0x1b6/0x540 05:06:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2951.742672][T19253] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2951.748258][T19253] do_splice_direct+0x161/0x1e0 [ 2951.753141][T19253] do_sendfile+0x384/0x7f0 [ 2951.757584][T19253] __x64_sys_sendfile64+0x12a/0x140 [ 2951.762853][T19253] do_syscall_64+0xcc/0x3a0 [ 2951.767632][T19253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2951.773559][T19253] RIP: 0033:0x45b159 [ 2951.777486][T19253] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2951.797715][T19253] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2951.806136][T19253] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2951.814222][T19253] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2951.822241][T19253] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2951.830224][T19253] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2951.838220][T19253] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000c 05:06:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc0189436, &(0x7f0000000240)={0x47, "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"}) 05:06:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x689e, 0x0, 0x0, 0x0}) 05:06:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b49, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:56 executing program 3 (fault-call:4 fault-nth:13): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc020660b, &(0x7f0000000240)={0x47, "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"}) 05:06:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6b73, 0x0, 0x0, 0x0}) [ 2952.211198][T19279] FAULT_INJECTION: forcing a failure. [ 2952.211198][T19279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2952.252622][T19279] CPU: 1 PID: 19279 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2952.261338][T19279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2952.271406][T19279] Call Trace: [ 2952.274894][T19279] dump_stack+0x11d/0x181 [ 2952.279262][T19279] should_fail.cold+0xa/0x1a [ 2952.284199][T19279] should_fail_alloc_page+0x50/0x60 [ 2952.289562][T19279] __alloc_pages_nodemask+0xd2/0x310 [ 2952.295168][T19279] alloc_pages_vma+0xc1/0x3a0 [ 2952.299854][T19279] shmem_alloc_page+0x67/0xf0 [ 2952.304577][T19279] shmem_alloc_and_acct_page+0x125/0x450 [ 2952.310425][T19279] shmem_getpage_gfp+0x2f2/0x1390 [ 2952.315500][T19279] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2952.321429][T19279] shmem_file_read_iter+0x224/0x720 [ 2952.326654][T19279] generic_file_splice_read+0x35c/0x500 [ 2952.332382][T19279] do_splice_to+0xf2/0x130 [ 2952.336863][T19279] ? add_to_pipe+0x1c0/0x1c0 [ 2952.341506][T19279] ? add_to_pipe+0x1c0/0x1c0 [ 2952.346136][T19279] splice_direct_to_actor+0x1b6/0x540 [ 2952.351638][T19279] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2952.357320][T19279] do_splice_direct+0x161/0x1e0 [ 2952.362215][T19279] do_sendfile+0x384/0x7f0 [ 2952.366781][T19279] __x64_sys_sendfile64+0x12a/0x140 [ 2952.372021][T19279] do_syscall_64+0xcc/0x3a0 [ 2952.376553][T19279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2952.382455][T19279] RIP: 0033:0x45b159 [ 2952.386392][T19279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2952.406105][T19279] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2952.414572][T19279] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2952.422679][T19279] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2952.430666][T19279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2952.438649][T19279] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2952.446642][T19279] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000d 05:06:56 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6b99, 0x0, 0x0, 0x0}) 05:06:56 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000064}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc040563e, &(0x7f0000000240)={0x47, "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"}) 05:06:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:56 executing program 3 (fault-call:4 fault-nth:14): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6be4, 0x0, 0x0, 0x0}) 05:06:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4b, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0xc0f85403, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2952.760856][T19501] FAULT_INJECTION: forcing a failure. [ 2952.760856][T19501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2952.817020][T19501] CPU: 1 PID: 19501 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2952.825753][T19501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2952.835806][T19501] Call Trace: [ 2952.839110][T19501] dump_stack+0x11d/0x181 [ 2952.843479][T19501] should_fail.cold+0xa/0x1a [ 2952.848469][T19501] should_fail_alloc_page+0x50/0x60 [ 2952.853687][T19501] __alloc_pages_nodemask+0xd2/0x310 [ 2952.858995][T19501] alloc_pages_vma+0xc1/0x3a0 [ 2952.863693][T19501] shmem_alloc_page+0x67/0xf0 [ 2952.868402][T19501] shmem_alloc_and_acct_page+0x125/0x450 [ 2952.874050][T19501] shmem_getpage_gfp+0x2f2/0x1390 [ 2952.879276][T19501] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2952.885215][T19501] shmem_file_read_iter+0x224/0x720 [ 2952.890474][T19501] generic_file_splice_read+0x35c/0x500 [ 2952.896064][T19501] do_splice_to+0xf2/0x130 [ 2952.900548][T19501] ? add_to_pipe+0x1c0/0x1c0 [ 2952.905149][T19501] ? add_to_pipe+0x1c0/0x1c0 [ 2952.909756][T19501] splice_direct_to_actor+0x1b6/0x540 [ 2952.915141][T19501] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2952.920776][T19501] do_splice_direct+0x161/0x1e0 [ 2952.925664][T19501] do_sendfile+0x384/0x7f0 [ 2952.930102][T19501] __x64_sys_sendfile64+0x12a/0x140 [ 2952.935347][T19501] do_syscall_64+0xcc/0x3a0 [ 2952.939917][T19501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2952.945838][T19501] RIP: 0033:0x45b159 [ 2952.949755][T19501] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2952.969390][T19501] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2952.979722][T19501] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2952.987795][T19501] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2952.995916][T19501] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2953.003965][T19501] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:06:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4c, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2953.012064][T19501] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000e 05:06:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6c58, 0x0, 0x0, 0x0}) 05:06:57 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x6c66, 0x0, 0x0, 0x0}) 05:06:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:57 executing program 3 (fault-call:4 fault-nth:15): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:57 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00014d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7015, 0x0, 0x0, 0x0}) [ 2953.734244][T19738] FAULT_INJECTION: forcing a failure. [ 2953.734244][T19738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2953.777614][T19738] CPU: 1 PID: 19738 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2953.786551][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2953.796614][T19738] Call Trace: [ 2953.799959][T19738] dump_stack+0x11d/0x181 [ 2953.804484][T19738] should_fail.cold+0xa/0x1a [ 2953.809305][T19738] should_fail_alloc_page+0x50/0x60 [ 2953.814555][T19738] __alloc_pages_nodemask+0xd2/0x310 [ 2953.819872][T19738] alloc_pages_vma+0xc1/0x3a0 [ 2953.824772][T19738] shmem_alloc_page+0x67/0xf0 [ 2953.829630][T19738] shmem_alloc_and_acct_page+0x125/0x450 [ 2953.835352][T19738] shmem_getpage_gfp+0x2f2/0x1390 [ 2953.840533][T19738] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2953.846724][T19738] shmem_file_read_iter+0x224/0x720 [ 2953.851964][T19738] generic_file_splice_read+0x35c/0x500 [ 2953.857738][T19738] do_splice_to+0xf2/0x130 [ 2953.862162][T19738] ? add_to_pipe+0x1c0/0x1c0 [ 2953.866773][T19738] ? add_to_pipe+0x1c0/0x1c0 [ 2953.871451][T19738] splice_direct_to_actor+0x1b6/0x540 05:06:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7085, 0x0, 0x0, 0x0}) 05:06:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4e, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2953.876839][T19738] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2953.882537][T19738] do_splice_direct+0x161/0x1e0 [ 2953.887416][T19738] do_sendfile+0x384/0x7f0 [ 2953.891906][T19738] __x64_sys_sendfile64+0x12a/0x140 [ 2953.897424][T19738] do_syscall_64+0xcc/0x3a0 [ 2953.902079][T19738] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2953.907995][T19738] RIP: 0033:0x45b159 [ 2953.912048][T19738] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2953.931911][T19738] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2953.940458][T19738] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2953.948718][T19738] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2953.956700][T19738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2953.965105][T19738] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2953.974079][T19738] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000000f 05:06:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:58 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b52, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:58 executing program 3 (fault-call:4 fault-nth:16): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x72bd, 0x0, 0x0, 0x0}) 05:06:58 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00029a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2954.299003][T19960] FAULT_INJECTION: forcing a failure. [ 2954.299003][T19960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:06:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2954.374836][T19960] CPU: 1 PID: 19960 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2954.384197][T19960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2954.394270][T19960] Call Trace: [ 2954.397665][T19960] dump_stack+0x11d/0x181 [ 2954.402059][T19960] should_fail.cold+0xa/0x1a [ 2954.406677][T19960] should_fail_alloc_page+0x50/0x60 [ 2954.412046][T19960] __alloc_pages_nodemask+0xd2/0x310 [ 2954.417535][T19960] alloc_pages_vma+0xc1/0x3a0 [ 2954.422237][T19960] shmem_alloc_page+0x67/0xf0 [ 2954.427002][T19960] shmem_alloc_and_acct_page+0x125/0x450 [ 2954.432674][T19960] ? __schedule+0x30e/0x690 [ 2954.437199][T19960] shmem_getpage_gfp+0x2f2/0x1390 [ 2954.442371][T19960] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2954.448320][T19960] shmem_file_read_iter+0x224/0x720 [ 2954.453557][T19960] generic_file_splice_read+0x35c/0x500 [ 2954.459129][T19960] do_splice_to+0xf2/0x130 [ 2954.463604][T19960] ? add_to_pipe+0x1c0/0x1c0 [ 2954.468213][T19960] ? add_to_pipe+0x1c0/0x1c0 [ 2954.472832][T19960] splice_direct_to_actor+0x1b6/0x540 [ 2954.478221][T19960] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2954.483808][T19960] do_splice_direct+0x161/0x1e0 [ 2954.492801][T19960] do_sendfile+0x384/0x7f0 [ 2954.497288][T19960] __x64_sys_sendfile64+0x12a/0x140 [ 2954.502609][T19960] do_syscall_64+0xcc/0x3a0 [ 2954.507168][T19960] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2954.513178][T19960] RIP: 0033:0x45b159 [ 2954.517136][T19960] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2954.536758][T19960] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2954.545500][T19960] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2954.553485][T19960] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2954.561466][T19960] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:06:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b60, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x736b, 0x0, 0x0, 0x0}) 05:06:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2954.569456][T19960] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2954.578524][T19960] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000010 05:06:58 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x73e4, 0x0, 0x0, 0x0}) 05:06:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b61, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06509f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:06:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7567, 0x0, 0x0, 0x0}) 05:06:59 executing program 3 (fault-call:4 fault-nth:17): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b62, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2955.210654][T20201] FAULT_INJECTION: forcing a failure. [ 2955.210654][T20201] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2955.231867][T20201] CPU: 0 PID: 20201 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2955.240720][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2955.251769][T20201] Call Trace: [ 2955.255078][T20201] dump_stack+0x11d/0x181 [ 2955.259464][T20201] should_fail.cold+0xa/0x1a [ 2955.264090][T20201] should_fail_alloc_page+0x50/0x60 [ 2955.269311][T20201] __alloc_pages_nodemask+0xd2/0x310 [ 2955.274655][T20201] alloc_pages_vma+0xc1/0x3a0 [ 2955.279357][T20201] shmem_alloc_page+0x67/0xf0 [ 2955.284236][T20201] shmem_alloc_and_acct_page+0x125/0x450 [ 2955.289887][T20201] shmem_getpage_gfp+0x2f2/0x1390 [ 2955.294935][T20201] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2955.301049][T20201] shmem_file_read_iter+0x224/0x720 [ 2955.306841][T20201] generic_file_splice_read+0x35c/0x500 [ 2955.312391][T20201] do_splice_to+0xf2/0x130 [ 2955.316813][T20201] ? add_to_pipe+0x1c0/0x1c0 [ 2955.321408][T20201] ? add_to_pipe+0x1c0/0x1c0 [ 2955.326075][T20201] splice_direct_to_actor+0x1b6/0x540 [ 2955.331611][T20201] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2955.337184][T20201] do_splice_direct+0x161/0x1e0 [ 2955.342082][T20201] do_sendfile+0x384/0x7f0 [ 2955.346541][T20201] __x64_sys_sendfile64+0x12a/0x140 [ 2955.352494][T20201] do_syscall_64+0xcc/0x3a0 [ 2955.357033][T20201] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2955.363097][T20201] RIP: 0033:0x45b159 [ 2955.367010][T20201] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2955.386943][T20201] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2955.395451][T20201] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2955.403479][T20201] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 05:06:59 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x77f0, 0x0, 0x0, 0x0}) 05:06:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b63, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2955.411473][T20201] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2955.419742][T20201] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2955.427834][T20201] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000011 05:06:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b64, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:59 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:06:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x78f0, 0x0, 0x0, 0x0}) 05:06:59 executing program 3 (fault-call:4 fault-nth:18): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:06:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:06:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b65, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:06:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671038c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2955.813191][T20424] FAULT_INJECTION: forcing a failure. [ 2955.813191][T20424] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2955.854081][T20424] CPU: 1 PID: 20424 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2955.863007][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2955.873256][T20424] Call Trace: [ 2955.876559][T20424] dump_stack+0x11d/0x181 [ 2955.881253][T20424] should_fail.cold+0xa/0x1a [ 2955.885951][T20424] should_fail_alloc_page+0x50/0x60 [ 2955.891268][T20424] __alloc_pages_nodemask+0xd2/0x310 [ 2955.896586][T20424] alloc_pages_vma+0xc1/0x3a0 [ 2955.901279][T20424] shmem_alloc_page+0x67/0xf0 [ 2955.906208][T20424] shmem_alloc_and_acct_page+0x125/0x450 [ 2955.912045][T20424] shmem_getpage_gfp+0x2f2/0x1390 [ 2955.917219][T20424] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2955.923130][T20424] shmem_file_read_iter+0x224/0x720 [ 2955.928582][T20424] generic_file_splice_read+0x35c/0x500 [ 2955.934340][T20424] do_splice_to+0xf2/0x130 [ 2955.938826][T20424] ? add_to_pipe+0x1c0/0x1c0 [ 2955.943444][T20424] ? add_to_pipe+0x1c0/0x1c0 [ 2955.948266][T20424] splice_direct_to_actor+0x1b6/0x540 [ 2955.953656][T20424] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2955.959401][T20424] do_splice_direct+0x161/0x1e0 [ 2955.964319][T20424] do_sendfile+0x384/0x7f0 [ 2955.968780][T20424] __x64_sys_sendfile64+0x12a/0x140 [ 2955.973996][T20424] do_syscall_64+0xcc/0x3a0 [ 2955.978613][T20424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2955.984515][T20424] RIP: 0033:0x45b159 [ 2955.988423][T20424] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2956.008383][T20424] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2956.016931][T20424] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2956.025073][T20424] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2956.034901][T20424] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2956.042905][T20424] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b66, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2956.050943][T20424] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000012 05:07:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671048c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7948, 0x0, 0x0, 0x0}) 05:07:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b67, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:00 executing program 3 (fault-call:4 fault-nth:19): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x79a5, 0x0, 0x0, 0x0}) 05:07:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b68, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b69, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2956.642607][T20658] FAULT_INJECTION: forcing a failure. [ 2956.642607][T20658] name failslab, interval 1, probability 0, space 0, times 0 [ 2956.667636][T20658] CPU: 1 PID: 20658 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2956.677145][T20658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2956.687209][T20658] Call Trace: [ 2956.690605][T20658] dump_stack+0x11d/0x181 [ 2956.694957][T20658] should_fail.cold+0xa/0x1a [ 2956.699558][T20658] __should_failslab+0xee/0x130 [ 2956.704431][T20658] should_failslab+0x9/0x14 [ 2956.709040][T20658] kmem_cache_alloc_node+0x39/0x660 [ 2956.714261][T20658] ? __alloc_skb+0x49/0x360 [ 2956.718818][T20658] __alloc_skb+0x8e/0x360 [ 2956.723196][T20658] alloc_skb_with_frags+0x8c/0x3d0 [ 2956.728496][T20658] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2956.728525][T20658] ? xas_create+0x3a7/0x920 [ 2956.739813][T20658] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2956.745866][T20658] sock_alloc_send_pskb+0x4f5/0x530 [ 2956.751130][T20658] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2956.757133][T20658] unix_stream_sendpage+0x1a1/0x8f0 [ 2956.762385][T20658] kernel_sendpage+0x7b/0xc0 [ 2956.767093][T20658] ? unix_seqpacket_recvmsg+0x90/0x90 [ 2956.772502][T20658] sock_sendpage+0x6c/0x90 [ 2956.777026][T20658] ? kernel_sendpage+0xc0/0xc0 [ 2956.781830][T20658] pipe_to_sendpage+0x102/0x1a0 [ 2956.787170][T20658] __splice_from_pipe+0x295/0x4a0 05:07:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x79d1, 0x0, 0x0, 0x0}) 05:07:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6a, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2956.792235][T20658] ? direct_splice_actor+0xc0/0xc0 [ 2956.797381][T20658] splice_from_pipe+0xbb/0x100 [ 2956.802277][T20658] ? direct_splice_actor+0xc0/0xc0 [ 2956.807414][T20658] generic_splice_sendpage+0x45/0x60 [ 2956.813242][T20658] ? splice_from_pipe+0x100/0x100 [ 2956.818335][T20658] direct_splice_actor+0xa0/0xc0 [ 2956.823338][T20658] splice_direct_to_actor+0x22b/0x540 [ 2956.828794][T20658] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2956.834359][T20658] do_splice_direct+0x161/0x1e0 [ 2956.839251][T20658] do_sendfile+0x384/0x7f0 [ 2956.843798][T20658] __x64_sys_sendfile64+0x12a/0x140 [ 2956.849162][T20658] do_syscall_64+0xcc/0x3a0 [ 2956.853685][T20658] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2956.859586][T20658] RIP: 0033:0x45b159 [ 2956.863511][T20658] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2956.883132][T20658] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2956.891642][T20658] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2956.899820][T20658] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2956.908151][T20658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2956.916242][T20658] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2956.916320][T20658] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000013 05:07:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x79f0, 0x0, 0x0, 0x0}) 05:07:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:01 executing program 3 (fault-call:4 fault-nth:20): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6b, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7a06, 0x0, 0x0, 0x0}) [ 2957.312783][T20885] FAULT_INJECTION: forcing a failure. [ 2957.312783][T20885] name failslab, interval 1, probability 0, space 0, times 0 [ 2957.355854][T20885] CPU: 0 PID: 20885 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2957.364779][T20885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2957.374850][T20885] Call Trace: [ 2957.378194][T20885] dump_stack+0x11d/0x181 [ 2957.382546][T20885] should_fail.cold+0xa/0x1a [ 2957.387161][T20885] __should_failslab+0xee/0x130 [ 2957.392210][T20885] should_failslab+0x9/0x14 [ 2957.396942][T20885] kmem_cache_alloc_node_trace+0x3b/0x670 [ 2957.402913][T20885] ? memcg_kmem_put_cache+0x7c/0xc0 [ 2957.408143][T20885] __kmalloc_node_track_caller+0x38/0x50 [ 2957.413798][T20885] __kmalloc_reserve.isra.0+0x49/0xd0 [ 2957.419193][T20885] __alloc_skb+0xc2/0x360 [ 2957.423553][T20885] ? apic_timer_interrupt+0xa/0x20 [ 2957.428739][T20885] alloc_skb_with_frags+0x8c/0x3d0 [ 2957.433876][T20885] ? constant_test_bit+0x12/0x30 [ 2957.438842][T20885] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2957.444835][T20885] sock_alloc_send_pskb+0x4f5/0x530 [ 2957.450081][T20885] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2957.456182][T20885] unix_stream_sendpage+0x1a1/0x8f0 [ 2957.461396][T20885] ? __inode_attach_wb+0x85/0x570 [ 2957.466458][T20885] kernel_sendpage+0x7b/0xc0 [ 2957.471068][T20885] ? unix_seqpacket_recvmsg+0x90/0x90 [ 2957.476485][T20885] sock_sendpage+0x6c/0x90 [ 2957.480928][T20885] ? kernel_sendpage+0xc0/0xc0 [ 2957.485987][T20885] pipe_to_sendpage+0x102/0x1a0 [ 2957.490993][T20885] __splice_from_pipe+0x295/0x4a0 [ 2957.496095][T20885] ? direct_splice_actor+0xc0/0xc0 [ 2957.501242][T20885] splice_from_pipe+0xbb/0x100 [ 2957.506147][T20885] ? direct_splice_actor+0xc0/0xc0 [ 2957.511330][T20885] generic_splice_sendpage+0x45/0x60 [ 2957.516636][T20885] ? splice_from_pipe+0x100/0x100 [ 2957.521700][T20885] direct_splice_actor+0xa0/0xc0 [ 2957.526661][T20885] splice_direct_to_actor+0x22b/0x540 [ 2957.532151][T20885] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2957.537726][T20885] do_splice_direct+0x161/0x1e0 [ 2957.542685][T20885] do_sendfile+0x384/0x7f0 [ 2957.547190][T20885] __x64_sys_sendfile64+0x12a/0x140 [ 2957.552415][T20885] do_syscall_64+0xcc/0x3a0 [ 2957.556946][T20885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2957.563001][T20885] RIP: 0033:0x45b159 [ 2957.567044][T20885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2957.587532][T20885] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2957.596092][T20885] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671088c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:01 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6c, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2957.604180][T20885] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2957.612291][T20885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2957.620272][T20885] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2957.628264][T20885] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000014 05:07:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7af0, 0x0, 0x0, 0x0}) 05:07:01 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:01 executing program 3 (fault-call:4 fault-nth:21): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b6d, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2957.982311][T21113] FAULT_INJECTION: forcing a failure. [ 2957.982311][T21113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:07:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2958.040516][T21113] CPU: 1 PID: 21113 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2958.049686][T21113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2958.059867][T21113] Call Trace: [ 2958.063186][T21113] dump_stack+0x11d/0x181 [ 2958.067555][T21113] should_fail.cold+0xa/0x1a [ 2958.072176][T21113] should_fail_alloc_page+0x50/0x60 [ 2958.077454][T21113] __alloc_pages_nodemask+0xd2/0x310 [ 2958.082763][T21113] alloc_pages_vma+0xc1/0x3a0 [ 2958.087560][T21113] shmem_alloc_page+0x67/0xf0 [ 2958.092287][T21113] shmem_alloc_and_acct_page+0x125/0x450 [ 2958.097941][T21113] shmem_getpage_gfp+0x2f2/0x1390 [ 2958.103015][T21113] shmem_file_read_iter+0x224/0x720 [ 2958.108238][T21113] ? iov_iter_pipe+0xfa/0x120 [ 2958.112939][T21113] generic_file_splice_read+0x35c/0x500 [ 2958.118547][T21113] do_splice_to+0xf2/0x130 [ 2958.123010][T21113] ? add_to_pipe+0x1c0/0x1c0 [ 2958.127714][T21113] ? add_to_pipe+0x1c0/0x1c0 [ 2958.132325][T21113] splice_direct_to_actor+0x1b6/0x540 05:07:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b70, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2958.137719][T21113] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2958.143312][T21113] do_splice_direct+0x161/0x1e0 [ 2958.148247][T21113] do_sendfile+0x384/0x7f0 [ 2958.152699][T21113] __x64_sys_sendfile64+0x12a/0x140 [ 2958.157925][T21113] do_syscall_64+0xcc/0x3a0 [ 2958.162456][T21113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2958.168360][T21113] RIP: 0033:0x45b159 05:07:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c2f0398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7af7, 0x0, 0x0, 0x0}) [ 2958.172407][T21113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2958.192377][T21113] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2958.200967][T21113] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2958.208961][T21113] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2958.216980][T21113] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2958.224962][T21113] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2958.233010][T21113] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000015 05:07:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7b3e, 0x0, 0x0, 0x0}) 05:07:02 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x13}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:02 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:02 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b71, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:02 executing program 3 (fault-call:4 fault-nth:22): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7bf0, 0x0, 0x0, 0x0}) 05:07:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2958.721747][T21345] FAULT_INJECTION: forcing a failure. [ 2958.721747][T21345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2958.767959][T21345] CPU: 1 PID: 21345 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2958.776670][T21345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2958.786838][T21345] Call Trace: [ 2958.790141][T21345] dump_stack+0x11d/0x181 [ 2958.794504][T21345] should_fail.cold+0xa/0x1a [ 2958.799119][T21345] should_fail_alloc_page+0x50/0x60 [ 2958.804388][T21345] __alloc_pages_nodemask+0xd2/0x310 [ 2958.809780][T21345] alloc_pages_vma+0xc1/0x3a0 05:07:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7c23, 0x0, 0x0, 0x0}) [ 2958.814481][T21345] shmem_alloc_page+0x67/0xf0 [ 2958.819372][T21345] shmem_alloc_and_acct_page+0x125/0x450 [ 2958.825205][T21345] shmem_getpage_gfp+0x2f2/0x1390 [ 2958.830448][T21345] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2958.836368][T21345] shmem_file_read_iter+0x224/0x720 [ 2958.841722][T21345] generic_file_splice_read+0x35c/0x500 [ 2958.847408][T21345] do_splice_to+0xf2/0x130 [ 2958.851915][T21345] ? add_to_pipe+0x1c0/0x1c0 [ 2958.856544][T21345] ? add_to_pipe+0x1c0/0x1c0 [ 2958.861318][T21345] splice_direct_to_actor+0x1b6/0x540 [ 2958.866890][T21345] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2958.872694][T21345] do_splice_direct+0x161/0x1e0 [ 2958.877625][T21345] do_sendfile+0x384/0x7f0 [ 2958.882127][T21345] __x64_sys_sendfile64+0x12a/0x140 [ 2958.887419][T21345] do_syscall_64+0xcc/0x3a0 [ 2958.892527][T21345] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2958.898450][T21345] RIP: 0033:0x45b159 05:07:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7c45, 0x0, 0x0, 0x0}) [ 2958.902363][T21345] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2958.922076][T21345] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2958.930503][T21345] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2958.938486][T21345] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2958.946543][T21345] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2958.954636][T21345] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:07:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2958.962618][T21345] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000016 05:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfa, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310498e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:03 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7cf0, 0x0, 0x0, 0x0}) 05:07:03 executing program 3 (fault-call:4 fault-nth:23): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4bfb, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:03 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc0009a7}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2959.662976][T21580] FAULT_INJECTION: forcing a failure. [ 2959.662976][T21580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2959.697179][T21580] CPU: 0 PID: 21580 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2959.705905][T21580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2959.716106][T21580] Call Trace: [ 2959.719410][T21580] dump_stack+0x11d/0x181 [ 2959.723760][T21580] should_fail.cold+0xa/0x1a [ 2959.728367][T21580] should_fail_alloc_page+0x50/0x60 [ 2959.733686][T21580] __alloc_pages_nodemask+0xd2/0x310 [ 2959.739388][T21580] alloc_pages_vma+0xc1/0x3a0 [ 2959.744142][T21580] shmem_alloc_page+0x67/0xf0 [ 2959.749093][T21580] shmem_alloc_and_acct_page+0x125/0x450 [ 2959.754847][T21580] shmem_getpage_gfp+0x2f2/0x1390 [ 2959.759954][T21580] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2959.765909][T21580] shmem_file_read_iter+0x224/0x720 [ 2959.771211][T21580] generic_file_splice_read+0x35c/0x500 [ 2959.779216][T21580] do_splice_to+0xf2/0x130 [ 2959.783957][T21580] ? add_to_pipe+0x1c0/0x1c0 [ 2959.788667][T21580] ? add_to_pipe+0x1c0/0x1c0 [ 2959.793282][T21580] splice_direct_to_actor+0x1b6/0x540 [ 2959.798666][T21580] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2959.804308][T21580] do_splice_direct+0x161/0x1e0 [ 2959.809183][T21580] do_sendfile+0x384/0x7f0 05:07:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7dc2, 0x0, 0x0, 0x0}) 05:07:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7df0, 0x0, 0x0, 0x0}) [ 2959.813681][T21580] __x64_sys_sendfile64+0x12a/0x140 [ 2959.818903][T21580] do_syscall_64+0xcc/0x3a0 [ 2959.823521][T21580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2959.829414][T21580] RIP: 0033:0x45b159 [ 2959.833326][T21580] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2959.853422][T21580] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:07:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4c01, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2959.862238][T21580] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2959.870220][T21580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2959.878201][T21580] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2959.886185][T21580] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2959.894302][T21580] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000017 05:07:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7ef0, 0x0, 0x0, 0x0}) 05:07:04 executing program 3 (fault-call:4 fault-nth:24): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) [ 2960.272383][T21603] FAULT_INJECTION: forcing a failure. [ 2960.272383][T21603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2960.295782][T21603] CPU: 0 PID: 21603 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2960.304527][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2960.314971][T21603] Call Trace: [ 2960.318263][T21603] dump_stack+0x11d/0x181 [ 2960.323310][T21603] should_fail.cold+0xa/0x1a [ 2960.328005][T21603] should_fail_alloc_page+0x50/0x60 [ 2960.333304][T21603] __alloc_pages_nodemask+0xd2/0x310 [ 2960.338662][T21603] alloc_pages_vma+0xc1/0x3a0 [ 2960.343432][T21603] shmem_alloc_page+0x67/0xf0 [ 2960.348277][T21603] shmem_alloc_and_acct_page+0x125/0x450 [ 2960.353948][T21603] shmem_getpage_gfp+0x2f2/0x1390 [ 2960.359150][T21603] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2960.365160][T21603] shmem_file_read_iter+0x224/0x720 [ 2960.370395][T21603] generic_file_splice_read+0x35c/0x500 [ 2960.375989][T21603] do_splice_to+0xf2/0x130 [ 2960.380502][T21603] ? add_to_pipe+0x1c0/0x1c0 [ 2960.385126][T21603] ? add_to_pipe+0x1c0/0x1c0 [ 2960.389902][T21603] splice_direct_to_actor+0x1b6/0x540 [ 2960.395338][T21603] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2960.400945][T21603] do_splice_direct+0x161/0x1e0 [ 2960.405878][T21603] do_sendfile+0x384/0x7f0 [ 2960.410346][T21603] __x64_sys_sendfile64+0x12a/0x140 [ 2960.415619][T21603] do_syscall_64+0xcc/0x3a0 [ 2960.420184][T21603] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2960.426305][T21603] RIP: 0033:0x45b159 [ 2960.430372][T21603] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2960.450253][T21603] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2960.458690][T21603] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2960.466781][T21603] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2960.474756][T21603] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2960.482738][T21603] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2960.490722][T21603] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000018 05:07:04 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5409, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7ef7, 0x0, 0x0, 0x0}) 05:07:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000a00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:04 executing program 3 (fault-call:4 fault-nth:25): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2960.731466][T21814] FAULT_INJECTION: forcing a failure. [ 2960.731466][T21814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2960.764126][T21814] CPU: 0 PID: 21814 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2960.773179][T21814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2960.783237][T21814] Call Trace: [ 2960.786580][T21814] dump_stack+0x11d/0x181 [ 2960.791022][T21814] should_fail.cold+0xa/0x1a [ 2960.795837][T21814] should_fail_alloc_page+0x50/0x60 [ 2960.801054][T21814] __alloc_pages_nodemask+0xd2/0x310 [ 2960.806712][T21814] alloc_pages_vma+0xc1/0x3a0 [ 2960.811400][T21814] shmem_alloc_page+0x67/0xf0 [ 2960.816230][T21814] shmem_alloc_and_acct_page+0x125/0x450 [ 2960.821933][T21814] shmem_getpage_gfp+0x2f2/0x1390 [ 2960.826991][T21814] shmem_file_read_iter+0x224/0x720 [ 2960.832221][T21814] generic_file_splice_read+0x35c/0x500 [ 2960.837796][T21814] do_splice_to+0xf2/0x130 [ 2960.842434][T21814] ? add_to_pipe+0x1c0/0x1c0 [ 2960.847130][T21814] ? add_to_pipe+0x1c0/0x1c0 [ 2960.851902][T21814] splice_direct_to_actor+0x1b6/0x540 [ 2960.857314][T21814] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2960.862954][T21814] do_splice_direct+0x161/0x1e0 [ 2960.867893][T21814] do_sendfile+0x384/0x7f0 [ 2960.872390][T21814] __x64_sys_sendfile64+0x12a/0x140 05:07:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540b, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2960.878509][T21814] ? do_syscall_64+0xb5/0x3a0 [ 2960.883259][T21814] do_syscall_64+0xcc/0x3a0 [ 2960.887766][T21814] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2960.893776][T21814] RIP: 0033:0x45b159 [ 2960.897686][T21814] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2960.917603][T21814] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:07:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x7ff0, 0x0, 0x0, 0x0}) [ 2960.926127][T21814] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2960.934219][T21814] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2960.942416][T21814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2960.950501][T21814] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2960.958555][T21814] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000019 05:07:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540c, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x80f0, 0x0, 0x0, 0x0}) 05:07:05 executing program 3 (fault-call:4 fault-nth:26): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540d, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc5d4acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000b00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:05 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x64}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8100, 0x0, 0x0, 0x0}) 05:07:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf602523081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2961.757120][T22056] FAULT_INJECTION: forcing a failure. [ 2961.757120][T22056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2961.785358][T22056] CPU: 0 PID: 22056 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2961.794288][T22056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2961.804366][T22056] Call Trace: [ 2961.807983][T22056] dump_stack+0x11d/0x181 [ 2961.812358][T22056] should_fail.cold+0xa/0x1a [ 2961.817115][T22056] should_fail_alloc_page+0x50/0x60 [ 2961.822432][T22056] __alloc_pages_nodemask+0xd2/0x310 [ 2961.827745][T22056] alloc_pages_vma+0xc1/0x3a0 [ 2961.832565][T22056] shmem_alloc_page+0x67/0xf0 [ 2961.837677][T22056] shmem_alloc_and_acct_page+0x125/0x450 [ 2961.843649][T22056] ? shmem_getpage_gfp+0x127/0x1390 [ 2961.848875][T22056] shmem_getpage_gfp+0x2f2/0x1390 [ 2961.854017][T22056] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2961.859961][T22056] shmem_file_read_iter+0x224/0x720 [ 2961.865193][T22056] generic_file_splice_read+0x35c/0x500 [ 2961.870953][T22056] do_splice_to+0xf2/0x130 [ 2961.875481][T22056] ? add_to_pipe+0x1c0/0x1c0 [ 2961.880169][T22056] ? add_to_pipe+0x1c0/0x1c0 [ 2961.884889][T22056] splice_direct_to_actor+0x1b6/0x540 [ 2961.890278][T22056] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2961.895865][T22056] do_splice_direct+0x161/0x1e0 [ 2961.900770][T22056] do_sendfile+0x384/0x7f0 05:07:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8105, 0x0, 0x0, 0x0}) [ 2961.905217][T22056] __x64_sys_sendfile64+0x12a/0x140 [ 2961.910603][T22056] do_syscall_64+0xcc/0x3a0 [ 2961.915131][T22056] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2961.921029][T22056] RIP: 0033:0x45b159 [ 2961.925016][T22056] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2961.945056][T22056] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 05:07:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540e, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2961.953913][T22056] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2961.961900][T22056] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2961.970015][T22056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2961.978372][T22056] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2961.986583][T22056] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001a 05:07:06 executing program 3 (fault-call:4 fault-nth:27): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x81f0, 0x0, 0x0, 0x0}) 05:07:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x540f, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x82f0, 0x0, 0x0, 0x0}) [ 2962.377842][T22077] FAULT_INJECTION: forcing a failure. [ 2962.377842][T22077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2962.405464][T22077] CPU: 0 PID: 22077 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2962.414361][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2962.424421][T22077] Call Trace: [ 2962.427732][T22077] dump_stack+0x11d/0x181 [ 2962.432348][T22077] should_fail.cold+0xa/0x1a [ 2962.436971][T22077] should_fail_alloc_page+0x50/0x60 [ 2962.442257][T22077] __alloc_pages_nodemask+0xd2/0x310 [ 2962.448265][T22077] alloc_pages_vma+0xc1/0x3a0 [ 2962.453334][T22077] shmem_alloc_page+0x67/0xf0 [ 2962.458130][T22077] shmem_alloc_and_acct_page+0x125/0x450 [ 2962.463780][T22077] shmem_getpage_gfp+0x2f2/0x1390 [ 2962.468832][T22077] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2962.474778][T22077] shmem_file_read_iter+0x224/0x720 [ 2962.480629][T22077] generic_file_splice_read+0x35c/0x500 [ 2962.486225][T22077] do_splice_to+0xf2/0x130 [ 2962.490783][T22077] ? add_to_pipe+0x1c0/0x1c0 [ 2962.495424][T22077] ? add_to_pipe+0x1c0/0x1c0 [ 2962.500039][T22077] splice_direct_to_actor+0x1b6/0x540 [ 2962.505439][T22077] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2962.511026][T22077] do_splice_direct+0x161/0x1e0 [ 2962.515935][T22077] do_sendfile+0x384/0x7f0 [ 2962.520456][T22077] __x64_sys_sendfile64+0x12a/0x140 [ 2962.525671][T22077] do_syscall_64+0xcc/0x3a0 [ 2962.530357][T22077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2962.536362][T22077] RIP: 0033:0x45b159 [ 2962.540270][T22077] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2962.560123][T22077] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2962.568677][T22077] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14d}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:06 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000c00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8320, 0x0, 0x0, 0x0}) 05:07:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2962.576668][T22077] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2962.585529][T22077] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2962.593508][T22077] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2962.601645][T22077] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001b 05:07:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5410, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x83f0, 0x0, 0x0, 0x0}) 05:07:07 executing program 3 (fault-call:4 fault-nth:28): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8408, 0x0, 0x0, 0x0}) 05:07:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a15c70a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) [ 2963.152274][T22317] FAULT_INJECTION: forcing a failure. [ 2963.152274][T22317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2963.209047][T22317] CPU: 1 PID: 22317 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2963.218002][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2963.232834][T22317] Call Trace: [ 2963.236244][T22317] dump_stack+0x11d/0x181 [ 2963.240706][T22317] should_fail.cold+0xa/0x1a [ 2963.245528][T22317] should_fail_alloc_page+0x50/0x60 [ 2963.250754][T22317] __alloc_pages_nodemask+0xd2/0x310 [ 2963.256063][T22317] alloc_pages_vma+0xc1/0x3a0 [ 2963.260905][T22317] shmem_alloc_page+0x67/0xf0 [ 2963.265772][T22317] shmem_alloc_and_acct_page+0x125/0x450 [ 2963.271443][T22317] shmem_getpage_gfp+0x2f2/0x1390 [ 2963.276499][T22317] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2963.282419][T22317] shmem_file_read_iter+0x224/0x720 [ 2963.287714][T22317] generic_file_splice_read+0x35c/0x500 [ 2963.293464][T22317] do_splice_to+0xf2/0x130 [ 2963.298098][T22317] ? add_to_pipe+0x1c0/0x1c0 [ 2963.302992][T22317] ? add_to_pipe+0x1c0/0x1c0 [ 2963.307663][T22317] splice_direct_to_actor+0x1b6/0x540 [ 2963.313101][T22317] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2963.318834][T22317] do_splice_direct+0x161/0x1e0 [ 2963.323963][T22317] do_sendfile+0x384/0x7f0 [ 2963.328476][T22317] __x64_sys_sendfile64+0x12a/0x140 [ 2963.333701][T22317] do_syscall_64+0xcc/0x3a0 [ 2963.338346][T22317] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2963.344281][T22317] RIP: 0033:0x45b159 [ 2963.348280][T22317] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2963.368698][T22317] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2963.377120][T22317] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2963.385310][T22317] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2963.393301][T22317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2963.401806][T22317] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2963.409794][T22317] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001c 05:07:07 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x29a}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5413, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad250a5a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8488, 0x0, 0x0, 0x0}) 05:07:07 executing program 3 (fault-call:4 fault-nth:29): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:07 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000d00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2963.772581][T22534] FAULT_INJECTION: forcing a failure. [ 2963.772581][T22534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2963.797250][T22534] CPU: 1 PID: 22534 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2963.805972][T22534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2963.816165][T22534] Call Trace: [ 2963.819549][T22534] dump_stack+0x11d/0x181 [ 2963.824001][T22534] should_fail.cold+0xa/0x1a [ 2963.828897][T22534] should_fail_alloc_page+0x50/0x60 [ 2963.834175][T22534] __alloc_pages_nodemask+0xd2/0x310 [ 2963.839493][T22534] alloc_pages_vma+0xc1/0x3a0 [ 2963.844207][T22534] shmem_alloc_page+0x67/0xf0 [ 2963.848913][T22534] shmem_alloc_and_acct_page+0x125/0x450 [ 2963.854557][T22534] shmem_getpage_gfp+0x2f2/0x1390 [ 2963.859614][T22534] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2963.865526][T22534] shmem_file_read_iter+0x224/0x720 [ 2963.870990][T22534] generic_file_splice_read+0x35c/0x500 [ 2963.876592][T22534] do_splice_to+0xf2/0x130 [ 2963.881024][T22534] ? add_to_pipe+0x1c0/0x1c0 [ 2963.885703][T22534] ? add_to_pipe+0x1c0/0x1c0 [ 2963.890332][T22534] splice_direct_to_actor+0x1b6/0x540 [ 2963.896281][T22534] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2963.901911][T22534] do_splice_direct+0x161/0x1e0 [ 2963.906808][T22534] do_sendfile+0x384/0x7f0 [ 2963.911259][T22534] __x64_sys_sendfile64+0x12a/0x140 [ 2963.917577][T22534] do_syscall_64+0xcc/0x3a0 05:07:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5414, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x84f0, 0x0, 0x0, 0x0}) [ 2963.922158][T22534] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2963.928345][T22534] RIP: 0033:0x45b159 [ 2963.932480][T22534] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2963.952960][T22534] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2963.961542][T22534] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:08 executing program 3 (fault-call:4 fault-nth:30): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) [ 2963.961555][T22534] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2963.961619][T22534] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:07:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2963.961631][T22534] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2963.961643][T22534] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001d 05:07:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8570, 0x0, 0x0, 0x0}) [ 2964.126173][T22553] FAULT_INJECTION: forcing a failure. [ 2964.126173][T22553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2964.126206][T22553] CPU: 1 PID: 22553 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2964.126218][T22553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2964.126306][T22553] Call Trace: [ 2964.126400][T22553] dump_stack+0x11d/0x181 [ 2964.126428][T22553] should_fail.cold+0xa/0x1a [ 2964.126456][T22553] should_fail_alloc_page+0x50/0x60 [ 2964.126511][T22553] __alloc_pages_nodemask+0xd2/0x310 [ 2964.126609][T22553] alloc_pages_vma+0xc1/0x3a0 [ 2964.126671][T22553] shmem_alloc_page+0x67/0xf0 [ 2964.126706][T22553] shmem_alloc_and_acct_page+0x125/0x450 [ 2964.126772][T22553] shmem_getpage_gfp+0x2f2/0x1390 [ 2964.126804][T22553] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2964.126824][T22553] shmem_file_read_iter+0x224/0x720 [ 2964.126866][T22553] generic_file_splice_read+0x35c/0x500 [ 2964.126900][T22553] do_splice_to+0xf2/0x130 [ 2964.126953][T22553] ? add_to_pipe+0x1c0/0x1c0 [ 2964.126973][T22553] ? add_to_pipe+0x1c0/0x1c0 [ 2964.126998][T22553] splice_direct_to_actor+0x1b6/0x540 [ 2964.127020][T22553] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2964.127052][T22553] do_splice_direct+0x161/0x1e0 [ 2964.127114][T22553] do_sendfile+0x384/0x7f0 [ 2964.127144][T22553] __x64_sys_sendfile64+0x12a/0x140 [ 2964.127168][T22553] do_syscall_64+0xcc/0x3a0 [ 2964.127195][T22553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2964.127208][T22553] RIP: 0033:0x45b159 [ 2964.127236][T22553] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2964.127315][T22553] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2964.127333][T22553] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2964.127343][T22553] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2964.127356][T22553] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2964.127367][T22553] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2964.127378][T22553] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001e 05:07:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:08 executing program 3 (fault-call:4 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x858a, 0x0, 0x0, 0x0}) 05:07:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5415, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000fa0}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2964.658044][T22770] FAULT_INJECTION: forcing a failure. [ 2964.658044][T22770] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2964.698087][T22770] CPU: 1 PID: 22770 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2964.707201][T22770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2964.717297][T22770] Call Trace: [ 2964.720777][T22770] dump_stack+0x11d/0x181 [ 2964.725396][T22770] should_fail.cold+0xa/0x1a [ 2964.730116][T22770] should_fail_alloc_page+0x50/0x60 [ 2964.735458][T22770] __alloc_pages_nodemask+0xd2/0x310 [ 2964.740943][T22770] alloc_pages_vma+0xc1/0x3a0 [ 2964.745657][T22770] shmem_alloc_page+0x67/0xf0 [ 2964.750547][T22770] shmem_alloc_and_acct_page+0x125/0x450 [ 2964.756374][T22770] shmem_getpage_gfp+0x2f2/0x1390 [ 2964.761459][T22770] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2964.767377][T22770] shmem_file_read_iter+0x224/0x720 [ 2964.773165][T22770] generic_file_splice_read+0x35c/0x500 [ 2964.778865][T22770] do_splice_to+0xf2/0x130 [ 2964.783468][T22770] ? add_to_pipe+0x1c0/0x1c0 [ 2964.788150][T22770] ? add_to_pipe+0x1c0/0x1c0 [ 2964.792836][T22770] splice_direct_to_actor+0x1b6/0x540 [ 2964.798224][T22770] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2964.803812][T22770] do_splice_direct+0x161/0x1e0 [ 2964.808699][T22770] do_sendfile+0x384/0x7f0 [ 2964.813232][T22770] __x64_sys_sendfile64+0x12a/0x140 [ 2964.818651][T22770] do_syscall_64+0xcc/0x3a0 [ 2964.823202][T22770] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2964.829100][T22770] RIP: 0033:0x45b159 [ 2964.833282][T22770] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:07:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5416, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x85ad, 0x0, 0x0, 0x0}) [ 2964.853239][T22770] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2964.861770][T22770] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2964.869905][T22770] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2964.878088][T22770] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2964.886281][T22770] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2964.894272][T22770] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 000000000000001f 05:07:08 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa0adca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5418, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x85f0, 0x0, 0x0, 0x0}) 05:07:09 executing program 3 (fault-call:4 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) [ 2965.316970][T22793] FAULT_INJECTION: forcing a failure. [ 2965.316970][T22793] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2965.330665][T22793] CPU: 0 PID: 22793 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2965.339335][T22793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2965.349808][T22793] Call Trace: [ 2965.353117][T22793] dump_stack+0x11d/0x181 [ 2965.357559][T22793] should_fail.cold+0xa/0x1a [ 2965.362287][T22793] should_fail_alloc_page+0x50/0x60 [ 2965.367531][T22793] __alloc_pages_nodemask+0xd2/0x310 [ 2965.372993][T22793] alloc_pages_vma+0xc1/0x3a0 [ 2965.377692][T22793] shmem_alloc_page+0x67/0xf0 [ 2965.382588][T22793] shmem_alloc_and_acct_page+0x125/0x450 [ 2965.388367][T22793] shmem_getpage_gfp+0x2f2/0x1390 [ 2965.393462][T22793] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2965.399386][T22793] shmem_file_read_iter+0x224/0x720 [ 2965.404628][T22793] generic_file_splice_read+0x35c/0x500 [ 2965.410357][T22793] do_splice_to+0xf2/0x130 [ 2965.414813][T22793] ? add_to_pipe+0x1c0/0x1c0 [ 2965.419412][T22793] ? add_to_pipe+0x1c0/0x1c0 [ 2965.424365][T22793] splice_direct_to_actor+0x1b6/0x540 [ 2965.429914][T22793] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2965.435497][T22793] do_splice_direct+0x161/0x1e0 [ 2965.440395][T22793] do_sendfile+0x384/0x7f0 [ 2965.444857][T22793] __x64_sys_sendfile64+0x12a/0x140 [ 2965.450363][T22793] do_syscall_64+0xcc/0x3a0 [ 2965.455216][T22793] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2965.461249][T22793] RIP: 0033:0x45b159 [ 2965.465242][T22793] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2965.485377][T22793] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2965.493825][T22793] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2965.501905][T22793] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2965.509889][T22793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2965.517890][T22793] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2965.525877][T22793] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000020 05:07:09 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541c, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa2fdca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) 05:07:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x86f0, 0x0, 0x0, 0x0}) 05:07:09 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc001100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:09 executing program 3 (fault-call:4 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541d, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2965.782201][T23007] FAULT_INJECTION: forcing a failure. [ 2965.782201][T23007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2965.809801][T23007] CPU: 0 PID: 23007 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2965.818643][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2965.828707][T23007] Call Trace: [ 2965.832022][T23007] dump_stack+0x11d/0x181 [ 2965.836387][T23007] should_fail.cold+0xa/0x1a [ 2965.841008][T23007] should_fail_alloc_page+0x50/0x60 [ 2965.846229][T23007] __alloc_pages_nodemask+0xd2/0x310 [ 2965.851736][T23007] alloc_pages_vma+0xc1/0x3a0 [ 2965.856452][T23007] shmem_alloc_page+0x67/0xf0 [ 2965.861246][T23007] shmem_alloc_and_acct_page+0x125/0x450 [ 2965.866929][T23007] shmem_getpage_gfp+0x2f2/0x1390 [ 2965.872109][T23007] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2965.878151][T23007] shmem_file_read_iter+0x224/0x720 [ 2965.883381][T23007] generic_file_splice_read+0x35c/0x500 [ 2965.888966][T23007] do_splice_to+0xf2/0x130 [ 2965.893408][T23007] ? add_to_pipe+0x1c0/0x1c0 [ 2965.898076][T23007] ? add_to_pipe+0x1c0/0x1c0 [ 2965.902680][T23007] splice_direct_to_actor+0x1b6/0x540 [ 2965.908079][T23007] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2965.913653][T23007] do_splice_direct+0x161/0x1e0 [ 2965.919095][T23007] do_sendfile+0x384/0x7f0 [ 2965.923593][T23007] __x64_sys_sendfile64+0x12a/0x140 [ 2965.928824][T23007] do_syscall_64+0xcc/0x3a0 [ 2965.933452][T23007] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2965.939466][T23007] RIP: 0033:0x45b159 [ 2965.943495][T23007] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2965.963761][T23007] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2965.972272][T23007] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8768, 0x0, 0x0, 0x0}) 05:07:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2965.980251][T23007] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2965.988294][T23007] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2965.998275][T23007] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2966.006418][T23007] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000021 05:07:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x87f0, 0x0, 0x0, 0x0}) 05:07:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541e, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:10 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x600}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8884, 0x0, 0x0, 0x0}) 05:07:10 executing program 3 (fault-call:4 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:10 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc001300}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5421, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2966.549724][T23242] FAULT_INJECTION: forcing a failure. [ 2966.549724][T23242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2966.577336][T23242] CPU: 1 PID: 23242 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2966.586256][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2966.596362][T23242] Call Trace: [ 2966.599671][T23242] dump_stack+0x11d/0x181 [ 2966.604043][T23242] should_fail.cold+0xa/0x1a [ 2966.608667][T23242] should_fail_alloc_page+0x50/0x60 [ 2966.613930][T23242] __alloc_pages_nodemask+0xd2/0x310 [ 2966.619285][T23242] alloc_pages_vma+0xc1/0x3a0 [ 2966.624124][T23242] shmem_alloc_page+0x67/0xf0 [ 2966.628853][T23242] shmem_alloc_and_acct_page+0x125/0x450 [ 2966.634676][T23242] shmem_getpage_gfp+0x2f2/0x1390 [ 2966.639753][T23242] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2966.645852][T23242] shmem_file_read_iter+0x224/0x720 [ 2966.651205][T23242] generic_file_splice_read+0x35c/0x500 [ 2966.656784][T23242] do_splice_to+0xf2/0x130 [ 2966.661216][T23242] ? add_to_pipe+0x1c0/0x1c0 [ 2966.665824][T23242] ? add_to_pipe+0x1c0/0x1c0 [ 2966.670528][T23242] splice_direct_to_actor+0x1b6/0x540 [ 2966.675986][T23242] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2966.681568][T23242] do_splice_direct+0x161/0x1e0 [ 2966.686519][T23242] do_sendfile+0x384/0x7f0 [ 2966.690984][T23242] __x64_sys_sendfile64+0x12a/0x140 [ 2966.696388][T23242] do_syscall_64+0xcc/0x3a0 [ 2966.700937][T23242] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2966.706892][T23242] RIP: 0033:0x45b159 [ 2966.710849][T23242] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2966.730659][T23242] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2966.739175][T23242] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x88f0, 0x0, 0x0, 0x0}) [ 2966.747163][T23242] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2966.755144][T23242] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2966.763133][T23242] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2966.771131][T23242] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000022 05:07:10 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:10 executing program 3 (fault-call:4 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) [ 2966.950746][T23357] FAULT_INJECTION: forcing a failure. [ 2966.950746][T23357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2966.972779][T23357] CPU: 1 PID: 23357 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2966.981607][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2966.992049][T23357] Call Trace: [ 2966.995838][T23357] dump_stack+0x11d/0x181 [ 2967.000187][T23357] should_fail.cold+0xa/0x1a [ 2967.004842][T23357] should_fail_alloc_page+0x50/0x60 [ 2967.010175][T23357] __alloc_pages_nodemask+0xd2/0x310 [ 2967.016335][T23357] alloc_pages_vma+0xc1/0x3a0 [ 2967.021116][T23357] shmem_alloc_page+0x67/0xf0 [ 2967.025831][T23357] shmem_alloc_and_acct_page+0x125/0x450 [ 2967.031631][T23357] shmem_getpage_gfp+0x2f2/0x1390 [ 2967.036677][T23357] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2967.042611][T23357] shmem_file_read_iter+0x224/0x720 [ 2967.047910][T23357] generic_file_splice_read+0x35c/0x500 [ 2967.053514][T23357] do_splice_to+0xf2/0x130 [ 2967.058003][T23357] ? add_to_pipe+0x1c0/0x1c0 [ 2967.062634][T23357] ? add_to_pipe+0x1c0/0x1c0 [ 2967.067243][T23357] splice_direct_to_actor+0x1b6/0x540 [ 2967.072711][T23357] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2967.078708][T23357] do_splice_direct+0x161/0x1e0 [ 2967.083794][T23357] do_sendfile+0x384/0x7f0 [ 2967.088389][T23357] __x64_sys_sendfile64+0x12a/0x140 [ 2967.093616][T23357] do_syscall_64+0xcc/0x3a0 [ 2967.098430][T23357] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2967.104333][T23357] RIP: 0033:0x45b159 [ 2967.108411][T23357] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2967.128302][T23357] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2967.137004][T23357] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 05:07:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x700}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5422, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x88f2, 0x0, 0x0, 0x0}) [ 2967.145027][T23357] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2967.153894][T23357] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2967.161895][T23357] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2967.169892][T23357] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000023 05:07:11 executing program 3 (fault-call:4 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2967.420222][T23374] FAULT_INJECTION: forcing a failure. [ 2967.420222][T23374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2967.467486][T23374] CPU: 1 PID: 23374 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2967.476210][T23374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2967.486275][T23374] Call Trace: [ 2967.489631][T23374] dump_stack+0x11d/0x181 [ 2967.493993][T23374] should_fail.cold+0xa/0x1a [ 2967.498610][T23374] should_fail_alloc_page+0x50/0x60 [ 2967.504064][T23374] __alloc_pages_nodemask+0xd2/0x310 [ 2967.509585][T23374] alloc_pages_vma+0xc1/0x3a0 [ 2967.514321][T23374] shmem_alloc_page+0x67/0xf0 [ 2967.519031][T23374] shmem_alloc_and_acct_page+0x125/0x450 [ 2967.524799][T23374] shmem_getpage_gfp+0x2f2/0x1390 [ 2967.529852][T23374] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2967.535841][T23374] shmem_file_read_iter+0x224/0x720 [ 2967.541367][T23374] generic_file_splice_read+0x35c/0x500 [ 2967.547086][T23374] do_splice_to+0xf2/0x130 [ 2967.551570][T23374] ? add_to_pipe+0x1c0/0x1c0 [ 2967.556201][T23374] ? add_to_pipe+0x1c0/0x1c0 [ 2967.561060][T23374] splice_direct_to_actor+0x1b6/0x540 [ 2967.566476][T23374] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2967.572202][T23374] do_splice_direct+0x161/0x1e0 [ 2967.577123][T23374] do_sendfile+0x384/0x7f0 [ 2967.581632][T23374] __x64_sys_sendfile64+0x12a/0x140 [ 2967.586920][T23374] do_syscall_64+0xcc/0x3a0 [ 2967.591749][T23374] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2967.597791][T23374] RIP: 0033:0x45b159 [ 2967.601854][T23374] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2967.621601][T23374] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2967.630049][T23374] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2967.638074][T23374] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2967.646058][T23374] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2967.654137][T23374] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 05:07:11 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc001400}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x89f0, 0x0, 0x0, 0x0}) 05:07:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5423, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:11 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xa00000, 0x4, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9c0908, 0x401}}) read$usbfs(r1, &(0x7f0000000080), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000240)={0x47, "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"}) [ 2967.662418][T23374] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000024 05:07:11 executing program 3 (fault-call:4 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:11 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x900}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8a85, 0x0, 0x0, 0x0}) 05:07:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5424, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 2967.925209][T23597] FAULT_INJECTION: forcing a failure. [ 2967.925209][T23597] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.979436][T23597] CPU: 1 PID: 23597 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 2967.988610][T23597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2967.998743][T23597] Call Trace: [ 2968.002055][T23597] dump_stack+0x11d/0x181 [ 2968.006417][T23597] should_fail.cold+0xa/0x1a [ 2968.011033][T23597] __should_failslab+0xee/0x130 [ 2968.016156][T23597] should_failslab+0x9/0x14 [ 2968.020902][T23597] kmem_cache_alloc_node+0x39/0x660 [ 2968.026172][T23597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2968.032436][T23597] __alloc_skb+0x8e/0x360 [ 2968.036813][T23597] alloc_skb_with_frags+0x8c/0x3d0 [ 2968.042387][T23597] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2968.048119][T23597] ? xas_create+0x3a7/0x920 [ 2968.052652][T23597] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2968.058579][T23597] sock_alloc_send_pskb+0x4f5/0x530 [ 2968.063805][T23597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2968.070090][T23597] unix_stream_sendpage+0x1a1/0x8f0 [ 2968.075481][T23597] kernel_sendpage+0x7b/0xc0 [ 2968.080327][T23597] ? unix_seqpacket_recvmsg+0x90/0x90 [ 2968.085745][T23597] sock_sendpage+0x6c/0x90 [ 2968.090188][T23597] ? kernel_sendpage+0xc0/0xc0 [ 2968.095279][T23597] pipe_to_sendpage+0x102/0x1a0 [ 2968.100158][T23597] __splice_from_pipe+0x295/0x4a0 [ 2968.105204][T23597] ? direct_splice_actor+0xc0/0xc0 [ 2968.110337][T23597] splice_from_pipe+0xbb/0x100 [ 2968.115174][T23597] ? direct_splice_actor+0xc0/0xc0 [ 2968.120391][T23597] generic_splice_sendpage+0x45/0x60 [ 2968.125816][T23597] ? splice_from_pipe+0x100/0x100 [ 2968.130925][T23597] direct_splice_actor+0xa0/0xc0 [ 2968.136474][T23597] splice_direct_to_actor+0x22b/0x540 [ 2968.141934][T23597] ? generic_pipe_buf_nosteal+0x20/0x20 [ 2968.148214][T23597] do_splice_direct+0x161/0x1e0 [ 2968.153143][T23597] do_sendfile+0x384/0x7f0 [ 2968.157592][T23597] __x64_sys_sendfile64+0x12a/0x140 [ 2968.162847][T23597] do_syscall_64+0xcc/0x3a0 [ 2968.167415][T23597] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2968.173310][T23597] RIP: 0033:0x45b159 [ 2968.177226][T23597] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2968.197063][T23597] RSP: 002b:00007faa190a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2968.205569][T23597] RAX: ffffffffffffffda RBX: 00007faa190a86d4 RCX: 000000000045b159 [ 2968.213555][T23597] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2968.221549][T23597] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 05:07:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc001500}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 2968.229548][T23597] R10: 0000100000000002 R11: 0000000000000246 R12: 0000000000000007 [ 2968.237818][T23597] R13: 00000000000008a4 R14: 00000000004c9d99 R15: 0000000000000025 05:07:12 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x8800) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x6, 0x1, 0x44b00000, 0xd90, 0x8, 0x58ee5883}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5425, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8aab, 0x0, 0x0, 0x0}) 05:07:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2800c1, 0x0) sendto$l2tp6(r1, &(0x7f0000000040)="3e8fb7b5155511c6d0fea517852f2cc49db51d0bb3c7cfaaf4f1260403f4c3f8b81d84578dd721d20b9cf126a382d5775a6807a367a3638b8c9976079f29ad36ea3b8c5a389a9836417c24beb007910dbb543f12f123dd9669c67735881a6bfe6a3370220f0a93ca9deeb4bc0c9456bf14869faff35da830d4163463db9132727cfe7f385981e35a779eea2c375f16e6d51b93860898c718ca4cd8", 0x9b, 0x20000001, &(0x7f0000000100)={0xa, 0x0, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101, 0x2}, 0x20) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5427, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:12 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9a5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) 05:07:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8ae3, 0x0, 0x0, 0x0}) 05:07:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x47, "c25ec14a55c06501f8d671008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad25105a75e24d93688fcc8415d6e3c2e7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d876bc747a2e83c2a24a1b40a5badbe56c5bf82cb7659075eba00efd222881507bb592c6038d20351eb7aff53433028fe705877afd7bfb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadd54734efe0374ca0595cc541cc5204fddfe970890641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879696689eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDADDIO(r1, 0x4b34, 0x9) 05:07:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5428, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8af0, 0x0, 0x0, 0x0}) 05:07:13 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00157c}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:13 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xff, &(0x7f0000000480)=""/4096) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() ioctl$TCSETXW(r1, 0x4b52, &(0x7f0000000000)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)={0x47, "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"}) 05:07:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5429, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8afb, 0x0, 0x0, 0x0}) 05:07:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x7c, "c25ec14a55c06501f8de71008c310398e7a9996148d0c2b2508b3a6f08918ecc434acf606923081912fc20eb57f6a17670a29522b942b361ad2514c0d4f54d93688fcc8415d6e3cae7828c378fe24d57c0d666a6fdbc141f3d4fd749b03efa10dca3b201d310bfdf16c63208eec333a2de59806eddbb42ea878c34dd39d976bc747a2e83c2a24a1b40a5badbe56c5bf82cb76590756ba00efd222881507bb592c6038d20351eb7aff53433028fe70504000000fb413e1fc3056ce3f4b9f132acf5bec386dba5d2537075bd02cb2592f823bbc41e4b0d8377983afda4f2e988ce7ceea48aa0d9ba732e1321c42a64e2835c6d21980af17515c4bcd03ea1cf5e73efa602f660a1973c8572ad79037ea028a487aadde7b603fd966b96e495cc541cc5204fddfe9708641e9e3ad57704af59480d53ee844ad9972208f515b0f4e7583942cb29556ea88b162662a986d87ba73879698789eee27082c1d922964ff34490b22d27434c1f585034be223e5bdb8163ed857cf874884927a63e7de3bd715f36f4713d979630ba83a1edd1e9097488fe749bce822f4d8d6eafb3025e6c4c3486ecdd11f12a2a8cd103b218212b281a9c43957a032a9cf8d638eb5d4ccabcb9eaac4340ad3080900b1f87b9959b5896aaf3e2eb8a08ee2576e77be5573eac791ead05339bd312a38b1afa8beed045d000196b7c58c5d2f82a42e239a0a5ca00"}) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) getsockname$netrom(r1, &(0x7f0000000000)={{0x3, @null}, [@netrom, @null, @netrom, @bcast, @default, @remote, @default]}, &(0x7f0000000080)=0x48) 05:07:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x10000000000f) 05:07:13 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0xc0506107, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa00}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 05:07:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x5437, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 05:07:13 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x98800, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$sndseq(r3, &(0x7f0000000300)=[{0x0, 0x0, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @quote={{0x9, 0x6}, 0x4}}, {0x1, 0x0, 0x1, 0x2, @time, {0x0, 0x1f}, {0x0, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x0, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x70) fallocate(r3, 0x0, 0x0, 0x1000f4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000100)=0x1, 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000480)={0x47, "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"}) 05:07:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b4a, &(0x7f0000000040)={0x1, 0x0, 0x8bf0, 0x0, 0x0, 0x0}) [ 2970.097689][T13493] ================================================================== [ 2970.105860][T13493] BUG: KCSAN: data-race in __tty_hangup / __vfs_read [ 2970.112531][T13493] [ 2970.114870][T13493] write to 0xffff88812352ad28 of 8 bytes by task 24242 on cpu 0: [ 2970.122599][T13493] __tty_hangup+0x16a/0x460 [ 2970.127135][T13493] tty_ioctl+0x3af/0xe10 [ 2970.131538][T13493] do_vfs_ioctl+0x84f/0xcf0 [ 2970.136192][T13493] ksys_ioctl+0xbd/0xe0 [ 2970.140473][T13493] __x64_sys_ioctl+0x4c/0x60 [ 2970.145077][T13493] do_syscall_64+0xcc/0x3a0 [ 2970.149599][T13493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.155496][T13493] [ 2970.157834][T13493] read to 0xffff88812352ad28 of 8 bytes by task 13493 on cpu 1: [ 2970.165488][T13493] __vfs_read+0x35/0xc0 [ 2970.169677][T13493] vfs_read+0x143/0x2c0 [ 2970.173840][T13493] ksys_read+0xd5/0x1b0 [ 2970.178008][T13493] __x64_sys_read+0x4c/0x60 [ 2970.182521][T13493] do_syscall_64+0xcc/0x3a0 [ 2970.187152][T13493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.193032][T13493] [ 2970.195345][T13493] Reported by Kernel Concurrency Sanitizer on: [ 2970.201520][T13493] CPU: 1 PID: 13493 Comm: getty Not tainted 5.5.0-rc1-syzkaller #0 [ 2970.209539][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2970.219768][T13493] ================================================================== [ 2970.227985][T13493] Kernel panic - not syncing: panic_on_warn set ... [ 2970.234588][T13493] CPU: 1 PID: 13493 Comm: getty Not tainted 5.5.0-rc1-syzkaller #0 [ 2970.242504][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2970.252787][T13493] Call Trace: [ 2970.256089][T13493] dump_stack+0x11d/0x181 [ 2970.260608][T13493] panic+0x210/0x640 [ 2970.264614][T13493] ? vprintk_func+0x8d/0x140 [ 2970.269230][T13493] kcsan_report.cold+0xc/0xd [ 2970.273838][T13493] kcsan_setup_watchpoint+0x3fe/0x460 [ 2970.279313][T13493] __tsan_read8+0xc6/0x100 [ 2970.283955][T13493] __vfs_read+0x35/0xc0 [ 2970.288130][T13493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2970.294641][T13493] vfs_read+0x143/0x2c0 [ 2970.298816][T13493] ksys_read+0xd5/0x1b0 [ 2970.302993][T13493] __x64_sys_read+0x4c/0x60 [ 2970.307534][T13493] do_syscall_64+0xcc/0x3a0 [ 2970.312061][T13493] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2970.318045][T13493] RIP: 0033:0x7f58c384c310 [ 2970.322908][T13493] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 2970.342778][T13493] RSP: 002b:00007fff0d348ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2970.351220][T13493] RAX: ffffffffffffffda RBX: 00007f58c3f216a8 RCX: 00007f58c384c310 [ 2970.359324][T13493] RDX: 0000000000000001 RSI: 00007fff0d348f38 RDI: 0000000000000000 [ 2970.368119][T13493] RBP: 00007fff0d349720 R08: 00000000000000e1 R09: 00007fff0d348d20 [ 2970.376977][T13493] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006075a0 [ 2970.385098][T13493] R13: 00007fff0d34bf20 R14: 0000000000000000 R15: 0000000000000000 [ 2970.394741][T13493] Kernel Offset: disabled [ 2970.399582][T13493] Rebooting in 86400 seconds..