c, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x0, 0x0, 0x0})

[  336.632751] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
02:41:49 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x0, 0x0, 0x0})

02:41:49 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x2, 0x0, 0x14, 0x0, 0x0})

02:41:49 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0x4}})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xb4480, 0x0)
setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x4, 0xe, 0x4, 0x1842, 0x81, {0x77359400}, {0x5, 0x1, 0x2, 0x1, 0x81, 0x0, "fe3f34b6"}, 0x6, 0x1, @planes=&(0x7f00000000c0)={0x800809, 0xffff0001, @userptr=0x2, 0x4f9d}, 0x3f, 0x0, r4})
sendfile(r1, r0, 0x0, 0x10002)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200, 0x0)
read$eventfd(r0, 0x0, 0x0)

02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0)

[  336.784155] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0)

02:41:49 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4)

02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0)

02:41:49 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:49 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = semget$private(0x0, 0x2, 0x0)
semop(r1, &(0x7f0000000080)=[{0x4, 0x7f, 0x800}, {0x2, 0x7d, 0x800}, {0x1, 0x401, 0x800}, {0x4, 0x80}, {0x3, 0x4, 0x800}, {0xf132b3966906dca, 0x6}], 0x6)
semtimedop(r1, &(0x7f0000000000)=[{0x1, 0x7ff, 0x1000}], 0x1, &(0x7f0000000040)={0x77359400})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x20)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})

02:41:49 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x7)
read$eventfd(r0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10240, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/162, &(0x7f0000000040)=0xa2)
ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000001c0))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x13)

02:41:49 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25)

02:41:49 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x0, 0x2, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x59e8, 0x440)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101100, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)=""/87, &(0x7f0000000200)=0x57)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x404402, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000100)={0x0, 0x9})
socket$caif_stream(0x25, 0x1, 0x2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = semget$private(0x0, 0x2, 0x0)
semop(r6, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)
semctl$GETVAL(r6, 0x0, 0xc, &(0x7f0000000240)=""/185)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r5, r0, 0x0, 0x400)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x9)

02:41:49 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSCTTY(r1, 0x540e, 0x7)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x700, 0xe5c, 0x1, 0x4}})

02:41:49 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000040)=0x40, &(0x7f0000000100)=0x1)

02:41:49 executing program 5:
socket(0x8, 0x4, 0x1a4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0})

02:41:49 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x4, @pix={0x0, 0x8001, 0x34343452, 0x1, 0x10000, 0x8, 0x7, 0xaea, 0x0, 0x2, 0x0, 0x4}})

02:41:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
gettid()
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0)
connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x9, 0x1, 0x9}, 0x10)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040))
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

02:41:50 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000))

02:41:50 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200880, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0xb2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}, {0xa, 0x4e22, 0x7, @mcast2, 0x7e3d}, 0x89, [0x1, 0x2, 0xf0e, 0xffffffff, 0x2, 0x8001, 0x1, 0x3]}, 0x5c)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000004c0))

02:41:50 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5e, 0x80100)
recvmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/255, 0xff}], 0x1, &(0x7f0000000280)=""/114, 0x72}, 0x12000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x40)
read$eventfd(r1, 0x0, 0x0)

02:41:50 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = dup3(0xffffffffffffffff, r3, 0x80000)
ioctl$NBD_CLEAR_QUE(r4, 0xab05)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r5, r7})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCMIWAIT(r9, 0x545c, 0x0)

02:41:50 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x65ffff, 0x3, 0x7, <r9=>r0, 0x0, &(0x7f0000000040)={0xa50314, 0x7, [], @p_u16=&(0x7f0000000000)=0x20}})
ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000000c0))

02:41:50 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x48a402, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/116, &(0x7f0000000040)=0x74)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = dup3(r3, r5, 0x80000)
sendfile(r1, r6, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:50 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xa8)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x7, 0x4, 0x65, 0xaad9]})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x65ffff, 0x3, 0x7, <r9=>r0, 0x0, &(0x7f0000000040)={0xa50314, 0x7, [], @p_u16=&(0x7f0000000000)=0x20}})
ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000000c0))

02:41:50 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000140))
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x0, 0x0, 0x300}})
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x480600, 0x0)
sendfile(r7, r6, 0x0, 0x3fb)
read$eventfd(r0, 0x0, 0x0)

02:41:50 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x7, 0x0, 0x0})

02:41:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x65ffff, 0x3, 0x7, <r9=>r0, 0x0, &(0x7f0000000040)={0xa50314, 0x7, [], @p_u16=&(0x7f0000000000)=0x20}})
ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000000c0))

02:41:50 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
sysfs$2(0x2, 0xc03d, &(0x7f0000000000)=""/198)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x4}}, 0x10)

02:41:50 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x2b9a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0xffffffc4)

02:41:50 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x65ffff, 0x3, 0x7, <r9=>r0, 0x0, &(0x7f0000000040)={0xa50314, 0x7, [], @p_u16=&(0x7f0000000000)=0x20}})
ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000000c0))

02:41:50 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000200)={0x61b, 0x5, 0x4, 0x20000000, 0x7, {}, {0x3, 0x1, 0x1, 0x8, 0x1, 0x1, "8cd74026"}, 0x9138, 0x3, @offset, 0x3, 0x0, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x850)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x60}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40000)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:51 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4080, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x20040010)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x65ffff, 0x3, 0x7, r0, 0x0, &(0x7f0000000040)={0xa50314, 0x7, [], @p_u16=&(0x7f0000000000)=0x20}})

02:41:51 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000100)={0xffffffff, 0xa1cf})
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x8029})
pipe(&(0x7f0000000040))
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x8)
write$cgroup_int(r5, &(0x7f0000000180)=0xfffffffffffffffa, 0x12)

02:41:51 executing program 3:
sendto(0xffffffffffffffff, &(0x7f0000000040)="34d95d6822a4b1657b0240c2166eaf3408faaedef905e4ed1883ca5d3156dac08a7fc2846eb5ac42f0edd7cf0ca6529c070afd9ca55ed9f3c853af", 0x3b, 0x84, &(0x7f0000000080)=@nl=@unspec, 0x80)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
preadv(r8, &(0x7f00000017c0), 0x3da, 0x500)
sendfile(r5, r1, 0x0, 0x10002)

02:41:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KIOCSOUND(r1, 0x4b2f, 0x6)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:51 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

[  339.018704]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:41:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x9}, 0x4)

[  339.046848] loop0: p1 start 2564762831 is beyond EOD, truncated
[  339.064183] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x100)
sendfile(r5, r1, 0x0, 0x10002)

02:41:51 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000004c0))

[  339.093770] loop0: p3 start 1915790064 is beyond EOD, truncated
[  339.099868] loop0: p4 start 983213520 is beyond EOD, truncated
[  339.106281] loop0: p5 start 676962771 is beyond EOD, truncated
[  339.115452] loop0: p6 start 3159018777 is beyond EOD, truncated
[  339.125084] loop0: p7 start 745035705 is beyond EOD, truncated
[  339.139387] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:51 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x1c4, 0x0})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x80, 0x0)

02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
sendfile(r5, r1, 0x0, 0x10002)

02:41:51 executing program 0:
socket$caif_seqpacket(0x25, 0x5, 0x2)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x28440, 0x0)
ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080))

02:41:51 executing program 3:
accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:51 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
rt_sigaction(0x35, &(0x7f0000000080)={&(0x7f0000000000)="c481855d07c4627d2c128f0908020c442e42d8d9c462b8f7f9c482a19e2d04000000db841e16000000c4c2e192b46055000000f2470f1a75bd41e5c6", 0x4, &(0x7f0000000040)="c4a31148dc0ac4a1fe167bfdc4c2998ca60f000000c4437d04a90b00000029d9dcc4034d46380d64f32e6783cc74c4c2259979002e0fb6c5460f69aad7000000", {[0x6]}}, &(0x7f0000000140)={&(0x7f00000000c0)="c4416166bc4d0f000000c483b95fdc65c443f96cbe00000000e9c481f96ee336430fe4ecc4a30d6e5504000fc05900c463d96d9f0e00000007460f01036a00", 0x0, &(0x7f0000000100)="c4c2abf5253f00000043e1f8c4c16dd3c26545dbe08fc9f80108d2fe45fe0ac442c196747f000f0f8500000000a43d24d90ecb"}, 0x8, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x67}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gretap0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)

02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x40000020}], 0x1, 0x0, 0x0)
sendfile(r5, r1, 0x0, 0x10002)

02:41:51 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet6(0xa, 0x80003, 0x6b)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14)
close(r0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000000)={0x1, {0x6c, 0x3ff, 0x6867, 0x2, 0x101, 0x8000}})
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000004c0))

02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:51 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
clock_gettime(0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x1, 0x8, 0x4, 0x20, 0x9042, {r3, r4/1000+60000}, {0x1, 0x8, 0x0, 0x1, 0x5, 0x5, "5b4d7db8"}, 0x9, 0x3, @planes=&(0x7f0000000080)={0x9, 0x8, @fd, 0x4}, 0xcb6, 0x0, <r5=>r0})
write$P9_RSYMLINK(r5, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x2, 0x4}}, 0x14)

02:41:51 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x87, 0x0})

[  339.467077]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  339.495861] loop0: p1 start 2564762831 is beyond EOD, truncated
[  339.523170] loop0: p2 start 2494347297 is beyond EOD, truncated
[  339.543261] loop0: p3 start 1915790064 is beyond EOD, truncated
[  339.561128] loop0: p4 start 983213520 is beyond EOD, truncated
[  339.567511] loop0: p5 start 676962771 is beyond EOD, truncated
[  339.579364] loop0: p6 start 3159018777 is beyond EOD, truncated
02:41:51 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
dup(r6)
sendfile(r5, r1, 0x0, 0x10002)

[  339.601566] loop0: p7 start 745035705 is beyond EOD, truncated
[  339.607931] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r8, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24004000)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2c4, r4, 0xedf0e2ccf00a64eb, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x839b, @private0, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x4, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x401}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3660}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7612}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8c5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc29}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4703}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4583}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:52 executing program 0:
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
dup(r6)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
dup(r6)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
ioctl$sock_proto_private(r1, 0x89e5, &(0x7f0000000500)="fb2c4b2927a441c9231ec717cad485677c1bfe2b29aec33683d953de0c6c8b4a0aae3267ff8e52c0aaff1ef70bbb3bbe89f0b0613a7985118cdff64ccf089b8cac721ad588b446211f80d682cbbe9750ddd85cde65fd2a5d7f0951ef4c597dd3fa3ba0bf65d2f3e576943fb789a9b9ca6cd0c0ac0a5d01bb1125022383a73367f010218fcc4608040c2c850962236f6ce930784667dbb8a2d76fac55cad43b89532072fce045097fc788209cd514bba934796697b061992c7bcd69610effb1f4d3162f1745fa8293c5eb99f57f27d86a8c9141d0045dd39070657f34cbcb96bd3807e1df35dae0132e805d16bb07c08ca657f62dcce8177ccc3f5f108e4f3b7a6a572c8c66a12a547add695c51270830cbcd0a92a358d0da8900682ee94d2ef1ee3241ae922428aad11dcdb0f68400fdd30e14c7d2805eeca6c6bf05d37036ad1ef681dc209472b1318732b5995e08345e797b20a67e7c2e4e4366f1ce40a122b973688491750b457e4e800a9cb60e12a6b2ce609235f75df8c1c88eb1dd07ab4108810f5d33cc2ecb5f6120d5372e2c72f19212657736d7f0c01afba94823111ccc4542d8ace679260f722359c6c709b39fcfd22f6c33fa0560819097169582459575ab9f4c6c49abb699d6c512078ddae18bd99bfc01e58f8a69f213818454ad32ad4d6602656327a892797fc8199d3199df86b34768bf63d1a7da0beaba3f8d0d8fccd7adf4c7ebec17f6c7657531ae304cf4d324f284e7d5310cbf1a79bf8bbfc1a1a07a8a0a2ae5b75a1313f82d30878ba4e664f762f729019988bcc716e816ac0f911cb97ae697685218dec8f2ce325da8f2e9020cd1082927c1aebd0461a9a2a2c4e848a04d165b31c554a81e3eb79f913354ac8e1ed12c8c77270019c0d81acdeee4f5a15d16b9d349ec9c919bf169bb88e244580dc2ab312971c4db9f8cc61ac7ac985558c743e6ba419900ea79abaa40030a658377febe7cd799c245535f34a52251aa8f45180b3950e0015206427f09a0087d6eaeda1d7ef879f89efb70571fa4010e121493cc1583ee6e85257815291fa53dd3d4fe5d4eba516cbea495c0ccbdc72f48836d7deec794eeb9f4a53f2d71d97095544e25f5795a4847de4792ee56b7b87081cbb03398850650cc90c6fe730bfa70a91a8326a9d030351267c07ec77826e35540bca048486e6ede4379f7a89985b945a8f6a15458324afabfc3491c3e7cea3a657b4fc9df88d26c3c45fb95c2d1a0b645447ef44596507f6531b65bfe7dacec8123107725d427d59fec4d4dd19c671c1c8c447f9aba871dce8a4ffa9475e04077459031a622541aad6d9843dbe799bfb811265c64527452fd3c204c4889b403829a758be9407513b3f1699c7f4a6c57d3cae840fc2209d415a0b2d5cfd4dcd0ceb055ad25ecea300ed6ce567bf2ce2c103d1438940b3bcb6851c20f98cc4c45f7572316c4040c8d77c52c00b8cc90c91305938449d9842e9f448c99ba84262f2b1337fd07342ad3b7e38ef03c4742d973de32b8ec3338fe1af7c964d732a302239a4c3f4701c914991a08e786dbf78a2f4ba65a87d67cfdab1a26ec708472d13b705c1785076397ee92e83ca126521b472595c9896a48930ddcc0859fedb7581158577622761ddc244c96aebef5a7ae8509dfd88e0eead3e4300806c7b733cf6e356a0c7268ede5c6c0745207657e0a6839f34d3608ccf7bd7155e0e329fdf4f07e66ce7aa20a13e33190ccdb675ae190fac276a4aa188fe1a2d65f3ddd60252b1db785d19814728f9e83f62edc968801f7211988c479b04ad68367acd4b91112cb7eae387f84e676a955cd751c444b04742fbdd80a586bc21ce77daa4712a9d44c5574859cdfc7ada9e595172833014ca90cb0f6a5309b2ad78790fe4f5cd6a6886220267259b11343166fa1aa06a26071559dac06a55fd565d8d016ce5e64071e123b4940ca213dd88bff5c05d9c0f631e9b660cde6aa29dde9a0f412a71dcc7abd1bd0da37d95a0b50cc801096d1dc370227a75788849da3130ed4a14be76a25522847fded2e4ddcd8a28c81fddcc61089c33fbc62aca810dcb2cff2a0e385b703d2d60874083db80618b284df42386e72ab65ca2270449a8c8e4a8853dc04a171e74bcb7fb87b2eefa7fba5f97db1709c514059b6e2fddf99186c0f1d0ece9229c83cdddf261ee3195f4e459371233927e201add1822297f59d56291fc6e67aff18fd4d1d0c5c2bb867c7169fe673bd8d51968f70f5675f7eb469f4f801b1a156329de0d53f71f82e0382cd7b6c13bbc1f72b613dc203d552af3beef0fefa838719a2b9931c240166909ca79772699aa25b14cd6f6a66ca724584833404d42e2ff1eb8aa09d8eb8cd26e737ec1afbfe32aa4f08d851d1237028fe2413b96c28774929716c219fa68a9aeacb2b7a321180daffc3fb984974c84826fe52384c22270fcba253513f914d7ed8210ee7081b818d3c1f9b81e5fe3da60569ddf09b8fe5952282a647bcda484a84f136d8e6e47a00f6369f64e88435b75f2f7568b21c7c0eb92d3e7ca27131a07eea198548c1e05fd008d49c9874c4fd884c3a83f08907a2850bc0b5b3b263d104b00ab0c0a8f1a3c216dcffae328bf544283ccb032a435fe9aa010093eb56ad91ff7dfaf9d3badff616912015f560dad83bdf8e389269fa76b047b46b58a2c7cb7f39f57229415f23fb2455390c7f10d8af506cbebf0f27f8f4941c134b5f8a6eb78481aee1de25961b25cb751548cc75430d92a35e1f591da8baec94e89211d305c6732bc1c6244fcfd041877776a16849303399454cc91bc9e53871d473244e00bf496a36d988dcb14d7d2e29324290803eda62c637516773f9f68d36cabeb69c3bb9279db78cecab0744ead0e91ceccfd9a0fe380cc1fee365ed40c126c1385c0b3b783bdfbccb1cdae78d7f2300931ece9f3d4b94b668441112549e8d7682678f72f263356d6ca77b054f4041ae59588d0f5132903d6f42ce572d9eda869b3da5ee3b9f7c83b89f8dfedf2d03c2bcae0d4b8c239bf6bcd63caf042e54af206bad02c75f746aa747326a4b61f6f8f1eb461f7071413fad41078181f17347277895c42a4c10a5b668eafc7b9200c87f66b9352204137b066c5a97c4a319ca99f1b0204d64554bba5a6abec1e797ce00c403c0f7b2da69dde3ecf542ed07134800bb99ce3ba061978a344b03e41af8a7830493779927c4127d4edb35fc4f19797d9b3ad99571865a3fc5ca19fd5ec9e2c956a7e19fe7e0fe58cda6ea756ad3e8174a0bb27e120b85f97bae61090a4dbf8b95575ea04aaa5f1f6e1979dbfefc22a106d7babed8d1d604c6f610924592e05f572b02d8f857ef13ee38e0988bc6a08f3073f3cb3386730fa6b6dc625539b510a6580ab8ae35b0f71c307011cd81add534560d6c836cff9172d424c82cdcfb5aef9d8ccf01f97667fce61dae33fba9fc9b06c7611504558940b6b40ce7b86f634399ee6dabfa50b8687ee7d23f91c8fc61b209dde30a92978c6f8d247df106787fe8b2b65fcbfb020ed61764ae634d39b976e93812fe6402392502c1fedfc2996c7a59dd6399562ca64897626e89af2c04b27456bfbddf3848c3f17ec9c45d870f3e98f9ee8e2e152c59b2ac0f32cfa83d8168a8c337b0ce99541d6016d21c184be350ff472ed56b32ec82d52d594d7ed4ff8d3728275bad9c9c42ab1e8e7d607c699df1104045cffa542ddb50fc2f1b197fc8ba64e502f657d908c9b5779679302eac008d3169d8fce77802238d96c14b1f94ea757a528bdfaaaf941261a07b7471a1a123ebb110a3c773b13faf448bcde100c13c6ea1f26d4c265f5d8c53370bec39589e854624e16e548e9382f615517f386af0649addb748abea94fb40d647edd6a4d4a0e0cf47909ee1d39e5db37b4748272106132e6d59380e5da04f935829e82b78c0406c83bb1775092557585d97c66a831a01402822db972aedef686227b788d2c5293ad00c670b4962b60ea75ca3ee44a9e999d3ed404a7a0ff6d36834344311a11a9cc4dc4225735fd2d8b2191ef160deb80ab635d09dcdd5dc52124b99b5fb3ba5aa89d19992c5970b189a55fe0e776a800a9913518ca432c686c2fb1eb09a623ecf9d424e729c9d8fe085e3adbf0c132ae5865df08250e3182b18a9c0de95d499c0a45886ad903402a7522f307a72faef7707b45ab944200f9cb6d0b9f9192c82902a4de4b125fd1b84abffb86cdf1294eddbbdd0a9c849929c6e5c37e7a0a15bb70d2759796c41d1742c545a5a10d33153a46b59cbbecff84c5107174921986e10148a086b09079ceb9a208bfd2fce4a812237c8fe2e79899bf14c047164d3d26abe10f41a28f2ea501b6b049b92645cb6aa5d31e4fd4fdb35f65a1302ba40acf76feb52efaec849b049516c474175a354c1c69e400536f83f520bf6828ab60b5e534e973f267c02e10487a15872db74ee6e7b506257221e1b57334eed9da67fac634cc061be73db03082aa3e2e74b31d824bba26445b9b5dac4d6e2f4ede27e5dd209321edb9d61ed2ba6e0e906f082355de704a43c0e957e10f02140bbb7c9eacb358fabb5733b281b7f8a1ede1c23da6933169a29bb774cb35700459e48eb90d453c0f4375e0adebb0246ac62f32c3b62bdbb6cda0cbd46e5cef67e45c1e4d51a181c997a035ac62e52c954b8c38adb5c3be966f75d3ea8d8d479298376f22bef76c65b81248edb1a2ab6f5d5ffb18ab269fb891669c8323ef210d93b7233a346493f04835a03567d3e823509cd6f1951a7f9af8ffd5ca1d9317de40782e2270fd93ca7655d8e56d71875799c8cf734812ee6c22d16e56409bc0f731e9c1545fbd58699c50d30c678fa219396863f539aa4973a70b54743373c6eb58302e7f6b466e115c4189168f3e3c843d3a5ed3592a3a7fff4b8f07338c55bdc25ac9b0b07f779c93c48262fd40fff98aa3bc263fd1dc134dd7cf9fd243a2f25811cecc11cb7a6b338b89cfc2f60170d58c92e72edc5d610d7508a22887ce1db81fbb3d194e86b4ca0dcb41076164968783539ec8974d161b98a9f1096e84be2803b53b52841ed0f6313e2eaa89041583c1763cde9c0208ea414c0fc375212579731b6bfb20ce267cbe8ddf586994c20ac6cc5d70fa014fed47ba7555e9488a4cd77dd84a45a1303b72ce8f7c2642facb35203045fd7d86a20eff880a2db8ada4d6ff6b54476480fb5176701d00d57a1d87a52c0a32cba83e9a04327218bfddbd4437eae3eec934503b9659095a484b02b2756a9bd53a6e64bbc58e473e96552f9df0440832ae2ce7cf69af5fbda1dceb7999a0a86575ad1eb5b647d6322fc9c3f2ae725b0be7e80a8b97f0128c81c1770b3f4107cbe1cec6dee9360d2125404f0d726007c20e4b2ae393db6c96965e7cc033111b8988ca85a355ac40097560420421f0521191f87d4f4b3ba9020072afea415bde83fdc16cadb609541a8d6dfa127a73821aab557edaef27cfe7efe744ac36d197d6e78bc74882ec3c37d1792e29042e0ef2b398f012e42d5a727e9416758533abf8dc00b61f6d4c0cb3b8eb223a57ef37a2532598fafca13aa59d160d9fef9a91f40ff5f787e49a5f4e0e692140b1e9909e2313dddecf7c166a4c106a9435cd056379c23435f5b3ec212898c320d4e6582fafb0c44da132ffce86301dff013866e69ec10e4625ba3b10a4e3c6acdde95df0df11fde1c21dc7885b693237e7d81ca47f8ef35effcb73e967d9f1957aaa9775dd4e004fe5686449b5528aadd0cb9")
sendfile(r2, r1, 0x0, 0x10002)
utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
dup(r3)

02:41:52 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x4000, 0x101, 0x1}})

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

[  339.885140]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  339.903242] loop0: p1 start 2564762831 is beyond EOD, truncated
[  339.922993] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  339.946971] loop0: p3 start 1915790064 is beyond EOD, truncated
[  339.970449] loop0: p4 start 983213520 is beyond EOD, truncated
[  339.977033] loop0: p5 start 676962771 is beyond EOD, truncated
[  339.983146] loop0: p6 start 3159018777 is beyond EOD, truncated
[  339.989835] loop0: p7 start 745035705 is beyond EOD, truncated
02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x14, 0xe5, 0x0})
connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@unspec, 0xc)

[  340.003814] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:52 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r2, r0, 0x0, 0x40)
read$eventfd(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0x20, 0x3}, 0x0, 0x0, 0xfb27c588, {0x5, 0xff}, 0x8, 0x5})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x0, 0x0, [], [{}, {0x801, 0x0, 0x80000001, 0x0, 0x0, 0x1}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {<r6=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000100)={r6, 0x2})
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000000)={r6, 0x8})

02:41:52 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000000c0)=0x7)
inotify_init1(0x80000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = getpid()
sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0x5, 0x3, 0x7fffffff, 0x1000, '\x00', 0x2}, 0x1, 0x400, 0x0, r4, 0x1, 0x8, 'syz1\x00', &(0x7f0000000200)=[':selinux)&\x00'], 0xb, [], [0x8000, 0x0, 0x7ff, 0x8d]})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0xa917fa00528c0945})
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r1, 0x0, 0x10002)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000140)={0x6, 0x2, @raw_data=[0x80000000, 0x1, 0xfffffffe, 0x3ff, 0x7, 0xff, 0x9, 0xfff, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7, 0x5, 0x8001]})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x7fffffff, 0x9ec, 0x7ff, 0x0, 0x81})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x81}})
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000004c0)={0x0, 0x0, 0x3})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x20})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:52 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r0, 0x0, 0x10002)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x200100, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000280))
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000002080000000000000000000000000000340023800800074000008e9108000440000000bb080001400000000708000140000000040800054000008e5e08000640000000050c000480080009400000000044000480080003400000000508000640000000ff08000340000000060800054000000002080007400000000208000440fffffff7080003400000040008000140000000033c000480080005400000010108000640ffffffff08000540fffffff80800074000001001080001400000003f080009400000ccae0800034000000001060002400200000005000300880000000500030084000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x44020)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x2}})
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x401, 0x6, 0x3, 0x4, 0x4}})

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x0, 0x0, 0x1})

02:41:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0xfffffffd, 0x1f, 0xf, 0x2, 0x0})

02:41:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x1fc, 0x7ffe, 0x10}})

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x21e41)
read$eventfd(r0, 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc0042, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040))

02:41:52 executing program 3:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0)={0x8})

02:41:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x3}, 0x10)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:52 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
socket$inet_udp(0x2, 0x2, 0x0)

02:41:52 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x101, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000100))
sendfile(r2, r1, 0x0, 0x10002)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000140)={0xaf, 0x1f}, 0x2)
write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x5, {0x8}}, 0x18)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000000)=0x9)

[  340.548000]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  340.569273] loop0: p1 start 2564762831 is beyond EOD, truncated
[  340.589193] loop0: p2 start 2494347297 is beyond EOD, truncated
[  340.596501] loop0: p3 start 1915790064 is beyond EOD, truncated
[  340.605293] loop0: p4 start 983213520 is beyond EOD, truncated
[  340.611397] loop0: p5 start 676962771 is beyond EOD, truncated
02:41:52 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="3c19bc14fc3af2b1944956f7fd684b483046307559ce9911c9ad4c884be6800fa4ab427db32088485480bf9a689e8faeeef7b4eee70124a257d1a37ff40ded3ae7776bb4becf8f79312abb5670efbd20", 0x50}, {&(0x7f00000000c0)="61fcc28835452531558bbd238880cbc3277faa0d9e7e624cb223a61f128acb5e5c022e5e8a0eecc27d021ad4b395dbc964e566864ea3642fdc87ac20ad124bcd1abc943aab5cb1d3", 0x48}, {&(0x7f0000000140)="e82edc53cde8500080103a6e8f4a545d7537f722db48d435fa55236ffc7ff3030c2d995a4bb53770ec27dfc7cfcece5a576a16b1d7e0a17adaf80e8c0f109ff196701e7880e63f7a439cee083aab1f299388a2be765409554faaaa1890429170151ef049be7850d906b7351368654ed61ce4de8fbe3f6a", 0x77}, {&(0x7f00000001c0)="7eaa294086de4c922846f27f9c542feb48863ebc43ddb10768d0a9221984b04f5059ca85ed249817c25de8695dfbe72a6f7f0347ced6fac94aab1c2a7722c5779f349862ddbf7d6c6f6b90bddf2fa9e8d210f2fbd294f1f3f96805e83a8a6f80658e9a01eb9d5fe3ac3b7c77be15ea1b8af7d41890101e5bd357d9aa9afcce0d6bdedf9477a4a1af6247ec2acd8f2f4c96a93f9b5d65db", 0x97}], 0x4, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x2b}}, @timestamping={{0x14, 0x1, 0x25, 0x4000be0}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}], 0x90}, 0x40800)

02:41:53 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x114)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x0, 0x7})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000004c0))

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)

[  340.618777] loop0: p6 start 3159018777 is beyond EOD, truncated
[  340.646866] loop0: p7 start 745035705 is beyond EOD, truncated
[  340.661189] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x202, 0x522a01)
sendfile(r3, r2, 0x0, 0x10002)
write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
read$eventfd(r0, 0x0, 0x0)

02:41:53 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)

02:41:53 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x6d5d3fcc, &(0x7f0000000040)=0x4)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

02:41:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10a203, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000007875561535b5a50b17b631635fc827a26f8feb4d5534230c5d9149b398235d13b8f89b4daf77990cd971d4209419283711a13fe280f719afdca8580f354d7147eccace6db6525e7cf2207d08885e60378db882ed7a690f62ba058b402289ae9aa0b19e7b1fbae356d8a9ff4c8bea253fda", @ANYRESOCT=r4, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
read$eventfd(r0, 0x0, 0x0)

02:41:53 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x0, 0x0, 0x1, 0x10}})

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)

02:41:53 executing program 3:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000004c0))
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x143000)
connect$x25(r0, &(0x7f0000000040)={0x9, @null='               \x00'}, 0x12)

[  340.976023]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  340.981782] loop0: p1 start 2564762831 is beyond EOD, truncated
[  340.990297] loop0: p2 start 2494347297 is beyond EOD, truncated
[  340.997072] loop0: p3 start 1915790064 is beyond EOD, truncated
[  341.003149] loop0: p4 start 983213520 is beyond EOD, truncated
[  341.013679] loop0: p5 start 676962771 is beyond EOD, truncated
[  341.019698] loop0: p6 start 3159018777 is beyond EOD, truncated
02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x10002)

02:41:53 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x8, 0x0, 0x101}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5}, 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r5, 0xbac, 0x62c, 0x3, 0x1, 0xfffffffc}, &(0x7f0000000080)=0x14)

[  341.033335] loop0: p7 start 745035705 is beyond EOD, truncated
[  341.039869] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
read$eventfd(r2, 0x0, 0x0)

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r3, r1, 0x0, 0x10002)

02:41:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4, 0xfffc}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x0, @local, 0x8}, {0xa, 0x4e20, 0xd9be, @empty, 0x4}, r4, 0xe6}}, 0x48)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18008466000000000000000000000000007301430004efade50c406af7430000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xc0, &(0x7f0000000400)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r8}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r5, r6, 0x0, 0x7, &(0x7f0000000080)='em1GPL\x00', r8}, 0x30)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000000), 0x800)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCNXCL(r9, 0x540d)

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x10002)

02:41:53 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x101}})

02:41:53 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00')
pipe2$9p(&(0x7f0000000200), 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfa, {}, [@SMC_PNETID_IBPORT={0x15, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1010}, 0x4020041)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0xf}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

[  341.257828]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  341.278191] loop0: p1 start 2564762831 is beyond EOD, truncated
[  341.297338] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:53 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:41:53 executing program 2:
syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x6, &(0x7f0000000500)=[{&(0x7f00000000c0)="2c7debe5416a6e76827e6623d55de225914abc7a4da459f9c07d2b187df4e3940e02215f457cfd95a2f8240a8f605776d0d4c7494e43aab5c9ff053bdc504c476cc2be3a5517d1866350f134c6d97dee8bcf3e563e6c7ecc11ac89f5990dc48bd2f3c06f8da509c2e1896993662e5c56ef648e23b5558186dd771859b825c24c50bcc11fa6704697", 0x88, 0x5}, {&(0x7f0000000180)="79596834fb499d5dda70321e25369c843d2946b72019986f3707d6262ce9f683b8a523145ff750da55f23fc42f0adb103b0f7944f3e45a4f15cd123d4cfd53df6cf824a72b20f2bf21bc81a0f9f3732465197902e9565bd3f14e14e39c29047e28cd564c4be41b289dee4466d6444ee8e022ae0a16b7e56b65b8b17f568f37d58de291ed53fa29d76b5c23453d68a5a69b2ec2f59dd531ddbbac", 0x9a, 0x6}, {&(0x7f0000000240)="4c7b319fea149f231a58d91e9f0f9bce2a67a96d28d22c809f27722ade551259f6d69d759cf991c7015d0f80fd7b911c6cf1f4fa51d3d480133d09a557454bfbede53e7ff288732b0c628147f2b5a26a1f144694bc19fbda21737f156dc49402096f9cb64d529c9782f6b38f42f6d96ff7f0089b86d4950b99d5b303dbe3d249ba1d4e86df635282f0e571565841b50ba7487aa4899efbfbc586c688f1904cf873d626e774f91cb2366b63ca991c4c9d4413fef312b8cf636f3ae87ef9e97ee2", 0xc0, 0x5}, {&(0x7f0000000300)="c71935ba244fdc223b8716a211ed2e7a936c016163fe5fb1cd6fdb91125e", 0x1e, 0x35}, {&(0x7f0000000340)="aaebf4b3112817a31297ae047588c1cec9e500cf51edd9460472fb37363350ed5a470ad061c068acb75dcc8ddb6ca2afcff0bdabe5c4ad75a74f047d393a799cdd3ed7e1bbdedf0a7013466781e4dee0a12267286c419eaacc94fe3e55869a3bd95afd0e4484fbf01e1623316d10a8492c723ee65d95d867cfc5da27ae5b66ba0c01c4c7aaf2cd1fd8ffe8732a7a69bfe5653e3647470804a0a6b722ca4d11a06fa53d7b8ddc2ce925330b5a79d785b497a56f356c30f90a24d972dde07eadb3dc9cb434f5cc58ba90ff419c6ee5fa33", 0xd0, 0x8}, {&(0x7f0000000440)="6f9240958e601f1a7e27a728ca04d090b432269e3f61a31ad294c75f9c759a62c8836dd330306b3f0f9bc047b4cf766cae370dfec8f49d3bf23da2109cde321ad6c5ce184efd68fbe634e35e03b8a849ac385286dfd46037ce16289d561c46dc9149a6a132641fba8b8ff19fc7c29ca919db600084d4c9714e29bfcfc435b607b676cd378ca5e98a847ccfe55dc641727c", 0x91, 0x5}], 0x1000, &(0x7f00000005c0)={[{@noextent_cache='noextent_cache'}, {@heap='heap'}, {@fastboot='fastboot'}, {@inline_dentry='inline_dentry'}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x66, 0x2, 0x68, 0x33, 0x32, 0x63, 0x66], 0x2d, [0x36, 0x64, 0x39, 0x39], 0x2d, [0x31, 0x32, 0x30, 0x34], 0x2d, [0x62, 0x33, 0x34, 0x61], 0x2d, [0x62, 0x31, 0x33, 0x33, 0x39, 0x62, 0x4c, 0x32]}}}]})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x40000000, 0x0, 0x0, 0x0})

[  341.312045] loop0: p3 start 1915790064 is beyond EOD, truncated
[  341.339702] loop0: p4 start 983213520 is beyond EOD, truncated
02:41:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
accept4(r0, &(0x7f00000001c0)=@can={0x1d, <r4=>0x0}, &(0x7f0000000240)=0x80, 0x800)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@private1, 0x4e21, 0xfff, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x8226b7dab66e3f54, r4, r5}, {0x9, 0x0, 0x3, 0x9, 0x6, 0x9, 0x98c, 0x8}, {0x3, 0xfd3e, 0x1, 0xfffffffffffffff9}, 0xf8000000, 0x6e6bbb, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private0, 0x4d6, 0x6c}, 0x2, @in6=@private0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x4, 0x7}}, 0xe8)

02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x10002)

[  341.388388] loop0: p5 start 676962771 is beyond EOD, truncated
[  341.395453] loop0: p6 start 3159018777 is beyond EOD, truncated
[  341.427206] loop0: p7 start 745035705 is beyond EOD, truncated
02:41:53 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ftruncate(r3, 0x200004)
sendfile(r2, r3, 0x0, 0x80001d00c0d1)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2, 0x0)
connect$netlink(r4, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$RTC_AIE_ON(r7, 0x7001)
ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000080))
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000004c0)={0xffbd, 0x0, 0xfffc})

[  341.433309] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:53 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r2, r1, 0x0, 0x10002)

02:41:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040))
r4 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x3000)
shmdt(r4)

02:41:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)

02:41:54 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x84}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40044041)

[  341.697255] audit: type=1800 audit(1589251314.059:87): pid=16943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0
02:41:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000140)=0x4)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_create1(0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="f2f4d5cdc099430800b1a3df0a4b3263399abfe7abddbddbbd67574558aa3b0d529be5ef7c192e1029977e96e090c77324200d9e691aaefc01d21d3af4e1ff43eb43635d16b2c226f7fe022cdba71473096e3d11531a1853e21d662cbd5517e3707f0d0b60fff1d95f6dc272cf10e3c364d2b41d23c2e73f991eadd7693b826ec9f0e637a7621dff7889bf05ae63c10189078e201d0479793e21621c9ee8a4871ee63b044f26b6acf486b059baed382b7bc7f959ef1592c703df11c5b7b4e8ebc8997d32deced09ed0805a71c005d18799e8dc2d384b3ed80e5104")
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x0, 0x101}})

[  341.774266] audit: type=1800 audit(1589251314.069:88): pid=16943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=32769 res=0
02:41:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)

02:41:54 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="87cdfe12b63f620db67fbafaf2fef6fd677eb2c36c543cc1b40457ad1bb297e66db42ce6fb53928017865d221b05c9f38322b307b18e47a589f60ae6", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={<r6=>r5, 0x80000000, 0x20}, &(0x7f0000000040)=0xc)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080)=r6, 0x4)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, 0xffffffffffffffff, 0x0, 0x10002)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180)=0x10001, 0x4)

02:41:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2001, 0x6, 0x8, 0x117}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = accept(r1, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x7b, "1784e08376be4e9923106074538f1daf50ccfd07f224369f02f1e8bab326d117b56e4bc0fe013626a077e27e687cfda2a73c1096653287016ca6b1492756f1253130e44d40d9dfb5a223d0e89dd353a80ecc8d525e51e76dfcbe337c6a1c84afdacaf9936f391899e4136e2b8f7c790b976a019664321d8757277b"}, &(0x7f00000001c0)=0x9f)
syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7, 0x80000)

02:41:54 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)

[  342.009301]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:41:54 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb7a04009c5cf87e7ca00a020356567de01cdb2404baa58868d2b212b91f6a1180d7467f4a51e7546cff31ce5f4fabaa617c7620f60d1713315570e0c28fdf1763c3bdc8427d9c397d15dd57dda0fd6214b5a041ef53c26194e7b6f8ffffffff0000000057ed5ba227d32ce40dd6c9664413d2bc524fb1e4b70d2979d3bafaaacabf71abb3ff5b8000a979b609a0b3debbcec66862b1e005413495a17015eadc5505ed83591dc51dff0b3321ee4b4c4e918cdda4003c90bb4d54afa742e2007b3ca6649b99cb341ddb0647b5b17d61d85e1176466b7c5facbaeb13d5181fc05a95efb41c5d12ccb4b4af97433be2c64986aca92a03ecaa12f5a3bd2101b668e3dface2f8e119747ea30775c03f72a82fdff34c9930f2f4d899e28392af6d0214b374a508e368b89a9087c6b71f06ccca7432a60a244f58deef099a0463c8c2396819379ac014773aeeaf42d210d82d24149702bfd07b8ea1158b9079146639dc2020e3a625eff4aecb9b2f7f0d21ff985bfcd1f4183975b3bff2357a978daf544d157a"], 0x7a, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x400)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r5, r4, 0x0, 0x2)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

[  342.030358] loop0: p1 start 2564762831 is beyond EOD, truncated
[  342.054459] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x3, 0x101}})
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x7, 0x9, 0x4, 0x2000, 0xfffffff9, {r2, r3/1000+10000}, {0x2, 0x1, 0x4, 0x9, 0x3, 0xff, "b19ab3aa"}, 0x7, 0x3, @userptr=0x81, 0xfffffff8, 0x0, <r5=>r4})
getsockname$l2tp(r5, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')

[  342.076739] loop0: p3 start 1915790064 is beyond EOD, truncated
[  342.100004] loop0: p4 start 983213520 is beyond EOD, truncated
[  342.124895] loop0: p5 start 676962771 is beyond EOD, truncated
[  342.144281] loop0: p6 start 3159018777 is beyond EOD, truncated
[  342.161516] loop0: p7 start 745035705 is beyond EOD, truncated
[  342.178600] loop0: p8 start 3542136138 is beyond EOD, truncated
[  342.387861]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  342.400184] loop0: p1 start 2564762831 is beyond EOD, truncated
[  342.412909] loop0: p2 start 2494347297 is beyond EOD, truncated
[  342.426906] loop0: p3 start 1915790064 is beyond EOD, truncated
[  342.439595] loop0: p4 start 983213520 is beyond EOD, truncated
[  342.452214] loop0: p5 start 676962771 is beyond EOD, truncated
[  342.464972] loop0: p6 start 3159018777 is beyond EOD, truncated
[  342.477679] loop0: p7 start 745035705 is beyond EOD, truncated
02:41:54 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x8000, 0x0, 0x0, 0x4})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000))

02:41:54 executing program 5:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:54 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket(0x18, 0x5, 0x101)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7abca24adb410588}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c004)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x4, 0xfffd, 0xfe, 0x10}})

02:41:54 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000003080)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000000), 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/226, 0xe2}, 0xffff}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/171, 0xab}, {&(0x7f0000001300)=""/41, 0x29}, {&(0x7f0000001340)=""/179, 0xb3}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/211, 0xd3}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/172, 0xac}, {&(0x7f00000027c0)=""/180, 0xb4}], 0xa, &(0x7f0000002940)=""/199, 0xc7}, 0x2}, {{&(0x7f0000002a40)=@isdn, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/103, 0x67}, {&(0x7f0000002b40)=""/6, 0x6}, {&(0x7f0000002b80)=""/249, 0xf9}, {&(0x7f0000002c80)=""/15, 0xf}], 0x4, &(0x7f0000002d00)=""/151, 0x97}, 0x48d3}, {{&(0x7f0000002dc0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/204, 0xcc}], 0x1}, 0x2}], 0x4, 0x4000, &(0x7f00000030c0)={r2, r3+10000000})

[  342.489238] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:54 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)=ANY=[@ANYBLOB="0c811d13797af6d5e644a7f6275511fcaf18205ed4"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x0, 0x0, 0x101}})

02:41:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@bcast, @null, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))

[  342.731413]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  342.756172] loop0: p1 start 2564762831 is beyond EOD, truncated
[  342.762269] loop0: p2 start 2494347297 is beyond EOD, truncated
[  342.785222] loop0: p3 start 1915790064 is beyond EOD, truncated
[  342.791346] loop0: p4 start 983213520 is beyond EOD, truncated
[  342.814817] loop0: p5 start 676962771 is beyond EOD, truncated
[  342.820825] loop0: p6 start 3159018777 is beyond EOD, truncated
[  342.845997] loop0: p7 start 745035705 is beyond EOD, truncated
[  342.852459] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:55 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
setrlimit(0xd, &(0x7f0000000080)={0x7, 0x2006})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x60, 0x0, 0x0, 0x8300}})

02:41:55 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffb, 0x21201)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
accept4$unix(r2, 0x0, &(0x7f0000000080), 0x81000)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x4040, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x20010, r4, 0xf1b67000)
read$eventfd(r0, 0x0, 0x0)

02:41:55 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x6)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x4, 0xc1})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])

02:41:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x248801, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x8, 0x1f, 0x2, 0x7}, 'syz1\x00', 0x42})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x8a, 0x80, 0x9, 0x2, 0x9})
syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0x659)

02:41:55 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:55 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x38, 0x8a, 0x9, 0x5, 0x2, 0x0, 0xfff, 0x212, 0x38, 0x359, 0x586, 0x4000, 0x20, 0x2, 0x0, 0x1, 0x5}, [{0x6, 0x4, 0x6, 0xfba9, 0xbe19, 0x2, 0x10000, 0x81}], "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", [[], [], [], [], [], []]}, 0x1658)
sendfile(r1, r0, 0x0, 0x10002)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
r4 = geteuid()
stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r9, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001a40)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000001b40)=0xe8)
getresgid(&(0x7f0000001b80)=<r11=>0x0, &(0x7f0000001bc0), &(0x7f0000001c00))
setxattr$system_posix_acl(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)='system.posix_acl_access\x00', &(0x7f0000001c40)={{}, {0x1, 0x6}, [{0x2, 0x4}, {0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x1, r5}, {0x2, 0x4, r7}, {0x2, 0x6, r9}, {0x2, 0x1, 0xee01}, {}, {0x2, 0x7, r10}], {0x4, 0x2}, [{0x8, 0x4, r11}], {0x10, 0x6}}, 0x74, 0x3)
vmsplice(r1, &(0x7f00000018c0)=[{&(0x7f0000000000)="1d56d100f91881b659a8baf25f5a4d4aabda1d24f4b2f7dad0d5361971e72ddd9103ce05007b0c9cfe75aec8b926337f48821047a621f91b526d823094d8773c3a14da7861", 0x45}, {&(0x7f0000001780)="68131474322e8307a5902f0b622a2d7933f705b1b5c7a959b4c194566894333da410dd9f2710a5cc3f030db48255148d038e6f75619b439e8b8a2b5c84482bd8ac5b7a158967322718dc89a4ce40af73dd8b343d878a21a68241ee372e4412916d077dd64507e38f61ab97cb4208d213d0e9640f5571e318102a", 0x7a}, {&(0x7f0000001800)="2784e77fefe86709b1ec2ec1ce382e4eee5c8da4b2786871de1171dc8e1ecca4184e6f291705d08e1df4909d1fbc67ede2880b2e26aba21a00801fdd465be565b2647cd3992c679bd8a8bae9ea7e9c1ab71611f3544465b6c5edbf7e6b77a5997830960d1ab423b719dd564e73c4476c00c7d35176f5cf2d46f23baa68d018ac80a6253acc1810ff96176c62634c3b659c1e53ac706f1a8cf3da44a485aca82606434a0f", 0xa4}], 0x3, 0x5)
read$eventfd(r0, 0x0, 0x0)

[  343.194051]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  343.194514] loop0: p1 start 2564762831 is beyond EOD, truncated
02:41:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0xffff})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = signalfd(r1, &(0x7f0000000000)={[0x6]}, 0x8)
fcntl$getown(r2, 0x9)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
getsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xf28)

02:41:55 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  343.194521] loop0: p2 start 2494347297 is beyond EOD, truncated
[  343.194527] loop0: p3 start 1915790064 is beyond EOD, truncated
[  343.194532] loop0: p4 start 983213520 is beyond EOD, truncated
[  343.194539] loop0: p5 start 676962771 is beyond EOD, truncated
[  343.194544] loop0: p6 start 3159018777 is beyond EOD, truncated
[  343.194551] loop0: p7 start 745035705 is beyond EOD, truncated
[  343.194557] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:55 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:55 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x28004004)

02:41:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4200, 0x0)
write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f00000000c0))
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:man_t:s0\x00', 0x1b, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x204, 0x8001, 0x0, 0x101}})

02:41:55 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r0, r1, 0x0, 0x10002)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x1ffc, 0x4)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040))

02:41:55 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCNXCL(r0, 0x540d)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:55 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rfkill\x00', 0x400000, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r2, r0, &(0x7f0000000040)=0xccd, 0x953f)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x84000, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640)='/dev/bsg\x00', 0x1, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a)
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x14, 0x3, 0x1e8, &(0x7f0000000200)})
write$vhci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03b4945459609b75e723529310fd57c84e9a3f086159cea1aa6ce44e63e5eb3313ad134f8966fd8192cfc05f20cfcbc41a5c6344f94528e18916c0ae40bcae82aeed001ab4b627a4553273816b3c590932a254b94b8a81baa80630bc36fa8b9093a900372160c436d914d9faecf0c728ca0e267ee5dcc61f3acf8379fe204e7a9523290faf003db518a4c24a858ea03b000000000000"], 0x96)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

[  343.567383]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  343.573125] loop0: p1 start 2564762831 is beyond EOD, truncated
[  343.593753] loop0: p2 start 2494347297 is beyond EOD, truncated
[  343.599953] loop0: p3 start 1915790064 is beyond EOD, truncated
02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  343.643528] loop0: p4 start 983213520 is beyond EOD, truncated
[  343.643538] loop0: p5 start 676962771 is beyond EOD, truncated
02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x2, 0x9, 0xfffd})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000180)="9c4121e64d4c5120fe5012a71675d3f322d355b3b42143d3ad59cbac20aa6fd4a2933485eb6e4d08b534f81a539fc1f3aea938c57d870b687745d082e23e35faaa9a9b9e61e4da39f421453abff922670ce14a1f29477a25607ec83090f9c24a2d5eac0a251fc61355794e9eea299e163d045c627bb842d9be812de8a89829a3981a9ed21541f0966fc2d193f1415b1502a20978667b051646cf", &(0x7f0000000300)=""/198}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4, 0xfffc}}}, 0xffffff80)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r4, 0x0, 0x1, 0x4}}, 0x20)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000440)={0x4, 0x2, 0x2, <r7=>0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x3f0338, 0x1000, [], @p_u16=&(0x7f0000000280)=0x200}})
ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000480)=0x1)

[  343.643544] loop0: p6 start 3159018777 is beyond EOD, truncated
[  343.643550] loop0: p7 start 745035705 is beyond EOD, truncated
[  343.643556] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:56 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x40, 0x0, 0x300, 0xf}})
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0xd4, 0x9, 0x4, 0x2000000, 0x5, {}, {0x3, 0xc, 0x0, 0x3, 0x7, 0xb6, "869db9f7"}, 0x800, 0x3, @offset=0x37, 0x4, 0x0, r2})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:56 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f00000001c0)=0x1c)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7fff}, 0x8)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1000, 0x0, 0x100, 0x9}, &(0x7f0000000140)=0x18)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
write$FUSE_LSEEK(r5, &(0x7f0000000200)={0x18, 0x0, 0x6, {0x5}}, 0x18)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000040)=0x2)
read$eventfd(r0, 0x0, 0x0)

02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:56 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r0)

02:41:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x165481, 0x70)
syz_open_pts(r0, 0x785001)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
write$binfmt_elf64(r3, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x2f, 0x1, 0x5ad2, 0x2, 0x3e, 0x0, 0xa0, 0x40, 0x200, 0x9, 0x5, 0x38, 0x2, 0x5, 0x4, 0x8}, [{0x5, 0x2, 0x6, 0x7, 0x4, 0x5, 0x7, 0x2}, {0x3, 0x4, 0x100000001, 0xb23, 0x3, 0x6, 0x7, 0xff}], "3eee50480681e7c81fe7f6427865238bff8673304a4ba31d9c8b8c33a1b64333aa", [[], [], [], [], [], [], [], [], []]}, 0x9d1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040))

02:41:56 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00')
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40f20a14}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f00000004c0))

02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:56 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0xfffffffe, 0x0, 0x16, 0x0, 0x0})

02:41:56 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x3)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
read$eventfd(r6, 0x0, 0xfffffffffffffd10)

02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  344.287207]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  344.303814] loop0: p1 start 2564762831 is beyond EOD, truncated
[  344.318838] loop0: p2 start 2494347297 is beyond EOD, truncated
[  344.318847] loop0: p3 start 1915790064 is beyond EOD, truncated
[  344.318853] loop0: p4 start 983213520 is beyond EOD, truncated
02:41:56 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  344.318859] loop0: p5 start 676962771 is beyond EOD, truncated
[  344.318865] loop0: p6 start 3159018777 is beyond EOD, truncated
[  344.318872] loop0: p7 start 745035705 is beyond EOD, truncated
[  344.318878] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:56 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCCONS(r1, 0x541d)
ioctl$TIOCCBRK(r0, 0x5428)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000000c0)={0x2, 0xffffffff, 0xb, 0x200b, 0x0, 0x0})
r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xff, 0x800)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080))

02:41:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FITHAW(r1, 0xc0045878)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x20, 0x0, 0x40, 0x0, 0x1000})
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080))

02:41:56 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x8000, 0x0, 0x101, 0xb}})
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040))

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0xfffd, 0x0, 0x0, 0x9})
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a03)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2400, 0x0)
r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x7}, 0x90)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
time(&(0x7f0000000180))
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20403800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r6, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000)

02:41:57 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:57 executing program 2:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x4, 0x8, 0x100, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x146}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffe01}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x10)
accept(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000002c0)=0x80)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x6, @loopback}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="3980926181ef984736f325a4e9ea5fad844a9461d4ed83fd9d42de4cfb21d08f37824eb8bca0251075000000000000000000", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r4}, 0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e24, 0xffffbcc0, @private0}}, [0x5, 0x7, 0x6, 0x0, 0xfa, 0x3, 0xffffffffffffd476, 0x1000, 0xfffffffffffffffc, 0x9, 0x7, 0x9, 0x22, 0x2, 0x8001]}, &(0x7f0000000400)=0x100)
syz_emit_ethernet(0xb0, &(0x7f0000000440)={@local, @broadcast, @val={@val={0x9100, 0x4, 0x1, 0x2}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x2, 0x1, 0x9a, 0x66, 0x0, 0x3f, 0x1, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, {[@cipso={0x86, 0x2f, 0x1, [{0x1, 0xd, "bdb46f9d7b2c618a0a3654"}, {0x2, 0x7, "e3e0a81ec0"}, {0x7, 0xc, "7f7a85d63ea266cab890"}, {0x5, 0x2}, {0x5, 0x7, "de5b8907af"}]}, @rr={0x7, 0xb, 0x37, [@local, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ssrr={0x89, 0xf, 0xe3, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1e, 0x2, [{0x7, 0xb, "1a7bcfc2c306e5e297"}, {0x7, 0xd, "c485446822843b03e8f04b"}]}]}}, @redirect={0x5, 0x3, 0x0, @private=0xa010101, {0x5, 0x4, 0x0, 0x2f, 0x8, 0x65, 0x8, 0x0, 0x29, 0x5e00, @local, @loopback}, "b504"}}}}}, &(0x7f0000000540)={0x0, 0x4, [0xf4, 0xfc7, 0xd5f, 0x8fe]})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r0)
ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="6007c750212418201141517be3eac4ea5bf9b92d436024317236cf8efdba0412fb08eafa56f58a9bdee1597e41b91a1c77f5f4d8eb03e3ce5eab5dbc52d617e451c7c77bf0f5027da1233733c34a87fe242150d66dd61af828a983cd8cbff412a8bf9b2d1ee93dedc084762f571b5036f5376f2ed65929039ff76fb78225d7998d23ec9a02bbc8c9e43370e7c2d09a5802f7e081dbfdedd1e54c895a87e475c515786a2984a7b82f936c05d75795ba59e4f2ba7ac8e80a7482d035eae45b")
ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  344.750453]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:41:57 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="1ea542272388fc6a"}})

02:41:57 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x4}, {0x5, 0x5}, 0xcc62, 0x4, 0x7f})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  344.784114] loop0: p1 start 2564762831 is beyond EOD, truncated
[  344.784124] loop0: p2 start 2494347297 is beyond EOD, truncated
[  344.784131] loop0: p3 start 1915790064 is beyond EOD, truncated
02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3)
r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3)
keyctl$setperm(0x5, r4, 0x4180000)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/251})

[  344.784137] loop0: p4 start 983213520 is beyond EOD, truncated
[  344.784142] loop0: p5 start 676962771 is beyond EOD, truncated
[  344.784148] loop0: p6 start 3159018777 is beyond EOD, truncated
[  344.784153] loop0: p7 start 745035705 is beyond EOD, truncated
[  344.784160] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:57 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c)
sendfile(r1, r0, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
recvmsg$can_bcm(r4, &(0x7f0000000640)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/62, 0x3e}], 0x7, &(0x7f0000000580)=""/180, 0xb4}, 0x101)
read$eventfd(r0, 0x0, 0x0)

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
close(r0)

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)=ANY=[@ANYBLOB="0c811d13797af6d5e644a7f6275511fcaf18205ed4"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xff]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x0, 0x0, 0x101}})

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  345.234460]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  345.244994] loop0: p1 start 2564762831 is beyond EOD, truncated
[  345.259594] loop0: p2 start 2494347297 is beyond EOD, truncated
[  345.270527] loop0: p3 start 1915790064 is beyond EOD, truncated
[  345.277152] loop0: p4 start 983213520 is beyond EOD, truncated
02:41:57 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x84}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40044041)

[  345.284557] loop0: p5 start 676962771 is beyond EOD, truncated
[  345.303493] loop0: p6 start 3159018777 is beyond EOD, truncated
[  345.314133] loop0: p7 start 745035705 is beyond EOD, truncated
[  345.330863] loop0: p8 start 3542136138 is beyond EOD, truncated
02:41:57 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffd, 0x0)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000040))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
connect$nfc_raw(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x3}, 0x10)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x12b643, 0x0)
ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)={0x0, 0x2})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0x53, &(0x7f0000000180)="72902260038ae2051a826083f3f404a7ff0fcf0d47996d7bec24760643709dcb04ecc00245dc2a50b41923624d6675b0abbbafee9dd6425f7b1dd9b7be2e0f2b1fef92bb16f95f2487d0b6fca14a3ffda9d896", 0x1000, 0x0, &(0x7f0000000540)="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"})
r3 = accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x800)
setsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000140)=0x6, 0x4)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0xffffffff, 0x1a, 0x80, 0x0})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000280)=""/123)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)

02:41:57 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:57 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x7, 0x0, 0x0})

02:41:58 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
getpid()
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_names\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000180)={0xffffffff, 0x41d, 0x1})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
getsockname$netrom(r4, &(0x7f00000000c0)={{0x3, @bcast}, [@default, @null, @rose, @null, @netrom, @bcast, @netrom, @default]}, &(0x7f0000000140)=0x48)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1f, 0x0, 0x0, 0x0})

02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:41:58 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x101000, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x0, 0x7, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@gcm_128={{0x304}, "26905b53ff42274b", "7819b10b5afcb34b981a4d20ea4f6cc9", "8e5ce9b0", "028ed613647c4bf4"}, 0x28)
r5 = accept4(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000080)=0x80, 0x0)
sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

02:41:58 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2fffffffc, 0x20040)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockname$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10)
read$eventfd(r0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000500)=""/198, 0xc6}], 0x2, &(0x7f0000000240)=""/232, 0xe8}, 0x51ec138f217917b0)

02:41:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
prctl$PR_SET_FPEXC(0xc, 0x80000)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendfile(r1, r0, 0x0, 0x10002)

02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendfile(r1, r0, 0x0, 0x10002)

02:41:58 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x3, 0x4, 0x0, 0x0})
ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/249)

02:41:58 executing program 3 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:58 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x0, 0x6, 0x800, 0x2, 0xda4, 0x100, 0xfff})

[  345.880061]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  345.908093] loop0: p1 start 2564762831 is beyond EOD, truncated
02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendfile(r1, r0, 0x0, 0x10002)

[  345.938230] loop0: p2 start 2494347297 is beyond EOD, truncated
[  345.938240] loop0: p3 start 1915790064 is beyond EOD, truncated
[  345.938246] loop0: p4 start 983213520 is beyond EOD, truncated
02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10002)

02:41:58 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4000051)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:58 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1, 0x0, 0x101, 0x4}})

[  345.938252] loop0: p5 start 676962771 is beyond EOD, truncated
[  345.938259] loop0: p6 start 3159018777 is beyond EOD, truncated
[  345.938264] loop0: p7 start 745035705 is beyond EOD, truncated
[  345.938271] loop0: p8 start 3542136138 is beyond EOD, truncated
[  346.148846]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  346.149741] loop0: p1 start 2564762831 is beyond EOD, 
[  346.165974] FAULT_INJECTION: forcing a failure.
[  346.165974] name failslab, interval 1, probability 0, space 0, times 0
[  346.165988] CPU: 0 PID: 17270 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0
[  346.165993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.165997] Call Trace:
[  346.166015]  dump_stack+0x13e/0x194
[  346.166031]  should_fail.cold+0x10a/0x14b
[  346.166047]  should_failslab+0xd6/0x130
[  346.166063]  __kmalloc+0x71/0x7c0
[  346.166075]  ? bit_cursor+0x95b/0x1700
[  346.166086]  ? fb_get_color_depth.part.0+0xba/0x1c0
[  346.166100]  bit_cursor+0x95b/0x1700
[  346.166116]  ? bit_clear+0x460/0x460
[  346.166128]  ? fb_get_color_depth.part.0+0xba/0x1c0
[  346.166138]  ? fb_get_color_depth+0x5a/0x70
[  346.166147]  ? get_color+0x1b8/0x3a0
[  346.166159]  fbcon_cursor+0x4be/0x690
[  346.166166]  ? bit_clear+0x460/0x460
[  346.166177]  set_cursor+0x192/0x1e0
[  346.166185]  redraw_screen+0x56e/0x770
[  346.166198]  ? con_flush_chars+0x80/0x80
02:41:58 executing program 3 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  346.166214]  fbcon_do_set_font+0x6bd/0x990
[  346.166228]  fbcon_set_def_font+0x125/0x370
[  346.166240]  con_font_op+0x95a/0xf70
[  346.166247]  ? fbcon_copy_font+0x190/0x190
[  346.166258]  ? con_write+0xc0/0xc0
[  346.166273]  ? __might_fault+0x177/0x1b0
[  346.166284]  vt_ioctl+0x1376/0x1f20
[  346.166295]  ? complete_change_console+0x350/0x350
[  346.166303]  ? avc_ss_reset+0x100/0x100
[  346.166315]  ? get_pid_task+0x91/0x130
[  346.166328]  ? __lock_acquire+0x5f7/0x4620
[  346.166338]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  346.166345]  ? complete_change_console+0x350/0x350
[  346.166356]  tty_ioctl+0x6c5/0x1220
[  346.166367]  ? tty_vhangup+0x30/0x30
[  346.166379]  ? trace_hardirqs_on+0x10/0x10
[  346.166395]  ? tty_vhangup+0x30/0x30
[  346.166407]  do_vfs_ioctl+0x75a/0xfe0
[  346.166417]  ? selinux_file_mprotect+0x5c0/0x5c0
[  346.166430]  ? ioctl_preallocate+0x1a0/0x1a0
[  346.166451]  ? security_file_ioctl+0x76/0xb0
[  346.166460]  ? security_file_ioctl+0x83/0xb0
[  346.166472]  SyS_ioctl+0x7f/0xb0
[  346.166480]  ? do_vfs_ioctl+0xfe0/0xfe0
[  346.166493]  do_syscall_64+0x1d5/0x640
[  346.166509]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  346.166517] RIP: 0033:0x45c829
[  346.166522] RSP: 002b:00007fb213ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.166533] RAX: ffffffffffffffda RBX: 00000000004e6920 RCX: 000000000045c829
[  346.166539] RDX: 0000000020000500 RSI: 0000000000004b72 RDI: 0000000000000003
[  346.166545] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  346.166550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
02:41:58 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x101100)
sendfile(r1, r0, 0x0, 0x10002)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  346.166556] R13: 0000000000000375 R14: 00000000004c5e6f R15: 00007fb213ec06d4
[  346.169836] truncated
[  346.435586] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:58 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001400)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000001500)=0xe8)
sendmmsg(r0, &(0x7f00000046c0)=[{{&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="f7ad68ae59a40bff93b7890f4b74c7e45ff58ad93b5729670c76aa68dc5c5f6b8c1c2c371088fd9052570a88f5c353e913764c", 0x33}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1250}}, {{&(0x7f0000001540)=@ll={0x11, 0x7, r2, 0x1, 0x8}, 0x80, &(0x7f0000002840)=[{&(0x7f00000015c0)="0c5509f0bc19ce9bbaa075d885483f87a1f618dc62e46ce57f16d35869e47bde98d1566088417d086ecc8669c2cc8c48fd8868ecbb9a293909ca3218fa74d4b55696e3f84297104166c061f63e89b0920bf62ae0a717e1582de154858a663c78515c928d40d8351650c56c8a47ed425c57dcdd9d4fd0a0f4eaed1dee", 0x7c}, {&(0x7f0000001640)="c49399736ad5f9e8d201e5da083a", 0xe}, {&(0x7f0000001680)="46ae7d39cf52229db0f6ac364326beb773589f", 0x13}, {&(0x7f00000016c0)="47e9395e7e7bcbee39cdef4de7fea3faf12352643777fc40f6c282b70ec52ffce69d7a01277ae0fff49afa463a48714bff41f999f529ea94ae9b2b5dbf9af5d7fac817bdaceeb7e60e36aa03926d4a222d9f847af96990a1f2ecd6aa75066c3c5fe8e2a40befb44a3bf24278af02e644bd0792a92deb058e09f300da2f59596edaf874614c253b719b04cd6695f8df7a958e955dadd034b23d48577472c23f9e9f0b02c9d7354f68c1c273c817709e751abce53fbb6282f9e12a3130b5cbe2ed1a75d0e9dd0b7d7d8d043928671c47f21e595688b54d228ace05fe776be8672907e7bfaf16aba56bc0cd583ffd5826a9d574e5ac0ab8ac044c22508c95a15cc3f1521f3c4070fefd9257a0e74825065c213cbacc80810a7b908f7912b18adc97fb13a4f07d5b273035a9eff2f9ce5c01c3f6a6abe72c3a6d17bf90ecc2c89c0c9885e58fff1b6487afead29eddc7a9472edc3cb0c50f74c4ca00949195cdd6ae77b2d9b94043645dad8409216acde6fecb5418438fd778921872f208fa5d6ed36de295c264a6949d54212aeb8ae4ba2a43b52cefd9aea31e2a97f1876e55eaa800a00a2d3e8e00c6e445f08c2cfa9c1290d0cece23a23694e5cd177cb9d48a6c11d55d5a1841abc2818321490d17b04ed2998ca34246eff95b25d58f89f05ec4fb8d26ddf17819afd3cb8d67632683906210b2f1c711207a2017633c383fef36eb3c3447a248415c9658187b6c3cb83d1b1f3474c1cad73a75e3b3327488fd3b7272012656c86f4dd8e86c57af015a7d8be600c1def69735f4c943635dcec844d4c4dc80b32191a0805e6e0d25921bbeaa497c92c54342223e2243722792aef031683abb2c91fdae92b94d7c9038c8c8d2ca1710303d845a20303c17e799c9cd9c46553fbd70d76c2d12b82d516ca96e15667b8aec4f3a42397f7eea857fbbb4f25a73d8dd9194b254d59a83f4b8771848841b0397cf30f2b2baf065939837fcfb7374dabdd8ed71872746c67f9f184773a47e8a461ed0b5b5815e50a266858b4747fbd8c87db78afd298c6a88686af45290ead3ad252a56f72b40ff29a3c5229b65da8927177ae13c93e07aadd6b50af3d07cf0aa25412386c788cd464f29d3b3eb0912803f47643eaf0c1a4fbb7b1b95c9fbb77378523d52d75fd73f162b61644a95176d846158024d0841bb84789db8b971e6395f25ddc3d1ea03ae81550c10c985bc02c440d47ade0a8b972eeed02deb34bb3c360c8e3e0bccff066dcfc3dc76ba956b586db9040f2235e6449b8dc442f13c6cf7ddef2cbdfe7bf5ed7841f3faf67ba650d6e92d0c1e5cb22fc6ea902f0b39e852555fb2e8663051cb66efca213d5b46fb2cdd77bcdc5a327997035014b604b2356a05e37a304124ed7385290866e331dabb24d7e06ce8355c91c8407336d4876c9ce221efb0fac072116a945cbe2961aeec0e9ce7b76cfac6b556f36a33fd2b5eac5faf5310994e3743c6df502b943155e7c2a6a71196e5f79efb6c3f8e4b586f38a389143e960aae8076a9bba7ed2f8d272609e03ec3fec3a78e72173c5d298dfe8270658a4180aabb63d9ed01132e7bbbbc35dc4d573f67bf702c443e4786d9feb6b82e117f14956a61432f118a83ac84e577aa627c0160ea5baadd38988b038d628347728003ae886f51a0c3a45efd985e4d9aca240d10ab228b6f8dbcbfe972150c707e46ef601ff852caea37cae601e8180064f768199339b9e1316e99cb564d0db3d3c4f4fc463349a654737589a297189ca782adce5c88eca59353326b1df4a456cbf267f1118322b44c13651c1ef0b7bc72a5b2388b59efaf6055f891a19ec98c4d4a0532c2b1c96745f0d618cf3387f51a8f39677fb76a5edb71b2010a9d4404f8b4fd6a82e543681856c910fa36cd157fc7fe75a2d207938e541359e41f5149df6766c4e642f34ca06374a36f3a1550e0381835b5ae3456ddab38709e4284bea994a6693a725b3556be86ce3e3d66c449613b90b1ff2b3ee68503d6ead7bcd781a2932cc14fa53ff4a51cec5b90b08b882e047b4c4129c386fd0484db5c30379e79a5621dbcec102c8f80ffbeedf416fc1574de304de38786276ed7743ff3e5ff6a6438dd70af73769dc707855a5c30e8ba0890890a763be2c06b5379ce5516179d6f25104f83e2213aa309544a00c2b27d212edba2b32eed3466bb7bd0d91eecc3701927567a2c0ba651256f185ba5e67fc39c3513c6806cf726401eb3adb8363f7daceca9c0d1410c4c6e25e27db0ed2e118e33c358793c9fc265f31b257d103f3910df362ec5bdf003ff68800608b6da2d1c1ad9ad264accc120021e8d26ea2e705bfc94fe5fea0e01203345ea96558e8b4565a7b2ea80af2ebe72c752a45a540fbb065abad22b15122bfcf3b7fa9a80653aba3466e19c1d331b6ecbf53bcc09d9bfdf262e2bd6b578bf4011387d8fdee065d349012a57b3697fb6761b059510aade40737cf41109d3f2bcebea566100cb4f94874de80c02a0546908a2cfb1ec689100dbaa3ae041bd04b1c6691f3b24ae1b479bbf109fe123161e61bb7f08a2dd41262e6d9e65b71a67a494d13d1555dd0452e138ac9ba472a7727dcb2e6adb7c0ad07eb91af4e181c8d8364f553ae40dda35d94f532474776963ca3849a2551f22125677a48da2bbe155abd89722c277c569cee68f1bb682a49e310c5352bb0cf0cee440f21720e591548914a8b52395ef1266f2dad19d100cbe774ae34a52f90d2aa80fca4049c028f43fddd16c59c9b18d0dee49273e6ff64a4d3d976201444b7dad80074510c0a255841bd573e43f8e6e137c0bd70f261602c5d0e21136471bd82f7e58e8de82a7bd1c3b6467d0a05cde6bb2637a15dfbdc978c36cf9f42d8c9e39c7428d29eefce41a932afeb668b5d2299e3137e4c59960e1fe0899e087cbd834aceca01fe1e1031277b7947d810e8e0ab5f3c5d38f8fa69779d1a8798ebb740254ae4962abf701cfadb3e9736b061546ba9cda5f34fa972d4d66f2aa091d29b8bc708dc77dccb3648cebc6c483fbc5c58464d9f35e37b22ec9c55b93db9f1be3fbf1356cdcf1bcf9d7f3d3165741039464adea3d61034501424ae733d08298d23734e61d0b36ee3b2837115ce12cd083214c6a03aeb44419bded10a669a8e8bcd3ab3a2a3ed8765055f371901e5e242ad4cbd40731c3c0e3aa0604e3403b236c73661ad830595cec5b25709c7badc28a19ff08169cf46f0fc195b8768ba7b6993edd798c40dbb180735dec5e2ee7c0051b635fc0445dc8da556034d77547db005575e6afa406aa985f8de679465a15d95e039f099e97581f180dc83f5cc1810bffc7fc99c64b7b90eedad173c92242c1ea61b0eab715ffa39f5f9f52046be1c0809add9864e6c1004d888ba0c551b8e9c85b51b1de9c2e6fe3958da406aa293263e91cf35a02cb836cdf1b39972e80538f9795a7144f6e872842ce502127c0bcae588e6b053a3a94567c2ef40d055be7265ca85e866f002684cb8c317ff3824828afef26e4045f1cb1e0b0886bd277ce4bee62bdcedc0982a4a8af7e81ec43651debebb999854dd48b60299ad253a1154744042be5eed1a7d0a6786aaaa655d2555a48c93f91344ce02def822819b5a4e3651ce9828a28ef18d55f30aaab95410c617420629ae2e4b0c8457365e35b570c2c850cc6a6cb7a7a70c32e951e89943147e221b05bb493837fde689b3a2d346e79dcdb5790c43efce7cfff00675c0a03778b9fe79c2f93ce9d150707d69580f1b87fa231c4c8bf08e769126c9d8564d6687a3293e2aea52678120eb295b4de2529bdab82019a45541559a9f40b30d502d9f9419f161f1c3a11b53956366e7a5989b8c3669d6887fb4826381137bd1858b424262b3ad38c124b8f102c44b906ac01a24e5d963229e20d748c2787b673bf815b3eae8ad5e17578be06c08481a71307294dbdde878f1f7294fa1c6b25d94a2e610f61d32af9dee20259967a29771fc05df77d83aaf23af0d3592b10d6894f1d905ac1f9db7ee389667d8fcfd66a0ce069a6e4237d8deab5ac86ae8850cebe2705b5662393269feb0d3fdb57a9a2933a5e7e151f6a76293cf6691052d36b11e8051db70910379ce945fee6c16d776d6338cffdaf7784f302758b4fe2d7eaf5d86723a8db5d274def60af6c8177e468757219caeb01c7b3eeb86ed034a0b3a621c284f6fd928820268922cc37cd1a36b3c4b0569ebabe7cda63b9a437f6ee1536221caa279db50f86e9ec8aca218673aa6502c259a9b7219ff096bb56761df0c8f5fd51281a9f09fd460bbaa7db460a55296f8d1d11fd2344c8df2e80413000a2732f87f773de0b4e67a2ff78524c35f28ce87e61faafc46b13814c19c352260fe642fbdda05cd3ea793f2ca2df2177b1da5e37cb7c80269208e76ad335f355f89a022b31f809ed144f7fd94f9e9712c252eaa437ca64cc1756b7e5312afefcdb039d0f4a6c4aa419be1e83c6f6b6d12ed188a7e0f8290dfb1af0a97c037ad9e2849b6adf93284d3975da6eaa39e4177be52eca7356d897111ef6cef515a92b4b9622747f7f8547915754a8fd680f2d82fd1a14ba3c8f70ef258a8a2841d192c253ab4d8531885c91e26b9039b8e7a794d853e172e6a69c7998558a0f2ff7efeeddf9e471ffd02f34aea32b6f359b46ae7377feec6d6eb462a63a17ea7cdd1f0396c885ac3a4c0fd87d1e169cfb9abab965d9ccef7f6e27328779dabd90ab005a18b82352ee0cfa547c40c506206f53c95d43d92e0782694776a0c6e2159fa3d3f089e90cacf2f8e599c86cec7b48fb7f4557e0b3c1187b820e6ceaff29e8c674d1b3bece31a946cf71ec320ea949bf5ad38120ba3da73b7872e92f594f46d461899282835edcb27479aabf7fe6105b428968bee76c7eddf9bf2363bf79f70b1c304b525e9af6c4a550fa4e7798a8e389c9ac42dff5a8c13dfb68a67c697af732a0b52325f2d878b6ed0c4cf7a0af34ca92505bc40a258bd21c314d6724aec00fb8812f3f993496fd2804d601f3986d6107a7e5e538b2bfe8a27fd7cc23dbbd09326a7591758d953d847271e405b391e3b4ed663f6bb627729221560c8b11d1dcd6100169a58ff4101e1143fb440455665cdb12cd0910aceaea37973c23103848c7af6cf3cd107faf523147a1281ff4cd427da7fb0ad036c1c5c749ad1d7cea6faecd4f5391cc66e2240ee43d4b5fdb525d5015b87df6155a50be06f561d059a59dce5ec0161092b4b79e8c0e7bc7f8afc0c05dfe03856fbb5be47df4733c08f544b49ab7f05a922d78987302578cb95d06d5831cc2670e1a5c352b78769584e727d9f7af2a9ac1805b7e2e9c333ba9c9bb48951c4effd392a697894f727992b866fc30eeec575e01ac8bdc874b3b29a53d82f585183145b4f4f6faecaa1fe304847b27646a7f44173c4b7d40db505ebb234625b220e57dbbc80e9ab2b59776e48f017398c8c8480add225b0ef432a6a92fb782e71042088d65a82173f333f2325f414c129e39445b8d16a7ccd76abfabc0c69bda62817225ea6a1bc47f48238b96c82ae24819a9b3dfdb644548d73550497abdcec2b8ffee5bfecb75e84bb9f40b80a204c5784b919b16c42665b49ab7e977fc6642805709557e81a2ad1f9ae838a9cd0af0fc6a0883c7d1f83c6fbb4e4d25675bcf6cdca19963979cea1d018b11c4a4b5c508377f078f44d5c235f05868489434576512346a8ad87de3089d325b3dcbf4f800734d3d66176f5fcdbc1b2125e49d6dc9501d25104a557e56", 0x1000}, {&(0x7f00000026c0)="8fe08f7cdcd795ae426e93958ea9adb1c75b1c0d2cbd3f80e3c8e6bbd383fe71476b178a999b6bc714063b61ea620835eac57dbd549a643c2b897fbcb4425e2b5ff71c1ca64031923ca9150c6194f9da442684c55d21e7da65e2cba79574f11636571068f8bff7985c4f2078112cd878fd0896996f8c3bd536e7f05619b30b604ae4635eb7c81dff9ffa107a3eb215cf1e4eac14716336c83252e8379dfd6166556aca76c130aa3a9d20a9c2a2ecdd66e0a5d8db26bd2fd0cd75ee7427df691c9d79f928364f01af7ea1e3fcc6705edc277d22acda63873d0e84a5a51bda8d26c608ab44e91acad2f6995444dbb75df3b9", 0xf1}, {&(0x7f00000027c0)="67bccf31ba5a8bac68c301d0bbdcd5f7fff6c9b69812a2e238b45e2f75aca3f78af733cbdabae4281975d087a87685b7cead18beae80fb21659d3e460663b9175e2c4202516378b4f3a2c80465d9b2d41b5547ef18b2d5bae55980e020e50f4e615a34288c285434f065197501a9910409755d3357a6be1b05", 0x79}], 0x6}}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0xff, @empty, 0x4, 0x1}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002940)="db23fcc3e3c3e332f4a666442ec62013ee436c7112561b30ece559ccf14c70fe2a53f649be27012fcd4ce9e71a155561a0f2e52d82a590c2edf284da9d0b3512bec5aa7728", 0x45}, {&(0x7f00000029c0)="3bb12724ab007bf48a2fb5bb7cdf7e2b429af76cfe9e0134e95a3fd2c404232c4b2b9cf2704853994774dec3f007c1c42ccbe3703f9702b297fa67b610273816ac42d4a0902c4e35fdc0e3c4c623d32a72ac2e09ffc20faf7d191872dd181cdcceebc90217a3962c6303be97", 0x6c}, {&(0x7f0000002a40)="fb5bba8aab69a819c1c346710fc3ede90246", 0x12}, {&(0x7f0000002a80)="7a583a6e312c123f4b10c1b061ec25f60977961fbde3dd9e16e0d01eb6bec148f541fb3d62919f03c2dfa352731191507b9c0c6e70ef19f62b", 0x39}], 0x4, &(0x7f0000002b00)=[{0x70, 0x100, 0x800, "ee42baff4e9be798d66a70351f4fd8664b567da0f54a0641a6572e3ba5c0c7e75ff57f1297c50ce080766476dab11ebda67fae275b5d7ec0b0d3f22569d879b5d873c83dcaf37945244afa8b6ec8e1cb8b9a2d2b3fb3fe2e3530"}, {0x100, 0x101, 0x0, "a30d5c472c0d69fd5be960bc29d0ac9a9f528813400c0df127bed9d1d3ada0313ee291d54f0ecd3132c43041a0eda0f5d74d0fb6470d47b55599f4a699a421c721b70693d50e3deb703ebb1c8bb2b8e174c3765add2302a46d2b0972df7fc9befa4572edf0136add506ae1716fc0bc65a8ebe359c2e4327a48d758ae26bf5755d5856bda06a3c1f75fc72ede4ac9425c69d13dd352ccff85236492e2fb917f513d6e7b4135ce48bd6be7e9e53b0f27ca4db0f61cc06393c46a10b5f1db4d000fa4febf6474fefded56ab11601f9adef7087c7994e6b385692ec9a7da9792157f863dd7e91de118ce48659b5c79bb"}, {0x50, 0x114, 0x537, "f322a7ca1a109980ef7ba52e1b3d62cf16c83b493d3a8cf5775c826f09ef4017e361ba93998c232d251e751fcbb6d13602b5ad19dce266073c"}, {0xf8, 0x3a, 0x8001, "90ceb90d544941310f956cb8abbcd16cf3beaa76dc28a7845f4f01ab234d76e4ad5833b6f1e0d69a9fd5e2199917957500cee6021a3f49689d342ea79442eb2f11d6f5e31cd194af94614936c6429c25409f88837d9dcf24fa1e5f275a5cc49e17f47ca67c6c8dc3cb947355cfe494c6cd61a8f59a6f3d79e97e2734f6fdbf89b673a6ff93578350a848aeccd2ac6cb6ce6647b4a56f3c607ef6afd43fc3ed51089acdf430f321f65848c0d28136fb67a580828d7f05921a5eaec08a9f33baf458cbc80e127b7b7e39a741854aa047c06417da2746a9e0d4db054a2f0b474de003466d"}, {0x90, 0x104, 0x6e, "ebe3cf5cab2c87d056712042b30a474f4a58978efdee3d4533aeb76736a5d21aab747a5005d7834526026ec00b2b7cd0e71536356b74c3fed1fe5979a6b5c73a48d45891a43611e8707b2cce76ce953538c27c208d3cf06387e9488907e2dae809bddd47335d92bb884062b63aead9123e39628d4f5aca7f11fbeed50753"}, {0xa0, 0x10b, 0xd6, "e3caef97f5b26367749acc69e3c5d2cb2801f6d48b2902423b3a404d5866669c27add4fa9d821f5722466e20c02f79445bea2abb64018738d620c2b85bc7c3fe024894fc99c7fe08a44ee88971a540e68eee991dd34aafecbe237b4e2544963780ed656ac9ea3f565d7cda53287429271262e99550788f682ccdf401be11e0e3ee3f8c00c91b3bcf140704b671e5"}, {0x70, 0x180, 0x5, "f24f154385a36de510697339635b8ae9e2ca88cf8f7b5c63e1162a3a60ce7a011540d163ac7a97eeae18c891362de1863294977fb542b29fab55fd7c88bd1086393fe89064625e3750f6eb919644413aa019b0d0d1eea06a6a0f"}], 0x458}}, {{&(0x7f0000002f80)=@caif, 0x80, &(0x7f0000004400)=[{&(0x7f0000003000)="c2127283d9e0e1743e6a7de83b7875662c7237bd17274f43e1c3bdbeea288b61ba87d52f566221374c9fedea8c4ef245d9cf40f9a0f8c7559a7e165c289940ac7c297d8afa5850b47b4b4e7be0f5f6e82e3dba6bc93f017e5305d821bd61a4152d30c1a52db73b48f02b700a474a6a8170d3356acb4ce035e9af5b7307502b3e92aec92c34840f949bdd161632ed63f3cc8de08075f9d2cd72cc3fc52274413c765bb68a462ffb5b2c6ee5b522533c0a244143077dc7ff607e1d40549c846b6db8569ef0da4ec5e687e68c554b5886611416b7c2e63807b0578e256b27b9e04cffb55a14cd4a20cf4d81", 0xea}, {&(0x7f0000003100)="ac3cada89c8fde2e1f662d21fd0a07400c9e72297687b6dab23f67350229545248cf99b838e007b912a35e94cba76e4bc261bef0335512a520e52d8a14204f797369ee17f571af42949b84c59bfab8699d49e11ae0", 0x55}, {&(0x7f0000003180)="4386d394ea161f61752824776bc0723c5dc0c44f48b43241b3c01ee924124695cc813cb89353318824fdccc3022a5f284d0e5e8e5f4b313ac18fc56b9a8e996c5384b655ac67b73aca4e2d8726ab62f3328db3e2836788bc72d3f1e266aab3cb25e691f1ee1b6409b9acc229dbc58074858559d706c20d2a4b7b4f6d0ed6947f0d2f2c2e731fff667c6859ac4557680b151e", 0x92}, {&(0x7f0000003240)="9cfe3a057dd3bc4aec69d44f93f9c7d607b9d8872af1d47db43c2f2530223f14e3ba34a5c280334b0974ee9892a0917c88f3ea0a946e02a4d2ea98f1dd7ac8047d2a69931a324633d0ceb6d2db3494c2ad2da0e059e07332e6f5bdfa1d61b54724a689b95bf9527953a9ff39802c1a09dc3558824e1ab209818c80a1e7e4c6d754ee73ce5feb36eaef9a53", 0x8b}, {&(0x7f0000003300)="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", 0xfe}, {&(0x7f0000003400)="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", 0x1000}], 0x6, &(0x7f0000004480)=ANY=[@ANYBLOB="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"], 0x240}}], 0x4, 0x4)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:58 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10002)

[  346.435596] loop0: p3 start 1915790064 is beyond EOD, truncated
[  346.435602] loop0: p4 start 983213520 is beyond EOD, truncated
[  346.435609] loop0: p5 start 676962771 is beyond EOD, truncated
[  346.435615] loop0: p6 start 3159018777 is beyond EOD, truncated
[  346.435624] loop0: p7 start 745035705 is beyond EOD, truncated
02:41:59 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x9, 0x2, 0xe7c}, 0x10)

[  346.435630] loop0: p8 start 3542136138 is beyond EOD, truncated
[  346.438096] FAULT_INJECTION: forcing a failure.
[  346.438096] name failslab, interval 1, probability 0, space 0, times 0
[  346.438110] CPU: 0 PID: 17290 Comm: syz-executor.3 Not tainted 4.14.180-syzkaller #0
[  346.438116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  346.438138] Call Trace:
[  346.438156]  dump_stack+0x13e/0x194
[  346.438174]  should_fail.cold+0x10a/0x14b
[  346.438189]  should_failslab+0xd6/0x130
[  346.438198]  __kmalloc+0x71/0x7c0
[  346.438211]  ? bit_cursor+0x95b/0x1700
[  346.438222]  ? fb_get_color_depth.part.0+0xba/0x1c0
[  346.438235]  bit_cursor+0x95b/0x1700
[  346.438253]  ? bit_clear+0x460/0x460
[  346.438266]  ? fb_get_color_depth.part.0+0xba/0x1c0
[  346.438276]  ? fb_get_color_depth+0x5a/0x70
[  346.438286]  ? get_color+0x1b8/0x3a0
[  346.438299]  fbcon_cursor+0x4be/0x690
[  346.438306]  ? bit_clear+0x460/0x460
[  346.438319]  set_cursor+0x192/0x1e0
[  346.438329]  redraw_screen+0x56e/0x770
[  346.438341]  ? con_flush_chars+0x80/0x80
[  346.438356]  fbcon_do_set_font+0x6bd/0x990
[  346.438371]  fbcon_set_def_font+0x125/0x370
[  346.438384]  con_font_op+0x95a/0xf70
[  346.438393]  ? fbcon_copy_font+0x190/0x190
[  346.438406]  ? con_write+0xc0/0xc0
[  346.438423]  ? __might_fault+0x177/0x1b0
[  346.438436]  vt_ioctl+0x1376/0x1f20
[  346.438447]  ? complete_change_console+0x350/0x350
[  346.438457]  ? avc_ss_reset+0x100/0x100
[  346.438470]  ? get_pid_task+0x91/0x130
[  346.438484]  ? __lock_acquire+0x5f7/0x4620
[  346.438494]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  346.438502]  ? complete_change_console+0x350/0x350
[  346.438514]  tty_ioctl+0x6c5/0x1220
[  346.438525]  ? tty_vhangup+0x30/0x30
[  346.438538]  ? trace_hardirqs_on+0x10/0x10
[  346.438571]  ? tty_vhangup+0x30/0x30
[  346.438590]  do_vfs_ioctl+0x75a/0xfe0
[  346.438604]  ? selinux_file_mprotect+0x5c0/0x5c0
[  346.438616]  ? ioctl_preallocate+0x1a0/0x1a0
[  346.438637]  ? security_file_ioctl+0x76/0xb0
[  346.438647]  ? security_file_ioctl+0x83/0xb0
[  346.438661]  SyS_ioctl+0x7f/0xb0
[  346.438671]  ? do_vfs_ioctl+0xfe0/0xfe0
[  346.438683]  do_syscall_64+0x1d5/0x640
[  346.438699]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  346.438715] RIP: 0033:0x45c829
[  346.438720] RSP: 002b:00007fb213ebfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
02:41:59 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:41:59 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10002)

02:41:59 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:41:59 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x3, 0xf, 0xfffffffd, 0x0})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCNOTTY(r2, 0x5422)
fcntl$getownex(r0, 0x10, &(0x7f0000000000))

[  346.438732] RAX: ffffffffffffffda RBX: 00000000004e6920 RCX: 000000000045c829
[  346.438738] RDX: 0000000020000500 RSI: 0000000000004b72 RDI: 0000000000000003
[  346.438744] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  346.438750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  346.438756] R13: 0000000000000375 R14: 00000000004c5e6f R15: 00007fb213ec06d4
02:41:59 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x3)

02:41:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300, 0x1}})
ioctl$KDDISABIO(r1, 0x4b37)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
sched_setparam(r2, &(0x7f0000000040)=0x2)

02:41:59 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40)

02:41:59 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10002)

02:41:59 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/236)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)

[  347.266030]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:41:59 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80100, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x3, r2})

02:41:59 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x6)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x5, 0xfc01, 0x1, 0x301, 0x1}})

[  347.312230] loop0: p1 start 2564762831 is beyond EOD, truncated
[  347.337576] loop0: p2 start 2494347297 is beyond EOD, truncated
02:41:59 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10002)

[  347.337586] loop0: p3 start 1915790064 is beyond EOD, truncated
[  347.337593] loop0: p4 start 983213520 is beyond EOD, truncated
02:41:59 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast}, {@in=@dev, 0xfffffffd, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:41:59 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10002)

[  347.337599] loop0: p5 start 676962771 is beyond EOD, truncated
[  347.337611] loop0: p6 start 3159018777 is beyond EOD, truncated
[  347.337617] loop0: p7 start 745035705 is beyond EOD, truncated
[  347.337627] loop0: p8 start 3542136138 is beyond EOD, truncated
[  347.493178] mip6: mip6_destopt_init_state: spi is not 0: 4261412863
02:41:59 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x0)

[  347.532629] mip6: mip6_destopt_init_state: spi is not 0: 4261412863
02:42:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x100, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0x80)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r5=>0x0}, &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchown(r4, r5, r6)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x1, 0x4, 0x4, 0x2, 0xffff, {0x0, 0x2710}, {0x4, 0x8, 0x0, 0x1, 0x2, 0x8, "4e87014c"}, 0x5, 0x2, @offset=0xffffffff, 0x3f, 0x0, r3})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x401, 0x9d, 0x8001, 0x105, 0x4}})

02:42:00 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000000))

02:42:00 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x6, 0x4, 0x20, 0x2d7, 0x1f, "eb3732bac3876e7b9c82f1ca6f7f9c9e17694d", 0xbf60, 0x8})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
syz_open_procfs(r2, &(0x7f0000000000)='net/connector\x00')
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:00 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x0)

02:42:00 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0xfffffffffffffffd, 0x40010)

02:42:00 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0xffff, 0x0, 0x1, 0x10}})

[  347.759799]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  347.771983] loop0: p1 start 2564762831 is beyond EOD, truncated
[  347.778924] loop0: p2 start 2494347297 is beyond EOD, truncated
[  347.793521] loop0: p3 start 1915790064 is beyond EOD, truncated
[  347.800944] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:00 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x0)

[  347.827806] loop0: p5 start 676962771 is beyond EOD, truncated
[  347.837421] loop0: p6 start 3159018777 is beyond EOD, truncated
[  347.846083] loop0: p7 start 745035705 is beyond EOD, truncated
[  347.860770] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:00 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {<r4=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000100)={r4, 0x2})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={r4, &(0x7f0000000000)=""/6})

02:42:00 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast}, {@in=@dev, 0xfffffffd, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xffc1)
splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:00 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000040)={<r7=>0x0})
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f0000000100)={0x3, 0xa0, 0xfffffffd, 0x800, 0x9, 0xfffffffc})
ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000080)={r7, 0x3})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:00 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000300)={0x1, 0x100, 0x4, {0x81, 0x8, 0x4, 0x400}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000240)=0x1)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x40001, 0x0)
ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000180)={0x8, 0x1, &(0x7f0000000000)=[0x2], &(0x7f0000000040)=[0xd42], &(0x7f0000000100)=[0x1ff, 0x0], &(0x7f0000000140)=[0xa2, 0x4, 0x6, 0x8001, 0x80, 0x41, 0x8, 0x101, 0x1f]})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000002c0))
connect$bt_rfcomm(r6, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}, 0x3f}, 0xa)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000001c0))

02:42:00 executing program 5 (fault-call:5 fault-nth:0):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  348.006244] mip6: mip6_destopt_init_state: spi is not 0: 4261412863
[  348.108481] FAULT_INJECTION: forcing a failure.
[  348.108481] name failslab, interval 1, probability 0, space 0, times 0
[  348.150642] CPU: 1 PID: 17403 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  348.158729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  348.168089] Call Trace:
[  348.170689]  dump_stack+0x13e/0x194
[  348.174330]  should_fail.cold+0x10a/0x14b
[  348.178503]  should_failslab+0xd6/0x130
[  348.182485]  kmem_cache_alloc_trace+0x2db/0x7b0
[  348.187165]  ? save_trace+0x290/0x290
[  348.190981]  alloc_pipe_info+0xaa/0x380
[  348.195046]  splice_direct_to_actor+0x581/0x730
[  348.199725]  ? avc_policy_seqno+0x5/0x10
[  348.203832]  ? generic_pipe_buf_nosteal+0x10/0x10
[  348.208777]  ? do_splice_to+0x150/0x150
[  348.212817]  ? rw_verify_area+0xe1/0x2a0
[  348.216894]  do_splice_direct+0x164/0x210
[  348.221138]  ? splice_direct_to_actor+0x730/0x730
[  348.225997]  ? rw_verify_area+0xe1/0x2a0
[  348.230079]  do_sendfile+0x469/0xaf0
[  348.233813]  ? do_compat_pwritev64+0x140/0x140
[  348.238503]  SyS_sendfile64+0xff/0x110
[  348.242401]  ? SyS_sendfile+0x130/0x130
[  348.246411]  ? do_syscall_64+0x4c/0x640
[  348.250654]  ? SyS_sendfile+0x130/0x130
[  348.254637]  do_syscall_64+0x1d5/0x640
[  348.258545]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  348.263823] RIP: 0033:0x45c829
[  348.267010] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  348.275072] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  348.282350] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  348.289627] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
02:42:00 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)

[  348.296901] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  348.305058] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
02:42:00 executing program 5 (fault-call:5 fault-nth:1):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:42:00 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
open$dir(&(0x7f0000000080)='./file0\x00', 0x68100, 0xec)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000000c0))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
syz_open_pts(r3, 0x120000)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = dup(r2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
flock(r5, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000040)={0x6, 0x5})
ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000000))

[  348.405550] audit: type=1326 audit(1589251320.770:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17409 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0
[  348.456167] FAULT_INJECTION: forcing a failure.
[  348.456167] name failslab, interval 1, probability 0, space 0, times 0
[  348.495079] CPU: 1 PID: 17417 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  348.502989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  348.512347] Call Trace:
[  348.514950]  dump_stack+0x13e/0x194
[  348.518593]  should_fail.cold+0x10a/0x14b
[  348.522750]  should_failslab+0xd6/0x130
[  348.526728]  __kmalloc+0x2e9/0x7c0
[  348.530268]  ? kmem_cache_alloc_trace+0x63e/0x7b0
[  348.535113]  ? alloc_pipe_info+0x156/0x380
[  348.539353]  ? save_trace+0x290/0x290
[  348.543442]  alloc_pipe_info+0x156/0x380
[  348.547515]  splice_direct_to_actor+0x581/0x730
[  348.552196]  ? avc_policy_seqno+0x5/0x10
[  348.556292]  ? generic_pipe_buf_nosteal+0x10/0x10
[  348.561235]  ? do_splice_to+0x150/0x150
[  348.565221]  ? rw_verify_area+0xe1/0x2a0
[  348.569295]  do_splice_direct+0x164/0x210
[  348.573456]  ? splice_direct_to_actor+0x730/0x730
[  348.578324]  ? rw_verify_area+0xe1/0x2a0
[  348.582407]  do_sendfile+0x469/0xaf0
[  348.586142]  ? do_compat_pwritev64+0x140/0x140
[  348.590739]  SyS_sendfile64+0xff/0x110
[  348.594639]  ? SyS_sendfile+0x130/0x130
[  348.598619]  ? do_syscall_64+0x4c/0x640
[  348.602602]  ? SyS_sendfile+0x130/0x130
[  348.606591]  do_syscall_64+0x1d5/0x640
[  348.610499]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  348.615719] RIP: 0033:0x45c829
[  348.619520] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  348.627330] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  348.634609] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  348.641890] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  348.649181] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  348.656459] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
02:42:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:01 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x223a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)

02:42:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000280)={0xbc9976524cb0dfdc, 0x5, 0x1, r2, 0x0, &(0x7f0000000240)={0x0, 0x7fffffff, [], @ptr=0x9}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
unlinkat(r3, &(0x7f0000000300)='./file0\x00', 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
sendfile(r5, r1, 0x0, 0x10002)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010300000000000000e204000000"], 0x14}}, 0x0)
r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x500, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="00032cbd7000fcdbdf250800000006001d00780b00000800090002000000"], 0x71}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00')
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(0xffffffffffffffff, 0x892, &(0x7f0000000340)="677c7a41dbcdafb6c6657d7d1ed4cc8c774280a071b49a668b01fa81604e178c774f134ee72e20969bef6563583a8a5f56110bcfe1e6106a527a3783ee981f518bf2bf5332963134e96fcaeade355dbfae438be789519dcf459b97c55b021b5da198f05f93ba3db4aa568ab834ebb6b10d81af264b62ae993ffaf19bdee243129470cc3c229b9a0a4ff4bc1189aeef7ad936c5ca")

02:42:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  348.781851]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  348.802628] loop0: p1 start 2564762831 is beyond EOD, truncated
[  348.812247] loop0: p2 start 2494347297 is beyond EOD, truncated
[  348.823083] loop0: p3 start 1915790064 is beyond EOD, truncated
[  348.830516] loop0: p4 start 983213520 is beyond EOD, truncated
[  348.838916] loop0: p5 start 676962771 is beyond EOD, truncated
[  348.846420] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:01 executing program 1:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000001980))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r2, 0x45, 0xa3}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, &(0x7f0000000180)="5914e0311d91b32a10a8f8ea9162652233de0dfeff84553d971a85a513485de41eabe4193022840fdca51b53873b92335b3799df598f5fbbff92ab524669fd789e7ef62d4e", &(0x7f0000000200)="2868d18eea8a28db430dd5c418f47f2b6ae39513adc0fe1034ee02e1b48c887544e35f0870b58988183ebab05e7d2c0399e497c4b82265699125e3bd6279175717acbd07eaf21b68dee032f9d449a770a34e7df42b1d7ad69e4d19d699ef09be3d58bb7be8c012436b189410261afb5d220d5c98b85cc5471db4f870363dd6f5afb1e04412e92a927a107e007807d68d6879c84dfbd8ad58f16486994828fe6b878505")
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r1, 0x0, 0x10002)
read$eventfd(r1, 0x0, 0x0)

[  348.852642] loop0: p7 start 745035705 is beyond EOD, truncated
[  348.876008] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x800, 0x3ff, 0x1, 0x0, 0x4, 0x3, 0xfffffffb, 0x4, 0x6, 0x8, 0x3, 0x9, 0xc2b, 0x4d808000, 0x8, 0x0, {0x1ff, 0x2}, 0x6, 0x80}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:01 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'vxcan1\x00', 0x8})
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x260000)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000240)=0x7e, 0x4)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r2, 0x0, 0x10002)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0xffffffff, 0x4)
r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80, 0x2)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x1, 0x80000000, 0x9], &(0x7f0000000180)=[0x0], 0x3, 0x401, 0xcccccccc})
read$eventfd(r0, 0x0, 0x0)

02:42:01 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x80, 0x44202)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000140)={0x51, 0x2, 0xedac, {0x40, 0x8}, {0x9, 0x2}, @const={0x5, {0x7, 0x1, 0x0, 0xff}}})
sendfile(r1, r0, 0x0, 0x10002)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfff, 0x80000000, 0x1}, &(0x7f0000000080)=0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000140))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x200, 0x2, 0x80, 0xb35}, {0x9, 0x3f, 0x7, 0x8}, {0x1f, 0x99, 0x9, 0x1}, {0xcc40, 0x5, 0x3, 0x2}, {0x0, 0x3, 0x1, 0xfc0}, {0x6, 0x3, 0x0, 0x7ff}, {0x4, 0x40, 0x1, 0x5}, {0xff, 0x5, 0x8b, 0x4}, {0xff80, 0x30, 0x1, 0x2933}]}, 0x10)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r3, r4, 0x0, 0x10d24)
r5 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x7, 0x121000)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCGETD(r6, 0x5424, &(0x7f00000002c0))
accept$ax25(r2, &(0x7f0000000000)={{0x3, @default}, [@remote, @null, @rose, @rose, @netrom, @bcast, @rose, @default]}, &(0x7f0000000080)=0x48)

[  349.192112] audit: type=1326 audit(1589251321.550:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17409 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f66a code=0x0
02:42:01 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000))

02:42:01 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xffff, 0x0, 0x101}})

02:42:01 executing program 5 (fault-call:5 fault-nth:2):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:42:01 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x80000001, 0x129180)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x801)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8, 0x10001, 0x3, 0x2}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x800, 0x1, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x18}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40044080}, 0x1)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000100)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

[  349.307767]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  349.331216] loop0: p1 start 2564762831 is beyond EOD, truncated
[  349.339364] FAULT_INJECTION: forcing a failure.
[  349.339364] name failslab, interval 1, probability 0, space 0, times 0
02:42:01 executing program 5 (fault-call:5 fault-nth:3):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  349.339376] CPU: 0 PID: 17469 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.339381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
02:42:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x19, 0x7a, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r6, 0x0)
syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000480)=[{&(0x7f0000000180)="327f4911e410f2cc4cd35d84338a7edb0694101aa96c60ef1fef28b92bc4a60f93ac6df2677268ca88bfe4db8322d528dee209bea3b6097ff6c87a4648568506f38f2435baeda1a7a86a5a77634784188bc8ec9f7379b1ffe7a37255632b739006f19576c830bb66cd7f513f796d2aa0d3dbabd09034c4639ffe8c6dc7e5fb076fa9977377a713ce5ea8f8ec5364e0595086189da8aa5c", 0x97, 0x101}, {&(0x7f0000000240)="6f3caa3263564aa0b0d96f7533fa828cb9d292a324101e6424197226bf653ef71ee624e624fd264362ffdffff8e9ab5f816ae3ecbc1ba127e65ab43f2fcf9d1ced61777c094c3bfae71f1b474b978908c377a84dffe3172201ba38a6be1607cac4481c7971a255eb87a3483ac4b71191335b512a8b9d2fae0e080b4f16152a35ce2a3efd6855cd1bc1268d993addc79d559eea9050ce4b6680ba405114f64aa9305560694dceaa2826df4a088f22efcb6c8315240588bf49cf7e4d003d0c346bc31bcdc8736a595d1cc31d120ef8caf6", 0xd0, 0x8}, {&(0x7f0000000340)="b784309a374fdd9ee0738b3367c1a74462a01d680871b49ae3afd26087c533e51ff6c2b6e9f53febda0e95d9b05c2be99ab5de565ad147f31cb463dc2620a5d4144f307e62e01269b26ccb444fb24119c210b881ac8d8385605d5367e63ff2308ad1039f814564e53521cb13cf27fcb0e8d63791cb5789780ca8ef9bfcd11fbdd380f45d44f50f455f2d", 0x8a, 0x8}, {&(0x7f0000000400)="c83565ee820666e013493cce83a4bf52949e78ce8211b112f0a6ec0f304bff577a26bdd494b85a362dbd99242ba618e1af233b4324f7689d23d62ba49de79a83fe1d", 0x42, 0xee}], 0x2000000, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6f6a6f6c6965562c6f626a5f726f6c653d2f6465762f696e7075742f6576653e7423002c657569643c440ce224a5d9135d770598811f5a83bbb8d70303b48ec88c5b8bdd1b5a442fd586d22ac47de0c1d7e1dbfcfb26e359065f77bd0974ed55cf6ffad963caddf27159a7c1f5a96e4423e807d56e55d2e467dac04f9ec68416089bb97e5a2234cfeabe4870295eeb0d5571509dffeba5410b8e", @ANYRESDEC=r2, @ANYBLOB=',smackfsdef=-ppp1$.,audit,permit_directio,smackfsfloor=,fowner=', @ANYRESDEC=r4, @ANYBLOB=',obj_role=,uid=', @ANYRESDEC=r6, @ANYBLOB="1189"])
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r10 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r10, r9, 0x0, 0x10002)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)

02:42:01 executing program 5 (fault-call:5 fault-nth:4):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  349.339384] Call Trace:
[  349.339402]  dump_stack+0x13e/0x194
[  349.339419]  should_fail.cold+0x10a/0x14b
02:42:01 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x8000, &(0x7f0000000040)=0x4)

[  349.339433]  should_failslab+0xd6/0x130
[  349.339443]  kmem_cache_alloc_node_trace+0x292/0x7b0
[  349.339456]  ? lock_acquire+0x170/0x3f0
[  349.339464]  ? lock_downgrade+0x6e0/0x6e0
[  349.339474]  __kmalloc_node+0x38/0x70
[  349.339537]  kvmalloc_node+0x46/0xd0
[  349.339549]  iov_iter_get_pages_alloc+0x48c/0xe90
[  349.339560]  ? iov_iter_revert+0x980/0x980
[  349.339568]  ? iov_iter_pipe+0x93/0x2b0
[  349.339580]  default_file_splice_read+0x17c/0x870
[  349.339587]  ? save_stack+0x32/0xa0
[  349.339595]  ? kasan_kmalloc+0xbf/0xe0
[  349.339601]  ? __kmalloc+0x15b/0x7c0
[  349.339609]  ? alloc_pipe_info+0x156/0x380
02:42:02 executing program 5 (fault-call:5 fault-nth:5):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  349.339618]  ? do_sendfile+0x469/0xaf0
[  349.339626]  ? SyS_sendfile64+0xff/0x110
[  349.339634]  ? do_syscall_64+0x1d5/0x640
[  349.339647]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.339660]  ? trace_hardirqs_on+0x10/0x10
02:42:02 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x4)
read$eventfd(r0, 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4002, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)

[  349.339673]  ? fsnotify+0x897/0x1110
[  349.339689]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.339698]  ? fsnotify+0x1110/0x1110
[  349.339710]  ? __inode_security_revalidate+0xcf/0x120
[  349.339718]  ? avc_policy_seqno+0x5/0x10
[  349.339727]  ? selinux_file_permission+0x7a/0x440
[  349.339739]  ? security_file_permission+0x82/0x1e0
[  349.339749]  ? rw_verify_area+0xe1/0x2a0
02:42:02 executing program 5 (fault-call:5 fault-nth:6):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  349.339759]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.339769]  do_splice_to+0xfb/0x150
[  349.339776]  ? alloc_pipe_info+0x2dc/0x380
[  349.339787]  splice_direct_to_actor+0x20a/0x730
[  349.339798]  ? generic_pipe_buf_nosteal+0x10/0x10
02:42:02 executing program 5 (fault-call:5 fault-nth:7):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  349.339810]  ? do_splice_to+0x150/0x150
[  349.339821]  ? rw_verify_area+0xe1/0x2a0
[  349.339831]  do_splice_direct+0x164/0x210
[  349.339842]  ? splice_direct_to_actor+0x730/0x730
[  349.339857]  ? rw_verify_area+0xe1/0x2a0
[  349.339868]  do_sendfile+0x469/0xaf0
[  349.339884]  ? do_compat_pwritev64+0x140/0x140
[  349.339899]  SyS_sendfile64+0xff/0x110
[  349.339907]  ? SyS_sendfile+0x130/0x130
[  349.339916]  ? do_syscall_64+0x4c/0x640
[  349.339924]  ? SyS_sendfile+0x130/0x130
[  349.339934]  do_syscall_64+0x1d5/0x640
[  349.339948]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.339956] RIP: 0033:0x45c829
[  349.339969] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.339980] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.339984] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.339989] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.339994] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.340000] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  349.360747] loop0: p2 start 2494347297 is beyond EOD, truncated
[  349.360756] loop0: p3 start 1915790064 is beyond EOD, truncated
[  349.360763] loop0: p4 start 983213520 is beyond EOD, truncated
[  349.360769] loop0: p5 start 676962771 is beyond EOD, truncated
[  349.360776] loop0: p6 start 3159018777 is beyond EOD, truncated
[  349.360782] loop0: p7 start 745035705 is beyond EOD, truncated
[  349.360788] loop0: p8 start 3542136138 is beyond EOD, truncated
[  349.445169] FAULT_INJECTION: forcing a failure.
[  349.445169] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.445182] CPU: 1 PID: 17476 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.445188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  349.445192] Call Trace:
[  349.445209]  dump_stack+0x13e/0x194
[  349.445225]  should_fail.cold+0x10a/0x14b
[  349.445240]  __alloc_pages_nodemask+0x1bf/0x700
[  349.445250]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  349.445263]  ? __kmalloc_node+0x38/0x70
[  349.445328]  ? rcu_read_lock_sched_held+0x10a/0x130
[  349.445337]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  349.445349]  alloc_pages_current+0xe7/0x1e0
[  349.445364]  push_pipe+0x3bf/0x730
[  349.445380]  iov_iter_get_pages_alloc+0x4da/0xe90
[  349.445393]  ? iov_iter_revert+0x980/0x980
[  349.445402]  ? iov_iter_pipe+0x93/0x2b0
[  349.445414]  default_file_splice_read+0x17c/0x870
[  349.445421]  ? save_stack+0x32/0xa0
[  349.445428]  ? kasan_kmalloc+0xbf/0xe0
[  349.445435]  ? __kmalloc+0x15b/0x7c0
[  349.445441]  ? alloc_pipe_info+0x156/0x380
[  349.445459]  ? do_sendfile+0x469/0xaf0
[  349.445467]  ? SyS_sendfile64+0xff/0x110
[  349.445479]  ? do_syscall_64+0x1d5/0x640
[  349.445493]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.445511]  ? trace_hardirqs_on+0x10/0x10
[  349.445524]  ? fsnotify+0x897/0x1110
[  349.445541]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.445551]  ? fsnotify+0x1110/0x1110
[  349.445564]  ? __inode_security_revalidate+0xcf/0x120
[  349.445573]  ? avc_policy_seqno+0x5/0x10
[  349.445582]  ? selinux_file_permission+0x7a/0x440
[  349.445594]  ? security_file_permission+0x82/0x1e0
[  349.445606]  ? rw_verify_area+0xe1/0x2a0
[  349.445615]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.445624]  do_splice_to+0xfb/0x150
[  349.445632]  ? alloc_pipe_info+0x2dc/0x380
[  349.445644]  splice_direct_to_actor+0x20a/0x730
[  349.445656]  ? generic_pipe_buf_nosteal+0x10/0x10
[  349.445668]  ? do_splice_to+0x150/0x150
[  349.445679]  ? rw_verify_area+0xe1/0x2a0
[  349.445690]  do_splice_direct+0x164/0x210
[  349.445701]  ? splice_direct_to_actor+0x730/0x730
[  349.445717]  ? rw_verify_area+0xe1/0x2a0
[  349.445730]  do_sendfile+0x469/0xaf0
[  349.445746]  ? do_compat_pwritev64+0x140/0x140
[  349.445762]  SyS_sendfile64+0xff/0x110
[  349.445771]  ? SyS_sendfile+0x130/0x130
[  349.445781]  ? do_syscall_64+0x4c/0x640
[  349.445789]  ? SyS_sendfile+0x130/0x130
[  349.445800]  do_syscall_64+0x1d5/0x640
[  349.445816]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.445824] RIP: 0033:0x45c829
[  349.445829] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.445840] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.445846] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.445852] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.445857] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.445863] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  349.598984] FAULT_INJECTION: forcing a failure.
[  349.598984] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.598996] CPU: 0 PID: 17485 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.599002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  349.599006] Call Trace:
[  349.599021]  dump_stack+0x13e/0x194
[  349.599038]  should_fail.cold+0x10a/0x14b
[  349.599052]  __alloc_pages_nodemask+0x1bf/0x700
[  349.599064]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  349.599077]  ? __kmalloc_node+0x38/0x70
[  349.599088]  ? rcu_read_lock_sched_held+0x10a/0x130
[  349.599097]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  349.599109]  alloc_pages_current+0xe7/0x1e0
[  349.599119]  push_pipe+0x3bf/0x730
[  349.599133]  iov_iter_get_pages_alloc+0x4da/0xe90
[  349.599147]  ? iov_iter_revert+0x980/0x980
[  349.599156]  ? iov_iter_pipe+0x93/0x2b0
[  349.599169]  default_file_splice_read+0x17c/0x870
[  349.599176]  ? save_stack+0x32/0xa0
[  349.599182]  ? kasan_kmalloc+0xbf/0xe0
[  349.599189]  ? __kmalloc+0x15b/0x7c0
[  349.599196]  ? alloc_pipe_info+0x156/0x380
[  349.599207]  ? do_sendfile+0x469/0xaf0
[  349.599214]  ? SyS_sendfile64+0xff/0x110
[  349.599222]  ? do_syscall_64+0x1d5/0x640
[  349.599235]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.599250]  ? trace_hardirqs_on+0x10/0x10
[  349.599263]  ? fsnotify+0x897/0x1110
[  349.599280]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.599288]  ? fsnotify+0x1110/0x1110
[  349.599300]  ? __inode_security_revalidate+0xcf/0x120
[  349.599308]  ? avc_policy_seqno+0x5/0x10
[  349.599316]  ? selinux_file_permission+0x7a/0x440
[  349.599327]  ? security_file_permission+0x82/0x1e0
[  349.599338]  ? rw_verify_area+0xe1/0x2a0
[  349.599347]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.599357]  do_splice_to+0xfb/0x150
[  349.599364]  ? alloc_pipe_info+0x2dc/0x380
[  349.599374]  splice_direct_to_actor+0x20a/0x730
[  349.599385]  ? generic_pipe_buf_nosteal+0x10/0x10
[  349.599395]  ? do_splice_to+0x150/0x150
[  349.599405]  ? rw_verify_area+0xe1/0x2a0
[  349.599415]  do_splice_direct+0x164/0x210
[  349.599426]  ? splice_direct_to_actor+0x730/0x730
[  349.599441]  ? rw_verify_area+0xe1/0x2a0
[  349.599451]  do_sendfile+0x469/0xaf0
[  349.599467]  ? do_compat_pwritev64+0x140/0x140
[  349.599481]  SyS_sendfile64+0xff/0x110
[  349.599490]  ? SyS_sendfile+0x130/0x130
[  349.599500]  ? do_syscall_64+0x4c/0x640
[  349.599508]  ? SyS_sendfile+0x130/0x130
[  349.599519]  do_syscall_64+0x1d5/0x640
[  349.599535]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.599542] RIP: 0033:0x45c829
[  349.599547] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.599558] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.599564] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.599569] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.599575] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.599581] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  349.733058] FAULT_INJECTION: forcing a failure.
[  349.733058] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.733070] CPU: 1 PID: 17494 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.733077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  349.733080] Call Trace:
[  349.733099]  dump_stack+0x13e/0x194
[  349.733116]  should_fail.cold+0x10a/0x14b
[  349.733128]  __alloc_pages_nodemask+0x1bf/0x700
[  349.733140]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  349.733151]  ? __kmalloc_node+0x38/0x70
[  349.733161]  ? rcu_read_lock_sched_held+0x10a/0x130
[  349.733169]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  349.733180]  alloc_pages_current+0xe7/0x1e0
[  349.733189]  push_pipe+0x3bf/0x730
[  349.733203]  iov_iter_get_pages_alloc+0x4da/0xe90
[  349.733216]  ? iov_iter_revert+0x980/0x980
[  349.733225]  ? iov_iter_pipe+0x93/0x2b0
[  349.733239]  default_file_splice_read+0x17c/0x870
[  349.733247]  ? save_stack+0x32/0xa0
[  349.733253]  ? kasan_kmalloc+0xbf/0xe0
[  349.733260]  ? __kmalloc+0x15b/0x7c0
[  349.733267]  ? alloc_pipe_info+0x156/0x380
[  349.733277]  ? do_sendfile+0x469/0xaf0
[  349.733284]  ? SyS_sendfile64+0xff/0x110
[  349.733294]  ? do_syscall_64+0x1d5/0x640
[  349.733307]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.733322]  ? trace_hardirqs_on+0x10/0x10
[  349.733336]  ? fsnotify+0x897/0x1110
[  349.733355]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.733365]  ? fsnotify+0x1110/0x1110
[  349.733377]  ? __inode_security_revalidate+0xcf/0x120
[  349.733385]  ? avc_policy_seqno+0x5/0x10
[  349.733394]  ? selinux_file_permission+0x7a/0x440
[  349.733406]  ? security_file_permission+0x82/0x1e0
[  349.733417]  ? rw_verify_area+0xe1/0x2a0
[  349.733426]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.733435]  do_splice_to+0xfb/0x150
[  349.733442]  ? alloc_pipe_info+0x2dc/0x380
[  349.733453]  splice_direct_to_actor+0x20a/0x730
[  349.733464]  ? generic_pipe_buf_nosteal+0x10/0x10
[  349.733475]  ? do_splice_to+0x150/0x150
[  349.733485]  ? rw_verify_area+0xe1/0x2a0
[  349.733495]  do_splice_direct+0x164/0x210
[  349.733505]  ? splice_direct_to_actor+0x730/0x730
[  349.733520]  ? rw_verify_area+0xe1/0x2a0
[  349.733532]  do_sendfile+0x469/0xaf0
[  349.733548]  ? do_compat_pwritev64+0x140/0x140
[  349.733564]  SyS_sendfile64+0xff/0x110
[  349.733573]  ? SyS_sendfile+0x130/0x130
[  349.733583]  ? do_syscall_64+0x4c/0x640
[  349.733592]  ? SyS_sendfile+0x130/0x130
[  349.733602]  do_syscall_64+0x1d5/0x640
[  349.733617]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.733625] RIP: 0033:0x45c829
[  349.733630] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.733640] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.733646] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.733651] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.733658] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.733664] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  349.847578] FAULT_INJECTION: forcing a failure.
[  349.847578] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.847589] CPU: 1 PID: 17501 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.847595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  349.847599] Call Trace:
[  349.847614]  dump_stack+0x13e/0x194
[  349.847630]  should_fail.cold+0x10a/0x14b
[  349.847644]  __alloc_pages_nodemask+0x1bf/0x700
[  349.847655]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  349.847668]  ? __kmalloc_node+0x38/0x70
[  349.847677]  ? rcu_read_lock_sched_held+0x10a/0x130
[  349.847686]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  349.847699]  alloc_pages_current+0xe7/0x1e0
[  349.847710]  push_pipe+0x3bf/0x730
[  349.847724]  iov_iter_get_pages_alloc+0x4da/0xe90
[  349.847737]  ? iov_iter_revert+0x980/0x980
[  349.847745]  ? iov_iter_pipe+0x93/0x2b0
[  349.847759]  default_file_splice_read+0x17c/0x870
[  349.847766]  ? save_stack+0x32/0xa0
[  349.847773]  ? kasan_kmalloc+0xbf/0xe0
[  349.847780]  ? __kmalloc+0x15b/0x7c0
[  349.847787]  ? alloc_pipe_info+0x156/0x380
[  349.847798]  ? do_sendfile+0x469/0xaf0
[  349.847805]  ? SyS_sendfile64+0xff/0x110
[  349.847814]  ? do_syscall_64+0x1d5/0x640
[  349.847826]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.847840]  ? trace_hardirqs_on+0x10/0x10
[  349.847854]  ? fsnotify+0x897/0x1110
[  349.847871]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.847880]  ? fsnotify+0x1110/0x1110
[  349.847893]  ? __inode_security_revalidate+0xcf/0x120
[  349.847901]  ? avc_policy_seqno+0x5/0x10
[  349.847910]  ? selinux_file_permission+0x7a/0x440
[  349.847921]  ? security_file_permission+0x82/0x1e0
[  349.847932]  ? rw_verify_area+0xe1/0x2a0
[  349.847940]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.847950]  do_splice_to+0xfb/0x150
[  349.847957]  ? alloc_pipe_info+0x2dc/0x380
[  349.847969]  splice_direct_to_actor+0x20a/0x730
[  349.847980]  ? generic_pipe_buf_nosteal+0x10/0x10
[  349.847991]  ? do_splice_to+0x150/0x150
[  349.848002]  ? rw_verify_area+0xe1/0x2a0
[  349.848012]  do_splice_direct+0x164/0x210
[  349.848023]  ? splice_direct_to_actor+0x730/0x730
[  349.848038]  ? rw_verify_area+0xe1/0x2a0
[  349.848049]  do_sendfile+0x469/0xaf0
[  349.848065]  ? do_compat_pwritev64+0x140/0x140
[  349.848079]  SyS_sendfile64+0xff/0x110
[  349.848088]  ? SyS_sendfile+0x130/0x130
[  349.848097]  ? do_syscall_64+0x4c/0x640
[  349.848104]  ? SyS_sendfile+0x130/0x130
[  349.848114]  do_syscall_64+0x1d5/0x640
[  349.848128]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.848136] RIP: 0033:0x45c829
[  349.848141] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.848151] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.848157] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.848162] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.848168] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.848174] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  349.958620] FAULT_INJECTION: forcing a failure.
[  349.958620] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.958633] CPU: 1 PID: 17507 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  349.958639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  349.958642] Call Trace:
[  349.958657]  dump_stack+0x13e/0x194
[  349.958672]  should_fail.cold+0x10a/0x14b
[  349.958686]  __alloc_pages_nodemask+0x1bf/0x700
[  349.958699]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  349.958719]  ? __kmalloc_node+0x38/0x70
[  349.958730]  ? rcu_read_lock_sched_held+0x10a/0x130
[  349.958738]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  349.958749]  alloc_pages_current+0xe7/0x1e0
[  349.958759]  push_pipe+0x3bf/0x730
[  349.958773]  iov_iter_get_pages_alloc+0x4da/0xe90
[  349.958786]  ? iov_iter_revert+0x980/0x980
[  349.958794]  ? iov_iter_pipe+0x93/0x2b0
[  349.958807]  default_file_splice_read+0x17c/0x870
[  349.958814]  ? save_stack+0x32/0xa0
[  349.958821]  ? kasan_kmalloc+0xbf/0xe0
[  349.958828]  ? __kmalloc+0x15b/0x7c0
[  349.958836]  ? alloc_pipe_info+0x156/0x380
[  349.958846]  ? do_sendfile+0x469/0xaf0
[  349.958854]  ? SyS_sendfile64+0xff/0x110
[  349.958863]  ? do_syscall_64+0x1d5/0x640
[  349.958875]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.958890]  ? trace_hardirqs_on+0x10/0x10
[  349.958904]  ? fsnotify+0x897/0x1110
[  349.958922]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  349.958932]  ? fsnotify+0x1110/0x1110
[  349.958946]  ? __inode_security_revalidate+0xcf/0x120
[  349.958956]  ? avc_policy_seqno+0x5/0x10
[  349.958965]  ? selinux_file_permission+0x7a/0x440
[  349.958977]  ? security_file_permission+0x82/0x1e0
[  349.958989]  ? rw_verify_area+0xe1/0x2a0
[  349.958998]  ? page_cache_pipe_buf_release+0x210/0x210
[  349.959007]  do_splice_to+0xfb/0x150
[  349.959014]  ? alloc_pipe_info+0x2dc/0x380
[  349.959026]  splice_direct_to_actor+0x20a/0x730
[  349.959038]  ? generic_pipe_buf_nosteal+0x10/0x10
[  349.959049]  ? do_splice_to+0x150/0x150
[  349.959059]  ? rw_verify_area+0xe1/0x2a0
[  349.959069]  do_splice_direct+0x164/0x210
[  349.959080]  ? splice_direct_to_actor+0x730/0x730
[  349.959096]  ? rw_verify_area+0xe1/0x2a0
[  349.959108]  do_sendfile+0x469/0xaf0
[  349.959125]  ? do_compat_pwritev64+0x140/0x140
[  349.959141]  SyS_sendfile64+0xff/0x110
[  349.959151]  ? SyS_sendfile+0x130/0x130
[  349.959161]  ? do_syscall_64+0x4c/0x640
[  349.959169]  ? SyS_sendfile+0x130/0x130
[  349.959187]  do_syscall_64+0x1d5/0x640
[  349.959204]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  349.959220] RIP: 0033:0x45c829
[  349.959226] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  349.959237] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  349.959243] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  349.959249] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  349.959255] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  349.959262] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
02:42:04 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4a4180, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0x7f, 0x0, 0x1011, 0x0, 0x0, {0x3f}})
ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000040)={0x1, 0x9, 0x17, 0x1, 0x1})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3d, 0x0, 0x0, 0x101}})

02:42:04 executing program 5 (fault-call:5 fault-nth:8):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:42:04 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x20, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000840}, 0x240440c4)

02:42:04 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000e7300000000000000dbdf2508003c0000000000080003000300000008003c400400000008003c00000000000800030000000000080003000200000008003c00020000000800030001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'team_slave_1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x77359400}})

02:42:04 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  352.221501] FAULT_INJECTION: forcing a failure.
[  352.221501] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  352.282127]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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")
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  352.297485] CPU: 1 PID: 17527 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  352.297493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.297497] Call Trace:
[  352.297516]  dump_stack+0x13e/0x194
[  352.297533]  should_fail.cold+0x10a/0x14b
[  352.297547]  __alloc_pages_nodemask+0x1bf/0x700
[  352.297559]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  352.297573]  ? __kmalloc_node+0x38/0x70
[  352.297586]  ? rcu_read_lock_sched_held+0x10a/0x130
[  352.297596]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  352.297608]  alloc_pages_current+0xe7/0x1e0
[  352.297620]  push_pipe+0x3bf/0x730
[  352.297636]  iov_iter_get_pages_alloc+0x4da/0xe90
[  352.297659]  ? iov_iter_revert+0x980/0x980
[  352.297668]  ? iov_iter_pipe+0x93/0x2b0
[  352.297687]  default_file_splice_read+0x17c/0x870
[  352.297698]  ? save_stack+0x32/0xa0
[  352.297706]  ? kasan_kmalloc+0xbf/0xe0
[  352.297714]  ? __kmalloc+0x15b/0x7c0
[  352.297722]  ? alloc_pipe_info+0x156/0x380
[  352.297733]  ? do_sendfile+0x469/0xaf0
[  352.297741]  ? SyS_sendfile64+0xff/0x110
[  352.297750]  ? do_syscall_64+0x1d5/0x640
[  352.297763]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.297778]  ? trace_hardirqs_on+0x10/0x10
[  352.297793]  ? fsnotify+0x897/0x1110
[  352.297811]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  352.297821]  ? fsnotify+0x1110/0x1110
[  352.297835]  ? __inode_security_revalidate+0xcf/0x120
[  352.297844]  ? avc_policy_seqno+0x5/0x10
[  352.297854]  ? selinux_file_permission+0x7a/0x440
[  352.297866]  ? security_file_permission+0x82/0x1e0
[  352.297878]  ? rw_verify_area+0xe1/0x2a0
[  352.297887]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.297896]  do_splice_to+0xfb/0x150
[  352.297904]  ? alloc_pipe_info+0x2dc/0x380
[  352.297916]  splice_direct_to_actor+0x20a/0x730
[  352.297928]  ? generic_pipe_buf_nosteal+0x10/0x10
[  352.297939]  ? do_splice_to+0x150/0x150
[  352.297950]  ? rw_verify_area+0xe1/0x2a0
[  352.297961]  do_splice_direct+0x164/0x210
[  352.297972]  ? splice_direct_to_actor+0x730/0x730
[  352.297989]  ? rw_verify_area+0xe1/0x2a0
[  352.298001]  do_sendfile+0x469/0xaf0
[  352.298016]  ? do_compat_pwritev64+0x140/0x140
[  352.298030]  SyS_sendfile64+0xff/0x110
[  352.298038]  ? SyS_sendfile+0x130/0x130
[  352.298046]  ? do_syscall_64+0x4c/0x640
[  352.298053]  ? SyS_sendfile+0x130/0x130
[  352.298063]  do_syscall_64+0x1d5/0x640
[  352.298079]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  352.298086] RIP: 0033:0x45c829
[  352.298091] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  352.298100] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  352.298105] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  352.298110] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  352.298116] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  352.298120] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  352.307161] loop0: p1 start 2564762831 is beyond EOD, truncated
[  352.582907] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:05 executing program 5 (fault-call:5 fault-nth:9):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  352.603019] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:05 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x2)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000040)={0x5c, 0x7})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:05 executing program 5 (fault-call:5 fault-nth:10):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  352.603029] loop0: p4 start 983213520 is beyond EOD, truncated
[  352.603036] loop0: p5 start 676962771 is beyond EOD, truncated
[  352.603042] loop0: p6 start 3159018777 is beyond EOD, truncated
[  352.603048] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:05 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x6, 0x21a01)
open(&(0x7f0000000000)='./file0\x00', 0x10001, 0x8)
sendfile(r1, r0, 0x0, 0x10002)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10)
read$eventfd(r0, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
io_submit(r3, 0x3, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000180)="39c4e4c265dbf258d7de6dead268eef89e266ea0f561e7f4b6f8f10fe143f38b47a5544d7fc6ea959d7fdc8c318247d3be29d32c1136761b3d3ae66d48e2105fff2af2a098c0", 0x46, 0x6, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000240)="71be38c699631e6a33c7eaa6c003c9a19509b9944245153365918ad595d3f487ba1aec0aa2b560109f07bfe73ca2668971b121d80ae5ec0872156caacdbca659a4e89c901d023c78c598c2308055fe175b2a46a39c88d8f511f7defe400f4bf74c1bae51132b7470b2", 0x69, 0x6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1ff, r1, &(0x7f0000000300)="2d65ce96b448175c51238771d3e222d604ab9ea56d977d52367f110fda581d15213c54d1c5e0c9b8998a6344943ec7e98ffdd12ce694e2423ff4fd00966dc070ac4d4a712f2d38424f4f3a35cc9dfacee93fa955d42b5413dd197f7cd9d7d9fd3fb24d6102b5ac8e28cc207b155ab3e25a5b3840c27354eb64fff0a56cf9c0beffb2d9e5530a06055f745c4707c2526099037640165fa1f78ef1adc8621842947f547dd5e5dad07e6185bf593177a8bb7ba38be000c106f01bebdd8c28e79f3b3b2bd76d3465d9c92f00a88af91baf4c85ec307e070f7afb8778cf2e70", 0xdd, 0x7fff, 0x0, 0x5}])
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r2, 0x0, 0x10002)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0xffffffffffffffff)

[  352.603054] loop0: p8 start 3542136138 is beyond EOD, truncated
[  352.677459] FAULT_INJECTION: forcing a failure.
[  352.677459] name fail_page_alloc, interval 1, probability 0, space 0, times 0
02:42:05 executing program 5 (fault-call:5 fault-nth:11):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  352.677471] CPU: 1 PID: 17552 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  352.677477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.677480] Call Trace:
[  352.677495]  dump_stack+0x13e/0x194
[  352.677511]  should_fail.cold+0x10a/0x14b
[  352.677524]  __alloc_pages_nodemask+0x1bf/0x700
[  352.677536]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  352.677548]  ? __kmalloc_node+0x38/0x70
[  352.677558]  ? rcu_read_lock_sched_held+0x10a/0x130
[  352.677566]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  352.677578]  alloc_pages_current+0xe7/0x1e0
02:42:05 executing program 5 (fault-call:5 fault-nth:12):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  352.677588]  push_pipe+0x3bf/0x730
[  352.677602]  iov_iter_get_pages_alloc+0x4da/0xe90
[  352.677614]  ? iov_iter_revert+0x980/0x980
[  352.677623]  ? iov_iter_pipe+0x93/0x2b0
[  352.677637]  default_file_splice_read+0x17c/0x870
[  352.677644]  ? save_stack+0x32/0xa0
[  352.677652]  ? kasan_kmalloc+0xbf/0xe0
[  352.677659]  ? __kmalloc+0x15b/0x7c0
[  352.677666]  ? alloc_pipe_info+0x156/0x380
[  352.677676]  ? do_sendfile+0x469/0xaf0
[  352.677684]  ? SyS_sendfile64+0xff/0x110
[  352.677693]  ? do_syscall_64+0x1d5/0x640
[  352.677706]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.677719]  ? trace_hardirqs_on+0x10/0x10
[  352.677733]  ? fsnotify+0x897/0x1110
[  352.677751]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  352.677761]  ? fsnotify+0x1110/0x1110
[  352.677775]  ? __inode_security_revalidate+0xcf/0x120
[  352.677784]  ? avc_policy_seqno+0x5/0x10
[  352.677792]  ? selinux_file_permission+0x7a/0x440
[  352.677804]  ? security_file_permission+0x82/0x1e0
[  352.677816]  ? rw_verify_area+0xe1/0x2a0
[  352.677824]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.677834]  do_splice_to+0xfb/0x150
[  352.677841]  ? alloc_pipe_info+0x2dc/0x380
[  352.677853]  splice_direct_to_actor+0x20a/0x730
[  352.677864]  ? generic_pipe_buf_nosteal+0x10/0x10
[  352.677876]  ? do_splice_to+0x150/0x150
[  352.677887]  ? rw_verify_area+0xe1/0x2a0
[  352.677898]  do_splice_direct+0x164/0x210
[  352.677909]  ? splice_direct_to_actor+0x730/0x730
[  352.677924]  ? rw_verify_area+0xe1/0x2a0
[  352.677936]  do_sendfile+0x469/0xaf0
[  352.677953]  ? do_compat_pwritev64+0x140/0x140
[  352.677967]  SyS_sendfile64+0xff/0x110
[  352.677975]  ? SyS_sendfile+0x130/0x130
[  352.677985]  ? do_syscall_64+0x4c/0x640
[  352.677992]  ? SyS_sendfile+0x130/0x130
[  352.678002]  do_syscall_64+0x1d5/0x640
[  352.678018]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  352.678026] RIP: 0033:0x45c829
[  352.678031] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  352.678042] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  352.678047] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  352.678052] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  352.678058] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  352.678064] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  352.820382] FAULT_INJECTION: forcing a failure.
[  352.820382] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  352.820394] CPU: 1 PID: 17560 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  352.820399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.820403] Call Trace:
[  352.820419]  dump_stack+0x13e/0x194
[  352.820436]  should_fail.cold+0x10a/0x14b
[  352.820449]  __alloc_pages_nodemask+0x1bf/0x700
[  352.820462]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  352.820474]  ? __kmalloc_node+0x38/0x70
[  352.820485]  ? rcu_read_lock_sched_held+0x10a/0x130
[  352.820493]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  352.820504]  alloc_pages_current+0xe7/0x1e0
[  352.820515]  push_pipe+0x3bf/0x730
[  352.820529]  iov_iter_get_pages_alloc+0x4da/0xe90
[  352.820543]  ? iov_iter_revert+0x980/0x980
[  352.820551]  ? iov_iter_pipe+0x93/0x2b0
[  352.820563]  default_file_splice_read+0x17c/0x870
[  352.820571]  ? save_stack+0x32/0xa0
[  352.820578]  ? kasan_kmalloc+0xbf/0xe0
[  352.820585]  ? __kmalloc+0x15b/0x7c0
[  352.820592]  ? alloc_pipe_info+0x156/0x380
[  352.820602]  ? do_sendfile+0x469/0xaf0
[  352.820609]  ? SyS_sendfile64+0xff/0x110
[  352.820618]  ? do_syscall_64+0x1d5/0x640
[  352.820630]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.820645]  ? trace_hardirqs_on+0x10/0x10
[  352.820658]  ? fsnotify+0x897/0x1110
[  352.820676]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  352.820685]  ? fsnotify+0x1110/0x1110
[  352.820698]  ? __inode_security_revalidate+0xcf/0x120
[  352.820707]  ? avc_policy_seqno+0x5/0x10
[  352.820716]  ? selinux_file_permission+0x7a/0x440
[  352.820728]  ? security_file_permission+0x82/0x1e0
[  352.820739]  ? rw_verify_area+0xe1/0x2a0
[  352.820748]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.820757]  do_splice_to+0xfb/0x150
[  352.820765]  ? alloc_pipe_info+0x2dc/0x380
[  352.820776]  splice_direct_to_actor+0x20a/0x730
[  352.820788]  ? generic_pipe_buf_nosteal+0x10/0x10
[  352.820799]  ? do_splice_to+0x150/0x150
[  352.820809]  ? rw_verify_area+0xe1/0x2a0
[  352.820820]  do_splice_direct+0x164/0x210
[  352.820830]  ? splice_direct_to_actor+0x730/0x730
[  352.820845]  ? rw_verify_area+0xe1/0x2a0
[  352.820856]  do_sendfile+0x469/0xaf0
[  352.820872]  ? do_compat_pwritev64+0x140/0x140
[  352.820886]  SyS_sendfile64+0xff/0x110
[  352.820895]  ? SyS_sendfile+0x130/0x130
[  352.820904]  ? do_syscall_64+0x4c/0x640
[  352.820911]  ? SyS_sendfile+0x130/0x130
[  352.820921]  do_syscall_64+0x1d5/0x640
[  352.820936]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  352.820943] RIP: 0033:0x45c829
[  352.820956] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  352.820968] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  352.820974] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  352.820979] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  352.820985] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  352.820990] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  352.917651] FAULT_INJECTION: forcing a failure.
[  352.917651] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  352.917664] CPU: 1 PID: 17566 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  352.917671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.917675] Call Trace:
[  352.917690]  dump_stack+0x13e/0x194
[  352.917708]  should_fail.cold+0x10a/0x14b
[  352.917723]  __alloc_pages_nodemask+0x1bf/0x700
[  352.917736]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  352.917749]  ? __kmalloc_node+0x38/0x70
[  352.917761]  ? rcu_read_lock_sched_held+0x10a/0x130
[  352.917770]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  352.917783]  alloc_pages_current+0xe7/0x1e0
[  352.917795]  push_pipe+0x3bf/0x730
[  352.917808]  iov_iter_get_pages_alloc+0x4da/0xe90
[  352.917821]  ? iov_iter_revert+0x980/0x980
[  352.917830]  ? iov_iter_pipe+0x93/0x2b0
[  352.917844]  default_file_splice_read+0x17c/0x870
[  352.917851]  ? save_stack+0x32/0xa0
[  352.917859]  ? kasan_kmalloc+0xbf/0xe0
[  352.917865]  ? __kmalloc+0x15b/0x7c0
[  352.917873]  ? alloc_pipe_info+0x156/0x380
[  352.917883]  ? do_sendfile+0x469/0xaf0
[  352.917890]  ? SyS_sendfile64+0xff/0x110
[  352.917899]  ? do_syscall_64+0x1d5/0x640
[  352.917911]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.917925]  ? trace_hardirqs_on+0x10/0x10
[  352.917939]  ? fsnotify+0x897/0x1110
[  352.917956]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  352.917966]  ? fsnotify+0x1110/0x1110
[  352.917979]  ? __inode_security_revalidate+0xcf/0x120
[  352.917987]  ? avc_policy_seqno+0x5/0x10
[  352.917996]  ? selinux_file_permission+0x7a/0x440
[  352.918008]  ? security_file_permission+0x82/0x1e0
[  352.918028]  ? rw_verify_area+0xe1/0x2a0
[  352.918038]  ? page_cache_pipe_buf_release+0x210/0x210
[  352.918049]  do_splice_to+0xfb/0x150
[  352.918057]  ? alloc_pipe_info+0x2dc/0x380
[  352.918070]  splice_direct_to_actor+0x20a/0x730
[  352.918081]  ? generic_pipe_buf_nosteal+0x10/0x10
[  352.918093]  ? do_splice_to+0x150/0x150
[  352.918103]  ? rw_verify_area+0xe1/0x2a0
[  352.918114]  do_splice_direct+0x164/0x210
[  352.918124]  ? splice_direct_to_actor+0x730/0x730
[  352.918143]  ? rw_verify_area+0xe1/0x2a0
[  352.918155]  do_sendfile+0x469/0xaf0
[  352.918170]  ? do_compat_pwritev64+0x140/0x140
[  352.918186]  SyS_sendfile64+0xff/0x110
[  352.918194]  ? SyS_sendfile+0x130/0x130
[  352.918203]  ? do_syscall_64+0x4c/0x640
[  352.918211]  ? SyS_sendfile+0x130/0x130
[  352.918220]  do_syscall_64+0x1d5/0x640
[  352.918235]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  352.918243] RIP: 0033:0x45c829
[  352.918248] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  352.918259] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  352.918264] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  352.918270] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  352.918276] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  352.918282] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
[  353.035144] FAULT_INJECTION: forcing a failure.
02:42:06 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x4080, 0x0)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000001c0)={0x0, 0x0, 0x1007, 0x1})
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)={0x8, 0x98, [{0x9, 0x0, 0x3}, {0x7ff, 0x0, 0x10001}, {0x800}, {0x81, 0x0, 0x9}, {0x5, 0x0, 0x80000001}, {0x6, 0x0, 0x6}, {0x1f, 0x0, 0x7}, {0x100, 0x0, 0x8}]})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x7fff, 0x1, 0x401, 0x40})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140))
syz_open_dev$tty1(0xc, 0x4, 0x3)

02:42:06 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0xfff, 0x26080)
sendfile(r1, r0, 0x0, 0x10002)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0xb, 0x4, 0xe000, 0x7, {}, {0x4, 0x0, 0x5, 0x1, 0x7, 0x7, "0600"}, 0xfc, 0x2, @userptr=0x100000001, 0x33e1879d, 0x0, r2})
r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x916, 0x410040)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20102, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000180)={0x33, 0x3, 0x0, {0x2, 0x12, 0x0, '/dev/input/event#\x00'}}, 0x33)
ioctl$TIOCNXCL(r2, 0x540d)

[  353.035144] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  353.840921] CPU: 0 PID: 17572 Comm: syz-executor.5 Not tainted 4.14.180-syzkaller #0
[  353.840927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  353.840931] Call Trace:
[  353.840949]  dump_stack+0x13e/0x194
[  353.840966]  should_fail.cold+0x10a/0x14b
[  353.840979]  __alloc_pages_nodemask+0x1bf/0x700
[  353.840991]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  353.841003]  ? __kmalloc_node+0x38/0x70
[  353.841013]  ? rcu_read_lock_sched_held+0x10a/0x130
[  353.841021]  ? kmem_cache_alloc_node_trace+0x38c/0x7b0
[  353.841033]  alloc_pages_current+0xe7/0x1e0
02:42:06 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r2)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc, &(0x7f0000000d80)=[{&(0x7f0000000e40)={0x42c, 0x38, 0x1, 0x70bd27, 0x25dfdbfe, "", [@nested={0x241, 0x11, 0x0, 0x1, [@generic="3adc334b6fc7dfa3a753fd2a86a194a01369cd9cf21d492cc2e63e9997896872ef8dca8a20f3c712e6a6e825bbef9c5e634df878edbd04592061af1f26ab72740023dcc0b1dfabcc767db0af4d05d31cf9518f7fe14f82be1ec9a899276d04cf74d156db52e7085651923fc9b28cb69e63d8", @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@remote}, @generic="0833528f06b0db509ed24d", @typed={0xc6, 0x8b, 0x0, 0x0, @binary="2a39c40eaeab77a84ffb60e797de70b99bcb2307d8312152947de8f2e99236278e4fb5c3729e72dacf240af9e5305b9036c3acebc84327830663e1c5cca53de7bb4c4aeb079df5bf50a79565f799ba08ac17357e18718afca56432f909289e7ef5d951ac67db9bff3025945bacf90fb0b74fa52600dcb056e822c460c7067b68c06751ce98f8c9f46aed34ce669078c8915420a89762e58588ecda9419e0ae52157a0208ca1e1955ed486087a6811c7717254586cfa5d5415ae4d07064ad1a7dea61"}, @typed={0xe1, 0x70, 0x0, 0x0, @binary="11140e8343fd9cd09e27529edb62a6cbcacc0c2046c5279bd2b2d11bec027c7067e3aea05d7a75cb7778cfd84294fbb3b5146e5b7cc9175de43485cb44f789353a125c2aea6840942793ad14aca6df10a070f8c1b43a396b374e2c5e43a83892f700467f63778df8463ba8bd14993a7626f876b8107825cd4f63a77246dd6ffb72c6595e97df2ea7d8cf16819df546badf024de46af2eb3d659fda3a7eb82e837605207344fd7fa961a6b6fbbabc20a27d36e4d37dc75c3f4b632227edccc28b88c526a4dbbc8773363694f88b50de64b0a41677158a6ec9d26b7f5d40"}]}, @nested={0x4, 0x84}, @nested={0x113, 0x37, 0x0, 0x1, [@typed={0x0, 0xa}, @typed={0x8, 0x39, 0x0, 0x0, @uid}, @generic="cddc1663e75b2e2575d13c8d6614fc2d600096d8c336036261c98dd7546061a920110119b69b58089b9ed0525a4f2240d0a5fa4a9e5b9ba9052b281f2d35ebbf5599f132a181420d37722ac4bb4ab2707751d1b2a6a5a12d53bbad21ad2b0aef931567e975da1311a0dd205b39a14c5c05ddbd17512248ca6e491b08946374c50efb796b4173909d565f0e026ef2c44e", @generic="8e0aefa4457f68", @typed={0x4, 0x58}, @typed={0x8, 0x63, 0x0, 0x0, @uid}, @generic="627ca1cab7c130198b0f65d98bd1fd697047033815f648e03ea75a58851668fc71d386a39d373f87634035cd7df0b35db7fe64a276bc1a57384b8288994b03f1d73d676c56ff531eac", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@private1}]}, @generic="50bad25a1f003dd860ed30c176247584dd81cc803257c767a9e2bec76a3639ec44c4c1ef70f32fa156d77688884d9efd743ec7263d24226174b9e05d91979b41fa60f11a1139acf0a43f5aa1e0742027925a32", @generic="09b0d492567ad0acb2abd4636665fe58db8e2f99aaf181e835cb8a7732391f866f4d7354b8406a6f6ec537cb71d40616763a2832007eea9dcb6ec2e684ea44fe4975e20d65c44dc1178cac80b59f760eaf1c6c34ca6ffcf454fd46daa4582b13d31b8a25e5c8bb", @typed={0x4, 0x42}]}, 0x42c}, {&(0x7f0000000740)={0x32c, 0x40, 0x300, 0x70bd2d, 0x25dfdbff, "", [@generic="c1b26a9e4a80369d580a9e229a32eae3c1cc16b83d86cbd6ba333f8f4072a655ea604c33f52572660ef320e6315797a107623a1a37d76a0b16a562728280e9bae6f1afba35d6ef8ba6a3f7ee406c289c3160c22ef2af39048a808ade8a49996c65d0348c72", @nested={0x1aa, 0x7a, 0x0, 0x1, [@typed={0x4, 0x6f}, @generic="01939afb138c8d63b6ce56816d9cc42c4e9460e2ab79b84a6a6c7f72ca5c9aa55120ef231d060d975eb1f712c45db754d2da8f6268e2d9df72fee9b80072d748bd7b9078a592347666dfbb37457d7ade6fd197eba03208501cfe01de1567d71ea3e51cbff75f2348092e058f3c236568573626be1579a8cdb1f6c05f4e6f28e5169971fefb2c721bfbae242e0b69014266b7e31904fc2603e74c321319f0527d13b6f9db99e8c6890e525c33d2d7925cb2ed723355b4af474bffbf619fbdad9485624f", @typed={0x8, 0x58, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="2e176b486555324c0c560dff4e58aaa0e223844745319c28534679b2a674fb605a871cd4ac91478d70feb7108f122aa5086cd5d6c20334f5c23c51eb0216eb036d54f6ac64eb6972b6c256645a15db0107c16c2b4db5b78acde0c85c60af77d2d11ea41e8fc2743ae33f36fa3953b01fb1958d64d93c4716571ea73e3c25f84e1587c2bdafb4fdf640e45ff4ea49bb8c6cc615e0d9ac24b95b57e8295fa233a7f9745222a850ad55809ca022de6d1b730e4c0ccf24c75b25498e6a", @typed={0x8, 0x90, 0x0, 0x0, @uid}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x107, 0x73, 0x0, 0x1, [@generic="8bd4d2676b4888946ba335cde583bd808d9f155b79975c292e4c4875e3624b588a68d1e754f2143c10658b9c977fa5a4420bed1618a9baab4090483a78d14a487c5e9b75bef33eb7a8edefe38038fa49f81b54c2a1abc54da9d8ecb07dbd139f474cc69b46a6e66876eafd954da0fec77bac35943343a975cc25a492567be29c94791024feb634c56b0b48111082bba72230b0c295a128dacf", @generic="aa35a2f3f44fd0822486eafd485ed8ec5e173f55b53bfe3622b0862acc14dd785df6c0bd532bb9bdd109777b2a3cb7e87f7a02516b052b0ebfe417e243ec9def209ea65cc2d327499eefc47d2b04652b31ad7afeecc0b929d27feb13e36a82af06a2a888be78090ece5f"]}]}, 0x32c}, {&(0x7f0000000a80)={0x2dc, 0x22, 0x20, 0x70bd27, 0x25dfdbfe, "", [@nested={0xf7, 0x67, 0x0, 0x1, [@generic="d7a76f27f2094125845e09b4f79f3fc0edab066c98b2c39dee271995473bbf3a336b88c41af7ded4de9c03e6f5b64a6be82d8108f8fd201c11f286af5b756332e4acfc18b582400a949cf8a9685ecfbadb7974469d1f6c1e45fdf0defdef002cf8ab477b52db090022a094e54d2a9d859858a45dcf921e6355ad4b8df761a3c62e88725470ff202f51b92d1b56bdfc6b6270653db59af4a5d5bea5379024495edb61ccebb50e7beee2b8cdb2711d9ab87399215ef89a0a452e5cc49fabd75ae9064da4c1736ce9c41f1cf6368b5887ce0aac2b10cd3ec16ad96644dc2fb8ed5b3077b0e9e3b870252f8843", @typed={0xfffffffffffffd4d, 0x4b, 0x0, 0x0, @u32=0x6}]}, @generic="d5473d6c100b7654f7250db92824b848a5bdeaaab0bf8403ee7c2dc84a399424adb43290e3f0f97fc1a46a1aa32a83bb00f36750c5c4589c1d91850a12c3034557af554072037f5c4b10182c5cb824f8e80c7e401ed88a39403bb45574e8639524b4d6e55ae4ef90456c3c9964be203763f06942bf8a381ce98d01a1ed3e315ea64e35bb439b21694d93dabdfdea6c14f1e83e6e946dcf4f80a9c78b5130ae0be63162592d4a21b85a39b1a1494814102638f6fe208c709e60efe321df305a9b73f0400a04b57bd050b9ee7b597f6ff04bec", @generic="48dc5e71ac718a8faa7e91d6f824aab71e6199239707e975bf65a8f2db269ba0ef9f31d9af4ae1ad582507de9e7561678baa074dfd8acf7c7132cb4f004ca29742b8f153e4e5c7e3fba4a45c89276d59b7612c8cadf437d7", @typed={0x8, 0x10, 0x0, 0x0, @uid}, @typed={0x4, 0x52}, @nested={0x96, 0x86, 0x0, 0x1, [@generic="0c66680294673ddf2bcca8bd01f801a9d36778f23e3c491e3fa51746f789b160d8f20b7198c18dacf2e76ae8c0b8b518fd3094ef072f41ae2e33b17717c5b79d314e15c314fe07c15244995b03df19037ceead4dc30cbc92412998a7d76dc711eb7d41c6b60d0097b383922aea5a1ed92289ba94d5304bf98d5d5e7beb1eaea3f646aef67a0972c81074cb4b2bc7de501f34"]}, @typed={0x4, 0x51}]}, 0x19e456654eee86f5}], 0x3, &(0x7f0000000dc0)=[@rights={{0x1c, 0x1, 0x1, [r5, r3, r6]}}], 0x20, 0x40000}, 0x44000)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/40)
r7 = getpid()
sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x200, 0x4)
syz_open_procfs(r7, &(0x7f0000000040)='net/arp\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000100)={0x802b, 0x2})

[  353.841044]  push_pipe+0x3bf/0x730
[  353.841058]  iov_iter_get_pages_alloc+0x4da/0xe90
[  353.841089]  ? iov_iter_revert+0x980/0x980
[  353.841099]  ? iov_iter_pipe+0x93/0x2b0
[  353.841112]  default_file_splice_read+0x17c/0x870
[  353.841120]  ? save_stack+0x32/0xa0
[  353.841127]  ? kasan_kmalloc+0xbf/0xe0
[  353.841133]  ? __kmalloc+0x15b/0x7c0
[  353.841141]  ? alloc_pipe_info+0x156/0x380
[  353.841151]  ? do_sendfile+0x469/0xaf0
[  353.841158]  ? SyS_sendfile64+0xff/0x110
[  353.841167]  ? do_syscall_64+0x1d5/0x640
[  353.841179]  ? page_cache_pipe_buf_release+0x210/0x210
[  353.841193]  ? trace_hardirqs_on+0x10/0x10
[  353.841206]  ? fsnotify+0x897/0x1110
[  353.841225]  ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0
[  353.841235]  ? fsnotify+0x1110/0x1110
[  353.841247]  ? __inode_security_revalidate+0xcf/0x120
[  353.841256]  ? avc_policy_seqno+0x5/0x10
[  353.841265]  ? selinux_file_permission+0x7a/0x440
[  353.841276]  ? security_file_permission+0x82/0x1e0
[  353.841287]  ? rw_verify_area+0xe1/0x2a0
[  353.841296]  ? page_cache_pipe_buf_release+0x210/0x210
[  353.841305]  do_splice_to+0xfb/0x150
[  353.841313]  ? alloc_pipe_info+0x2dc/0x380
[  353.841324]  splice_direct_to_actor+0x20a/0x730
[  353.841336]  ? generic_pipe_buf_nosteal+0x10/0x10
[  353.841347]  ? do_splice_to+0x150/0x150
[  353.841358]  ? rw_verify_area+0xe1/0x2a0
[  353.841368]  do_splice_direct+0x164/0x210
[  353.841379]  ? splice_direct_to_actor+0x730/0x730
[  353.841394]  ? rw_verify_area+0xe1/0x2a0
[  353.841405]  do_sendfile+0x469/0xaf0
[  353.841421]  ? do_compat_pwritev64+0x140/0x140
[  353.841436]  SyS_sendfile64+0xff/0x110
[  353.841445]  ? SyS_sendfile+0x130/0x130
[  353.841454]  ? do_syscall_64+0x4c/0x640
[  353.841461]  ? SyS_sendfile+0x130/0x130
[  353.841471]  do_syscall_64+0x1d5/0x640
[  353.841492]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  353.841500] RIP: 0033:0x45c829
02:42:06 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x3, 0x2, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000100)={0x80000000, 0x10000000, 0x0, 'queue0\x00', 0x40})
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r1, 0x0, 0x10002)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000000)=0x5)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000040))

02:42:06 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="bc09a255b327077b4a7cc8cc05c640618a89fe761324bd3a3f9e26288a6dc179d833960e476d542115b84b3a51fa112d3d60c3ace9216ea2dfd0289e80fa9a14c6e2630f", 0x44, 0x3}], 0x2080000, &(0x7f0000000180)={[{@unhide='unhide'}], [{@smackfshat={'smackfshat', 0x3d, '^cgroupwlan1\\+'}}]})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

[  353.841505] RSP: 002b:00007f49df258c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  353.841514] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[  353.841519] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  353.841524] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  353.841529] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000008
[  353.841534] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007f49df2596d4
02:42:06 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000180)={0x0, {0xfffffffc, 0x8}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]})
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
openat$cgroup_ro(r3, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0)
sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x205, 0x70bd25, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x24040884)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0xfffffffe, 0x6, 0x10, 0x0})

02:42:06 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000100)={0x1ff, 0x4, 0x1})
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = dup(r0)
timerfd_gettime(r2, &(0x7f0000000000))
read$eventfd(r0, 0x0, 0x0)

02:42:06 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000180)=""/129})
setns(r1, 0x4000000)
readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/120, 0x78)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendfile(r5, r0, 0x0, 0xff)

[  354.365326]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  354.396883] loop0: p1 start 2564762831 is beyond EOD, truncated
[  354.424801] loop0: p2 start 2494347297 is beyond EOD, truncated
[  354.434783] loop0: p3 start 1915790064 is beyond EOD, truncated
[  354.441055] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:06 executing program 4:
llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/32, 0x20)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000000c0)={0x4})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  354.451088] loop0: p5 start 676962771 is beyond EOD, truncated
[  354.451098] loop0: p6 start 3159018777 is beyond EOD, truncated
[  354.451104] loop0: p7 start 745035705 is beyond EOD, truncated
[  354.451110] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:06 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000180)=0x29b)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r0, 0x0, 0x10002)
read$eventfd(r0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
accept$nfc_llcp(r4, &(0x7f0000000100), &(0x7f0000000040)=0x60)
write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x2710}, 0x0, 0xae, 0x81}], 0x18)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe85}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040}, 0x4)

02:42:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2513000000a00004803c00078008000200030000000800010019000000080001000300000008000300643400000800020003000000080003000000000808000100190000982f000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b00001c0007800800020007000000080002000300000008000200090000000900010073797a30000000000c00078008000200e003"], 0xb4}, 0x1, 0x0, 0x0, 0x2004e000}, 0x4040004)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x5, 0x4, 0x10000000, 0x0, 0x0})
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101042, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0xcf, &(0x7f0000000080)="50a0c1a318b84260", &(0x7f00000000c0)=""/207, 0x7, 0x0, 0x1000, 0x4f, &(0x7f0000000540)="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", &(0x7f00000001c0)="3a40e23ec596192ac76383b467c3a5b8dd229b1104a063c477ed4a50a22054744121a3a9795347a94f0d5a1d58349575958ab4e96c6c1a0b43ba5b3a39620c7dcc15d78ca19776345c9ec48c695b37"}, 0x40)

02:42:07 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x1, 0x96})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)

02:42:07 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x4000)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xb9, 0x9}, {0xe5a5, 0x2}, {0x6, 0x1}, {0x6, 0x7ff}, {0x5, 0x3}]})

02:42:07 executing program 0:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2a0c0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
futex(&(0x7f0000000080)=0x2, 0x8d, 0xfffffffe, &(0x7f00000000c0), &(0x7f0000000100)=0x1, 0x0)

02:42:07 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0xfffffffffffffffd, 0x40010)

[  354.851774]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  354.852585] loop0: p1 start 2564762831 is beyond EOD, truncated
[  354.852594] loop0: p2 start 2494347297 is beyond EOD, truncated
[  354.852601] loop0: p3 start 1915790064 is beyond EOD, truncated
[  354.852607] loop0: p4 start 983213520 is beyond EOD, truncated
[  354.852614] loop0: p5 start 676962771 is beyond EOD, truncated
[  354.852620] loop0: p6 start 3159018777 is beyond EOD, truncated
[  354.852627] loop0: p7 start 745035705 is beyond EOD, truncated
[  354.852634] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:07 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4)

02:42:07 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x0, 0x7, 0x1}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, 0xfffffffffffffffd)

02:42:07 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0xffffffff, 0xffffffff, 0x6, 0x1, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_pts(r0, 0x7d1d80)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040))
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x0, 0x6000, 0xffff, 0xd4a, 0x7, "c204196503f009d2b2066fb7a0079c75ac1c5c", 0x8, 0xfffffff8})
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000000))

02:42:07 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0xfffffffffffffffd, 0x40010)

02:42:07 executing program 3:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x3, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000100)={0x0, 0x6, 0x25})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x4, 0x1, 0x0, 0x0})

02:42:07 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0xcdd})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:07 executing program 0:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x100, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})

02:42:07 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0xfffffffffffffffd, 0x40010)

02:42:07 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x89, 0x0, 0x8000, 0x9})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x1f)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_UNALIGN(0x6, 0x3)

[  355.527541]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  355.547541] loop0: p1 start 2564762831 is beyond EOD, truncated
[  355.567395] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:07 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x40000, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x401, 0x7ff, @private2, 0x3}, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x8, 0x0}, 0xa9}, 0x366, [0x200, 0x100, 0x3, 0x3, 0xfffffffa, 0x7ebf1a5c, 0x2, 0x3f]}, 0x5c)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  355.580151] loop0: p3 start 1915790064 is beyond EOD, truncated
[  355.599442] loop0: p4 start 983213520 is beyond EOD, truncated
[  355.609993] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)

[  355.625757] loop0: p6 start 3159018777 is beyond EOD, truncated
[  355.631958] loop0: p7 start 745035705 is beyond EOD, truncated
[  355.642362] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:08 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001080))
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001040)='/dev/input/mice\x00', 0xa8000)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="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"/4096)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x35e, 0xfffd, 0x0, 0xa})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:08 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote, r4}, 0x14)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x100, 0x0)

02:42:08 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f00000000c0)={0x0, &(0x7f0000000000)="1fde8bf80243bd31442db75f83a3dde5b329de44e4e4ecd989b0dbfbb8c30d8e0540385679c6dc867e0d65b842fb795be5c175fcb94c0d5bcb30eed0ed7eea8614ebc99605c0d743818dd9ce4460d8d3f7b05a107f2b0926f72af1a9ea38ebd8a462c568bf7041b09b26f9fca72d243335a2d65a273fb66ab618daccae93bc83994de980b34404afb0efa8244b5d554a1ef54db4b9edf61d24f7f1b82f09b2914b53bac0562820ce3c14344251dcb04d", 0xb0})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r6}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}}, 0x2, 0x6, 0x81, 0xf109, 0x48, 0x7fffffff, 0x4b}, 0x9c)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f00000001c0)={0x3, 'netdevsim0\x00', {0xe94}, 0x3})

[  355.747062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0})

02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

[  355.832633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:08 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x6100, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000280)={0x0, 0x8, 0x1000})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockname(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x98}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000040}, 0x60000001)

02:42:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000040))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080))

[  356.018714]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  356.034526] loop0: p1 start 2564762831 is beyond EOD, truncated
[  356.043881] loop0: p2 start 2494347297 is beyond EOD, truncated
[  356.050067] loop0: p3 start 1915790064 is beyond EOD, truncated
[  356.056755] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)

[  356.069328] loop0: p5 start 676962771 is beyond EOD, truncated
[  356.083364] loop0: p6 start 3159018777 is beyond EOD, truncated
[  356.102067] loop0: p7 start 745035705 is beyond EOD, truncated
[  356.102076] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0)
ioctl$TIOCSBRK(r1, 0x5427)

02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000))

02:42:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x0, 0x1})

02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])
sendfile(r3, r1, 0x0, 0x10002)

02:42:08 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x9)

02:42:08 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='/proc/tty/drivers\x00', &(0x7f0000000200)='(\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='/dev/input/event#\x00', &(0x7f00000002c0)='(#em1:wlan1\'/nodev&selinuxmime_type@posix_acl_access$-(+cgroup}wlan1+)bdevkeyring^\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/input/event#\x00'])

02:42:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0xfffffffd, 0x20000000, 0x0})
readahead(r0, 0xeb6, 0x4)

02:42:09 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10880, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}}, 0x20000080)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x101}})
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000180)={0x6})

02:42:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

02:42:09 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x301780, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000080)=0xddfe)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x1a, 0x0, 0x0})

02:42:09 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000000)={0x3, 0xfffff000})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:09 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000000)={0x10000, 0x1, 0x7ff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0xffffffff, 0x0, 0x0, 0x1b, 0x0})

02:42:09 executing program 0:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x3, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000100)={0x0, 0x6, 0x25})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x4, 0x1, 0x0, 0x0})

02:42:09 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$chown(0x4, r3, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r4)
keyctl$chown(0x4, r5, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='ocpuset%\x00', r1)

02:42:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:09 executing program 0 (fault-call:3 fault-nth:0):
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:09 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
write$rfkill(r1, &(0x7f0000000040)={0xffff, 0x9, 0x3}, 0x8)
write$evdev(r0, &(0x7f0000000000)=[{{}, 0x15, 0x40, 0xcb}], 0x18)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r0, 0x0, 0x10002)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000100)=""/33)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000500)={0x2, 0x80000000, 0x13, 0xb, 0xd1, 0x0})

02:42:09 executing program 0 (fault-call:3 fault-nth:1):
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

[  357.149338] FAULT_INJECTION: forcing a failure.
[  357.149338] name failslab, interval 1, probability 0, space 0, times 0
02:42:09 executing program 0 (fault-call:3 fault-nth:2):
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  357.149378] CPU: 1 PID: 17818 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0
[  357.149384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
02:42:09 executing program 0 (fault-call:3 fault-nth:3):
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  357.149387] Call Trace:
[  357.149404]  dump_stack+0x13e/0x194
[  357.149420]  should_fail.cold+0x10a/0x14b
[  357.149434]  should_failslab+0xd6/0x130
[  357.149444]  kmem_cache_alloc_trace+0x2db/0x7b0
02:42:09 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, 0xffffffffffffffff, 0x0, 0x10002)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0106b823e7e7811daad402000000090001692c5b302be283e59f6e50dc03d153a958db3bcc17e2f673161ffee52cfe74975d0596db8ca0a38caef9fda19692e968b640562df158557d0aa0ec02c996e160084b60fd8e785a52003645f82eecba92ff4b464fef26073404f0d0445865465ab4ab205ebd8566bc8deab04b594b6d2ff6c4b58f99ef93448f64f7"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012abd7000fedbdf25020000000900030073a8d7cbcb967920d5a8903156c61bab4f797a31000000001400020062e1746164765f736c6176655f3100000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendfile(r6, r5, 0x0, 0x10002)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80002, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r10, 0x8818564c, &(0x7f00000008c0))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:09 executing program 0 (fault-call:3 fault-nth:4):
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  357.149455]  ? lock_acquire+0x170/0x3f0
[  357.149538]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.149554]  snd_pcm_oss_change_params_locked+0x15e/0x30a0
[  357.149563]  ? __mutex_lock+0x36a/0x1470
[  357.149573]  ? save_trace+0x290/0x290
[  357.149584]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.149599]  ? snd_pcm_hw_param_near.constprop.0+0x6e0/0x6e0
[  357.149611]  ? mutex_trylock+0x1a0/0x1a0
[  357.149621]  ? lock_downgrade+0x6e0/0x6e0
[  357.149628]  ? find_held_lock+0x2d/0x110
[  357.149638]  ? __might_fault+0x104/0x1b0
[  357.149659]  snd_pcm_oss_change_params+0x5e/0xb0
[  357.149671]  snd_pcm_oss_get_active_substream+0xf5/0x140
[  357.149685]  snd_pcm_oss_ioctl+0xbe7/0x2b00
[  357.149693]  ? trace_hardirqs_on+0x10/0x10
[  357.149705]  ? snd_pcm_oss_release+0x280/0x280
[  357.149721]  ? snd_pcm_oss_release+0x280/0x280
[  357.149733]  do_vfs_ioctl+0x75a/0xfe0
[  357.149744]  ? selinux_file_mprotect+0x5c0/0x5c0
[  357.149755]  ? ioctl_preallocate+0x1a0/0x1a0
[  357.149774]  ? security_file_ioctl+0x76/0xb0
[  357.149783]  ? security_file_ioctl+0x83/0xb0
[  357.149795]  SyS_ioctl+0x7f/0xb0
[  357.149804]  ? do_vfs_ioctl+0xfe0/0xfe0
[  357.149817]  do_syscall_64+0x1d5/0x640
[  357.149832]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  357.149840] RIP: 0033:0x45c829
[  357.149846] RSP: 002b:00007f7039ab0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  357.149856] RAX: ffffffffffffffda RBX: 00000000004ebf20 RCX: 000000000045c829
[  357.149861] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000004
[  357.149867] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  357.149872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  357.149878] R13: 00000000000004cd R14: 00000000004c7a48 R15: 00007f7039ab16d4
[  357.155819]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  357.156286] loop0: p1 start 2564762831 is beyond EOD, truncated
[  357.156294] loop0: p2 start 2494347297 is beyond EOD, truncated
[  357.156301] loop0: p3 start 1915790064 is beyond EOD, truncated
[  357.156308] loop0: p4 start 983213520 is beyond EOD, truncated
[  357.156314] loop0: p5 start 676962771 is beyond EOD, truncated
[  357.156321] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:09 executing program 2:
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x2042)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  357.156328] loop0: p7 start 745035705 is beyond EOD, truncated
[  357.156334] loop0: p8 start 3542136138 is beyond EOD, truncated
[  357.219377] FAULT_INJECTION: forcing a failure.
[  357.219377] name failslab, interval 1, probability 0, space 0, times 0
[  357.219390] CPU: 1 PID: 17826 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0
[  357.219396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.219400] Call Trace:
[  357.219415]  dump_stack+0x13e/0x194
[  357.219433]  should_fail.cold+0x10a/0x14b
[  357.219448]  should_failslab+0xd6/0x130
[  357.219458]  kmem_cache_alloc_trace+0x2db/0x7b0
[  357.219470]  ? lock_acquire+0x170/0x3f0
[  357.219480]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.219495]  snd_pcm_oss_change_params_locked+0x194/0x30a0
[  357.219504]  ? __mutex_lock+0x36a/0x1470
[  357.219513]  ? save_trace+0x290/0x290
[  357.219524]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.219538]  ? snd_pcm_hw_param_near.constprop.0+0x6e0/0x6e0
[  357.219550]  ? mutex_trylock+0x1a0/0x1a0
[  357.219560]  ? lock_downgrade+0x6e0/0x6e0
[  357.219569]  ? find_held_lock+0x2d/0x110
[  357.219580]  ? __might_fault+0x104/0x1b0
[  357.219596]  snd_pcm_oss_change_params+0x5e/0xb0
[  357.219607]  snd_pcm_oss_get_active_substream+0xf5/0x140
[  357.219619]  snd_pcm_oss_ioctl+0xbe7/0x2b00
[  357.219628]  ? trace_hardirqs_on+0x10/0x10
[  357.219640]  ? snd_pcm_oss_release+0x280/0x280
[  357.219651]  ? snd_pcm_oss_release+0x280/0x280
[  357.219662]  do_vfs_ioctl+0x75a/0xfe0
[  357.219672]  ? selinux_file_mprotect+0x5c0/0x5c0
[  357.219682]  ? ioctl_preallocate+0x1a0/0x1a0
[  357.219702]  ? security_file_ioctl+0x76/0xb0
[  357.219711]  ? security_file_ioctl+0x83/0xb0
[  357.219723]  SyS_ioctl+0x7f/0xb0
[  357.219732]  ? do_vfs_ioctl+0xfe0/0xfe0
[  357.219744]  do_syscall_64+0x1d5/0x640
[  357.219757]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  357.219764] RIP: 0033:0x45c829
[  357.219768] RSP: 002b:00007f7039ab0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  357.219778] RAX: ffffffffffffffda RBX: 00000000004ebf20 RCX: 000000000045c829
[  357.219783] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000004
[  357.219788] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  357.219792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  357.219796] R13: 00000000000004cd R14: 00000000004c7a48 R15: 00007f7039ab16d4
[  357.298421] FAULT_INJECTION: forcing a failure.
[  357.298421] name failslab, interval 1, probability 0, space 0, times 0
[  357.298433] CPU: 1 PID: 17830 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0
[  357.298439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.298442] Call Trace:
[  357.298458]  dump_stack+0x13e/0x194
[  357.298474]  should_fail.cold+0x10a/0x14b
[  357.298488]  should_failslab+0xd6/0x130
[  357.298499]  kmem_cache_alloc_trace+0x2db/0x7b0
[  357.298510]  ? lock_acquire+0x170/0x3f0
[  357.298520]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.298533]  snd_pcm_oss_change_params_locked+0x1ca/0x30a0
[  357.298542]  ? __mutex_lock+0x36a/0x1470
[  357.298550]  ? save_trace+0x290/0x290
[  357.298561]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.298574]  ? snd_pcm_hw_param_near.constprop.0+0x6e0/0x6e0
[  357.298585]  ? mutex_trylock+0x1a0/0x1a0
[  357.298595]  ? lock_downgrade+0x6e0/0x6e0
[  357.298602]  ? find_held_lock+0x2d/0x110
[  357.298613]  ? __might_fault+0x104/0x1b0
[  357.298628]  snd_pcm_oss_change_params+0x5e/0xb0
[  357.298639]  snd_pcm_oss_get_active_substream+0xf5/0x140
[  357.298651]  snd_pcm_oss_ioctl+0xbe7/0x2b00
[  357.298660]  ? trace_hardirqs_on+0x10/0x10
[  357.298672]  ? snd_pcm_oss_release+0x280/0x280
[  357.298687]  ? snd_pcm_oss_release+0x280/0x280
[  357.298697]  do_vfs_ioctl+0x75a/0xfe0
[  357.298716]  ? selinux_file_mprotect+0x5c0/0x5c0
[  357.298727]  ? ioctl_preallocate+0x1a0/0x1a0
[  357.298747]  ? security_file_ioctl+0x76/0xb0
[  357.298757]  ? security_file_ioctl+0x83/0xb0
[  357.298768]  SyS_ioctl+0x7f/0xb0
[  357.298776]  ? do_vfs_ioctl+0xfe0/0xfe0
[  357.298788]  do_syscall_64+0x1d5/0x640
[  357.298803]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  357.298810] RIP: 0033:0x45c829
[  357.298815] RSP: 002b:00007f7039ab0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  357.298825] RAX: ffffffffffffffda RBX: 00000000004ebf20 RCX: 000000000045c829
[  357.298830] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000004
[  357.298835] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  357.298841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  357.298847] R13: 00000000000004cd R14: 00000000004c7a48 R15: 00007f7039ab16d4
[  357.339230] FAULT_INJECTION: forcing a failure.
[  357.339230] name failslab, interval 1, probability 0, space 0, times 0
[  357.339243] CPU: 0 PID: 17833 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0
[  357.339249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.339252] Call Trace:
[  357.339268]  dump_stack+0x13e/0x194
[  357.339284]  should_fail.cold+0x10a/0x14b
[  357.339298]  should_failslab+0xd6/0x130
[  357.339308]  kmem_cache_alloc_trace+0x2db/0x7b0
[  357.339322]  ? _snd_pcm_hw_param_min+0x1d3/0x4d0
[  357.339336]  snd_pcm_oss_change_params_locked+0x63b/0x30a0
[  357.339348]  ? save_trace+0x290/0x290
[  357.339359]  ? snd_pcm_oss_change_params+0x87/0xb0
[  357.339375]  ? snd_pcm_hw_param_near.constprop.0+0x6e0/0x6e0
[  357.339388]  ? lock_downgrade+0x6e0/0x6e0
[  357.339396]  ? find_held_lock+0x2d/0x110
[  357.339414]  snd_pcm_oss_change_params+0x5e/0xb0
[  357.339424]  snd_pcm_oss_get_active_substream+0xf5/0x140
[  357.339437]  snd_pcm_oss_ioctl+0xbe7/0x2b00
[  357.339446]  ? trace_hardirqs_on+0x10/0x10
[  357.339458]  ? snd_pcm_oss_release+0x280/0x280
[  357.339472]  ? snd_pcm_oss_release+0x280/0x280
[  357.339482]  do_vfs_ioctl+0x75a/0xfe0
[  357.339491]  ? selinux_file_mprotect+0x5c0/0x5c0
[  357.339503]  ? ioctl_preallocate+0x1a0/0x1a0
[  357.339522]  ? security_file_ioctl+0x76/0xb0
[  357.339531]  ? security_file_ioctl+0x83/0xb0
[  357.339542]  SyS_ioctl+0x7f/0xb0
[  357.339550]  ? do_vfs_ioctl+0xfe0/0xfe0
[  357.339561]  do_syscall_64+0x1d5/0x640
[  357.339576]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  357.339584] RIP: 0033:0x45c829
[  357.339588] RSP: 002b:00007f7039ab0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  357.339598] RAX: ffffffffffffffda RBX: 00000000004ebf20 RCX: 000000000045c829
[  357.339612] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000004
[  357.339618] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  357.339624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  357.339630] R13: 00000000000004cd R14: 00000000004c7a48 R15: 00007f7039ab16d4
[  357.385983]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  357.390033] loop0: p1 start 2564762831 is beyond EOD, truncated
[  357.390041] loop0: p2 start 2494347297 is beyond EOD, truncated
[  357.390046] loop0: p3 start 1915790064 is beyond EOD, truncated
[  357.390050] loop0: p4 start 983213520 is beyond EOD, truncated
[  357.390054] loop0: p5 start 676962771 is beyond EOD, truncated
[  357.390059] loop0: p6 start 3159018777 is beyond EOD, truncated
[  357.390063] loop0: p7 start 745035705 is beyond EOD, truncated
[  357.390067] loop0: p8 start 3542136138 is beyond EOD, truncated
[  357.408908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  357.619158] FAULT_INJECTION: forcing a failure.
[  357.619158] name failslab, interval 1, probability 0, space 0, times 0
02:42:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

02:42:10 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

02:42:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x80000, 0x9)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:10 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
accept(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  358.471081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
02:42:10 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:11 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000480))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x7e, 0x1d, &(0x7f0000000040)="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"})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000540)={0x9d0000, 0xfff, 0x3, <r5=>r4, 0x0, &(0x7f0000000500)={0x9a0916, 0x6, [], @p_u32=&(0x7f00000004c0)=0xebe}})
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000580))
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:11 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)=""/165)

02:42:11 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  358.903727] CPU: 1 PID: 17845 Comm: syz-executor.0 Not tainted 4.14.180-syzkaller #0
[  358.911654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  358.921030] Call Trace:
[  358.923637]  dump_stack+0x13e/0x194
[  358.927269]  should_fail.cold+0x10a/0x14b
[  358.931433]  should_failslab+0xd6/0x130
[  358.935416]  kmem_cache_alloc_trace+0x2db/0x7b0
[  358.940093]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[  358.945203]  ? debug_check_no_obj_freed+0x28e/0x6e4
[  358.950583]  snd_pcm_hw_param_near.constprop.0+0xc3/0x6e0
[  358.956132]  ? mark_held_locks+0xa6/0xf0
[  358.960202]  ? snd_pcm_hw_param_max+0x690/0x690
[  358.964892]  ? snd_pcm_oss_change_params_locked+0x255b/0x30a0
[  358.970788]  ? trace_hardirqs_on_caller+0x3f6/0x590
[  358.975835]  snd_pcm_oss_change_params_locked+0x87e/0x30a0
[  358.981498]  ? snd_pcm_hw_param_near.constprop.0+0x6e0/0x6e0
[  358.987329]  ? lock_downgrade+0x6e0/0x6e0
[  358.991664]  ? find_held_lock+0x2d/0x110
[  358.995764]  snd_pcm_oss_change_params+0x5e/0xb0
[  359.000533]  snd_pcm_oss_get_active_substream+0xf5/0x140
[  359.006258]  snd_pcm_oss_ioctl+0xbe7/0x2b00
[  359.010590]  ? trace_hardirqs_on+0x10/0x10
[  359.014842]  ? snd_pcm_oss_release+0x280/0x280
[  359.019465]  ? snd_pcm_oss_release+0x280/0x280
[  359.024145]  do_vfs_ioctl+0x75a/0xfe0
[  359.027957]  ? selinux_file_mprotect+0x5c0/0x5c0
[  359.032714]  ? ioctl_preallocate+0x1a0/0x1a0
[  359.037181]  ? security_file_ioctl+0x76/0xb0
[  359.041599]  ? security_file_ioctl+0x83/0xb0
[  359.046014]  SyS_ioctl+0x7f/0xb0
[  359.049481]  ? do_vfs_ioctl+0xfe0/0xfe0
[  359.053660]  do_syscall_64+0x1d5/0x640
[  359.057565]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  359.067361] RIP: 0033:0x45c829
[  359.070552] RSP: 002b:00007f7039a8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  359.078274] RAX: ffffffffffffffda RBX: 00000000004ebf20 RCX: 000000000045c829
[  359.085650] RDX: 0000000020000040 RSI: 00000000c0045002 RDI: 0000000000000003
[  359.092936] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[  359.100389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  359.107840] R13: 00000000000004cd R14: 00000000004c7a48 R15: 00007f7039a906d4
02:42:11 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
recvfrom$ax25(r2, &(0x7f0000000100)=""/140, 0x8c, 0x12160, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:11 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSBRK(r1, 0x5409, 0x1f)
dup2(0xffffffffffffffff, r0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x2008001, 0x6, 0x6abc, 0xca91, 0xa8, "68ba6bd5482ec5e55d20e458d092c76c3fb24e", 0x0, 0x401})

02:42:11 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:11 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getresuid(&(0x7f00000004c0), &(0x7f0000000600), &(0x7f0000000640)=<r1=>0x0)
r2 = getuid()
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x1ff)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x8, &(0x7f0000000540)=[{&(0x7f0000000080)="f5e47c5682f05689a0f8b21b3969552bd676f219e9c07d48c3f72edd9e66b67caa008f22816c55cd362400bf4babc91901bdcd8327e369532fdfb170732230ad2b68c575496c664ed5dbb893763ec007ed07169baded0ab06ada5dcdc3768b", 0x5f, 0x101}, {&(0x7f0000000100)="b4154dec5cce1e22a163ce87608548660758ae74b87f48ef2f5ff307ab753a0796cbcefcf89763f34333298e039eee82bcac4fdfc942e4d154f89043305c6b6701ac50fcfa3ce5e9d4d901bbc092b0d7eb38e30af0ac4063807454fc02507f64e0bfde3e78a57ba4ad57b67987c984304930c0a387832c71d96cbb914c986bcd396e5ffb03402f087d0d192469de896d0cca343d165853830951361577252a671f46c667", 0xa4, 0x1}, {&(0x7f00000001c0)="b4003bac701702cedd14", 0xa, 0x7}, {&(0x7f0000000200)="b297fa5c76da919744ce409ad2c8b13e39e0abf581cbf5821a", 0x19, 0x2000000000}, {&(0x7f0000000240)="51772a55e640eed706ff7dddab0cfffd1859bce553199c869587f009975cf38e687193a2adc289f4ebf0531c6a14506f208e57cee8d1a2d3ccca83dc9dcd7cd80a82bf2667afe00d167f0ef5237de71a21e1b7d16d713baa01897202460f7c1ded9fee823aae35bc3897810fbade52234991c839d684271efa61664f99e6007188c97f3f66", 0x85, 0x9}, {&(0x7f0000000300)="f573b9ed9eaa42f3e1", 0x9, 0x6}, {&(0x7f0000000340)="8cb808c64f58f57b5d6b54d864267ba5966832bef4cb556831144aa6749152cb0be96a1a89b70d5b14e7b5ece4ce25cd762e5d3ba38311ad9487babcad349571ed80cd4e848de4bd5a8971c77c1973b380c25477e058100fa911c6f73c0384b4f55fc3661c5b16e0ffa909331e967af01fb3ad9686f6dfb369da9fe3bc825600ce01959ff5cb75f64fa94572fc87a0daca14a5b786964e3108633f34f47a13d489c0e18794214ea37ab2eba391994eaac00621abb8bcf23249985d0b76", 0xbd, 0x6}, {&(0x7f0000000400)="f5d9752d102d7829b218251ff050bfe7f74a6db1f8c5d7f2612633a031f3820638977d2407f4a7c882c8e8c6d5e24c08ca363e37bfafaeab029b2d7a7f2f7a4fb96ca63b8b448de099539d985b7b3bc4729f38bebd423da8d0f56aab0102cf336b44c850a516fd1e7f754c135dbcc156536dc1fe07544a356139cb281ef5933efb82c28a52102c671364ad1d3a71b1167f44306c4086fa4b3438aac04ceb8f8ee53f531350d81943045627ed927ecccf3151982c39522d138554acf2", 0xbc, 0x9}], 0x800000, &(0x7f0000000680)={[{@nodots='nodots'}], [{@appraise_type='appraise_type=imasig'}, {@measure='measure'}, {@fowner_lt={'fowner<', r1}}, {@euid_gt={'euid>', r2}}]})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r6)
keyctl$chown(0x4, 0x0, r1, r6)
sendfile(r4, r3, 0x0, 0x10002)
r7 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r9}, 0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000740)={r9, 0xff}, 0x8)

02:42:11 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}}, 0x20000000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  359.207319]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:11 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

[  359.242097] loop0: p1 start 2564762831 is beyond EOD, truncated
[  359.242107] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:11 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x10002)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={<r3=>0x0, 0x10001}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={r3, 0x40000}, 0x8)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6)

[  359.242114] loop0: p3 start 1915790064 is beyond EOD, truncated
[  359.242120] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:11 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

[  359.242126] loop0: p5 start 676962771 is beyond EOD, truncated
[  359.242132] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:11 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

[  359.242138] loop0: p7 start 745035705 is beyond EOD, truncated
[  359.242144] loop0: p8 start 3542136138 is beyond EOD, truncated
[  359.268847] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
02:42:11 executing program 3:
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x8000018, 0x1b, 0x1b3, 0x0})

02:42:11 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

02:42:11 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040))

02:42:12 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

02:42:12 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x100, 0x100005, {r3, r4/1000+60000}, {0x5, 0x0, 0x3, 0xd9, 0x20, 0xff, "6282b865"}, 0x2, 0x4, @userptr=0x39, 0x5, 0x0, r5})

02:42:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})

[  360.075789] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
02:42:12 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$setsig(r0, 0xa, 0x39)

02:42:12 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

02:42:12 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20144, 0x0)
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000480)={0x1c0, 0x1a, &(0x7f0000000080)="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"})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:12 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x7, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00')
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000100)={0x3, 0x4, 0x4, 0x0, 0x8, {0x77359400}, {0x5, 0xc, 0x20, 0x0, 0x1, 0x8, "f6f5ca74"}, 0x67c2, 0x3, @userptr=0x10000, 0x4, 0x0, <r7=>0xffffffffffffffff})
sendfile(r4, r7, 0x0, 0x8010002)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f00000000c0)={0x9, 0x0, 0x8, 0x2, &(0x7f0000000080)=[{0x401, 0x901f, 0x6, 0x1f}, {0x1ff, 0x6, 0x3, 0x2}]})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x80000000, 0x200, 0x84, 0x3, 0x8, "5de4420c0e48c5706f747bab46925842c303db"})

02:42:12 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:12 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:12 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  360.386022]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  360.386597] loop0: p1 start 2564762831 is beyond EOD, truncated
[  360.386605] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:12 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0x11, "8f2cf9f9f6a4f4"}, 0x9, 0x1)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140))

[  360.386611] loop0: p3 start 1915790064 is beyond EOD, truncated
[  360.386617] loop0: p4 start 983213520 is beyond EOD, truncated
[  360.386624] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:12 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  360.386630] loop0: p6 start 3159018777 is beyond EOD, truncated
[  360.386636] loop0: p7 start 745035705 is beyond EOD, truncated
[  360.386642] loop0: p8 start 3542136138 is beyond EOD, truncated
[  360.539180]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:12 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  360.594733] loop0: p1 start 2564762831 is beyond EOD, truncated
[  360.621379] loop0: p2 start 2494347297 is beyond EOD, truncated
[  360.638300] loop0: p3 start 1915790064 is beyond EOD, truncated
[  360.653193] loop0: p4 start 983213520 is beyond EOD, truncated
[  360.661963] FAULT_INJECTION: forcing a failure.
[  360.661963] name failslab, interval 1, probability 0, space 0, times 0
[  360.686898] loop0: p5 start 676962771 is beyond EOD, truncated
[  360.699579] loop0: p6 start 3159018777 is beyond EOD, truncated
[  360.699987] CPU: 0 PID: 17997 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  360.713555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  360.713599] loop0: p7 start 745035705 is beyond EOD, 
[  360.722993] Call Trace:
[  360.723015]  dump_stack+0x13e/0x194
[  360.723031]  should_fail.cold+0x10a/0x14b
[  360.723045]  should_failslab+0xd6/0x130
[  360.723057]  kmem_cache_alloc+0x2b5/0x770
[  360.740531] truncated
[  360.742896]  __anon_vma_prepare+0x59/0x370
[  360.742959]  do_huge_pmd_anonymous_page+0xc7d/0x11e0
[  360.742998]  ? proc_pident_lookup+0x17a/0x1f0
[  360.749328] loop0: p8 start 3542136138 is beyond EOD, 
[  360.749511]  ? lookup_open+0x5d1/0x1750
[  360.760238] truncated
[  360.763309]  ? prep_transhuge_page+0xa0/0xa0
[  360.763320]  ? pud_val+0x6c/0xd0
[  360.763330]  ? pmd_val+0xd0/0xd0
[  360.786062]  ? trace_hardirqs_on+0x10/0x10
[  360.790834]  __handle_mm_fault+0x23ac/0x3280
[  360.795258]  ? copy_page_range+0x1d70/0x1d70
[  360.799686]  ? find_held_lock+0x2d/0x110
[  360.803859]  handle_mm_fault+0x288/0x7a0
[  360.807937]  __do_page_fault+0x4bc/0xb40
[  360.812030]  ? vmalloc_fault+0xdf0/0xdf0
[  360.816103]  ? do_page_fault+0x60/0x4f2
[  360.820092]  page_fault+0x25/0x50
[  360.823562] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  360.829485] RSP: 0018:ffff888055c77968 EFLAGS: 00010206
[  360.834853] RAX: ffffed100ab8ef5b RBX: 0000000000000100 RCX: 0000000000000100
[  360.842130] RDX: 0000000000000100 RSI: ffff888055c779d8 RDI: 0000000020000040
[  360.849939] RBP: ffff888055c779d8 R08: ffffed100ab8ef5b R09: 0000000000000003
[  360.857223] R10: ffffed100ab8ef5a R11: ffff888055c77ad7 R12: 0000000020000040
[  360.864504] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  360.871809]  _copy_to_user+0xaa/0xd0
[  360.875542]  con_get_trans_old+0x182/0x200
[  360.879792]  ? con_set_default_unimap+0x390/0x390
[  360.884662]  ? security_capable+0x88/0xb0
[  360.888824]  vt_ioctl+0x7a8/0x1f20
[  360.892377]  ? complete_change_console+0x350/0x350
[  360.897315]  ? avc_ss_reset+0x100/0x100
[  360.901314]  ? get_pid_task+0x91/0x130
[  360.905214]  ? __lock_acquire+0x5f7/0x4620
[  360.909459]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  360.913791]  ? complete_change_console+0x350/0x350
[  360.918739]  tty_ioctl+0x6c5/0x1220
[  360.922393]  ? tty_vhangup+0x30/0x30
[  360.926118]  ? trace_hardirqs_on+0x10/0x10
[  360.930375]  ? tty_vhangup+0x30/0x30
[  360.934109]  do_vfs_ioctl+0x75a/0xfe0
[  360.938788]  ? selinux_file_mprotect+0x5c0/0x5c0
[  360.943552]  ? ioctl_preallocate+0x1a0/0x1a0
[  360.947995]  ? security_file_ioctl+0x76/0xb0
[  360.952413]  ? security_file_ioctl+0x83/0xb0
[  360.956840]  SyS_ioctl+0x7f/0xb0
[  360.960222]  ? do_vfs_ioctl+0xfe0/0xfe0
[  360.964206]  do_syscall_64+0x1d5/0x640
[  360.968113]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  360.973406] RIP: 0033:0x45c829
[  360.976599] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  360.985358] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  360.992658] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
02:42:13 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = dup2(r2, r4)
ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f0000000100)={0x7, "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"})
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="0010000000000000fbffffffffffffff0400000000000000", @ANYRES32=r1, @ANYBLOB="000000000200"/28, @ANYRES32=r2, @ANYBLOB="00000000dc8900"/28, @ANYRES32=r3, @ANYBLOB="00000000010000800000000000000000000000000000000000e30000", @ANYRES32=r6, @ANYBLOB="000024cec0ab000100000000000000000019000000000000000000da0ed2706fb9ec9d801927b49c67a8288cc59921b0cfeffc74990efd6552b79a76eabc10a0fec255f235f6ca1bd2ec9e0b98b19a60c8b1465d1d7f13b3afcfa16bf45a94f70d356006899c6700e2d45ce804b549a971881645d10308022bd3ef5281c30b398be38ebaaa497af6"])
r7 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff)
shmctl$SHM_UNLOCK(r7, 0xc)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:13 executing program 0:
r0 = epoll_create(0x2000007)
r1 = userfaultfd(0x80800)
ioctl$int_out(r1, 0x5464, &(0x7f0000000080))
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xa0000000})
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  360.999932] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  361.007240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  361.014575] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
[  361.053503] audit: type=1800 audit(1589251333.421:91): pid=18008 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0
[  361.057229]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:13 executing program 1 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:13 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x2, {0x9, 0x3, 0x14000000, 0xbcb0}})

[  361.117983] audit: type=1400 audit(1589251333.451:92): avc:  denied  { block_suspend } for  pid=18003 comm="syz-executor.0" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  361.141318] loop0: p1 start 2564762831 is beyond EOD, truncated
02:42:13 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
syslog(0x9, &(0x7f0000000040)=""/124, 0x7c)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x1000, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xfe3, 0x3, 0x9, 0x7f, 0x9, 0x5, 0x6, 0x87, r5}, &(0x7f0000000100)=0x20)

02:42:13 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000))

02:42:13 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4001, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080))

[  361.167200] loop0: p2 start 2494347297 is beyond EOD, truncated
[  361.173557] FAULT_INJECTION: forcing a failure.
[  361.173557] name failslab, interval 1, probability 0, space 0, times 0
[  361.183819] loop0: p3 start 1915790064 is beyond EOD, truncated
[  361.206187] CPU: 0 PID: 18015 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  361.214099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  361.215013] loop0: p4 start 983213520 is beyond EOD, 
[  361.223457] Call Trace:
[  361.223480]  dump_stack+0x13e/0x194
[  361.223496]  should_fail.cold+0x10a/0x14b
[  361.223511]  should_failslab+0xd6/0x130
[  361.223522]  kmem_cache_alloc+0x2b5/0x770
[  361.243148] truncated
[  361.247310]  ? anon_vma_compatible+0x5d/0x290
[  361.247324]  __anon_vma_prepare+0x19b/0x370
02:42:13 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="4d02f83c0f5c828666bd242ee877278a87e507bbe0b0a3e44bd2e353e7cdb9708211cd2f7bf1c5a0ad847f003aa73b050c2b6a7e2bc3e45cceac55775496c94f7c77238f725e978fa8211b9c9d713c5be9ea50ce7f182b139221a5694659cc67f544a95f65f307c5b397c94459760309ce0d8c4f3fe3e42b9e66181c599175cba03a5f235f002c361300640806d50527b38aeb8e0bf84fc9793cc9a7f91e6fc86fc8b6e9a6683e2933938b59b7eade64599d9af0e8f7bf1c061a4438e996f913046fed161775287a84f9", 0xca}, {&(0x7f0000000140)="26a1e5f40fdf88bef6dab9474a5784190eb86cf93ee2fcdb7f46be2a98e7a021116338fc881df879622e2ad36c7173449992909646fb4efe72a2a6c10c0076759ea26beb70917f7a3a0d97facb60d8b63c37f4614edcba1b1521d9c733ea4b52ffa12be73374a83b0bb75d31bd7f5230c71408473ee89d0bdf4e037e8a139f53ee3051270e77ea04f71e517580", 0x8d}, {&(0x7f0000000200)="cbff767abbaedfaefa0bc1ab0f527b67a2b93150d6c2e3211dbff766124bb064838c5a51182e894b2b7e7e2d2efe85c4159251d1efb8c02b49aa4bdb8ea3707740b0cac8d9de9d3c28747e79f46d29f1310c45733fc6f2c8dcfc3aec32d913199f39b48bd45c11aa438901b24d4e7a76626cda048fb83b0bafd056dda53ad09163a16e60d2af28a6c901ade27ebe1e5062aa348b6cc796e230646a6ebf77", 0x9e}], 0x3, 0x0)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x2, 0x0, 0x0})

[  361.254288] loop0: p5 start 676962771 is beyond EOD, 
[  361.261265]  do_huge_pmd_anonymous_page+0xc7d/0x11e0
[  361.261277]  ? lock_downgrade+0x6e0/0x6e0
[  361.277703] truncated
[  361.280109]  ? prep_transhuge_page+0xa0/0xa0
[  361.280122]  ? pud_val+0x6c/0xd0
[  361.290272]  ? pmd_val+0xd0/0xd0
[  361.290497] loop0: p6 start 3159018777 is beyond EOD, 
[  361.293633]  ? trace_hardirqs_on+0x10/0x10
[  361.293647]  __handle_mm_fault+0x23ac/0x3280
[  361.293658]  ? copy_page_range+0x1d70/0x1d70
[  361.293669]  ? find_held_lock+0x2d/0x110
[  361.293687]  handle_mm_fault+0x288/0x7a0
[  361.304458] truncated
[  361.307571]  __do_page_fault+0x4bc/0xb40
[  361.307585]  ? vmalloc_fault+0xdf0/0xdf0
[  361.316399] loop0: p7 start 745035705 is beyond EOD, 
[  361.320085]  ? do_page_fault+0x60/0x4f2
[  361.320098]  page_fault+0x25/0x50
[  361.320111] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  361.330225] truncated
[  361.330590] RSP: 0000:ffff88805533f968 EFLAGS: 00010206
[  361.342414] loop0: p8 start 3542136138 is beyond EOD, 
[  361.346289] RAX: ffffed100aa67f5b RBX: 0000000000000100 RCX: 0000000000000100
[  361.346294] RDX: 0000000000000100 RSI: ffff88805533f9d8 RDI: 0000000020000040
[  361.346299] RBP: ffff88805533f9d8 R08: ffffed100aa67f5b R09: 0000000000000003
[  361.346303] R10: ffffed100aa67f5a R11: ffff88805533fad7 R12: 0000000020000040
[  361.346309] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  361.346338]  _copy_to_user+0xaa/0xd0
[  361.346351]  con_get_trans_old+0x182/0x200
[  361.355530] truncated
[  361.360003]  ? con_set_default_unimap+0x390/0x390
[  361.360030]  ? security_capable+0x88/0xb0
[  361.421614]  vt_ioctl+0x7a8/0x1f20
[  361.421624]  ? complete_change_console+0x350/0x350
[  361.421634]  ? avc_ss_reset+0x100/0x100
[  361.421648]  ? get_pid_task+0x91/0x130
[  361.421662]  ? __lock_acquire+0x5f7/0x4620
[  361.421672]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  361.421679]  ? complete_change_console+0x350/0x350
[  361.421690]  tty_ioctl+0x6c5/0x1220
[  361.421700]  ? tty_vhangup+0x30/0x30
[  361.421712]  ? trace_hardirqs_on+0x10/0x10
[  361.421730]  ? tty_vhangup+0x30/0x30
[  361.467261]  do_vfs_ioctl+0x75a/0xfe0
[  361.467273]  ? selinux_file_mprotect+0x5c0/0x5c0
[  361.467284]  ? ioctl_preallocate+0x1a0/0x1a0
[  361.467311]  ? security_file_ioctl+0x76/0xb0
02:42:13 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000100)={0x6, [[0xfffffff9, 0x5, 0x2, 0x2, 0x80, 0x1, 0x0, 0xb9be], [0xd1bc, 0x4c, 0x4, 0x6834, 0x200, 0x20, 0x308, 0x442f], [0x7, 0x4, 0xffff83b4, 0x2, 0xd9, 0x0, 0x1, 0x3ff]], [], [{0x6, 0x8, 0x0, 0x1, 0x0, 0x1}, {0xfffffffa, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x7f, 0x8, 0x1, 0x0, 0x1}, {0x6, 0x7f13, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x20d, 0x0, 0x1}, {0x9, 0x81, 0x1, 0x0, 0x1, 0x1}, {0xff, 0x583e, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ff, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x200, 0x4e3f7191, 0x1, 0x1, 0x1}, {0x4, 0xe11, 0x0, 0x0, 0x1}, {0x1f, 0xda, 0x1, 0x1, 0x0, 0x1}], [], 0x40})
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r3, 0x0, 0x10002)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r3})
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040))

[  361.467320]  ? security_file_ioctl+0x83/0xb0
[  361.467331]  SyS_ioctl+0x7f/0xb0
[  361.467340]  ? do_vfs_ioctl+0xfe0/0xfe0
[  361.467351]  do_syscall_64+0x1d5/0x640
[  361.467367]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  361.467375] RIP: 0033:0x45c829
[  361.467380] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  361.467389] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  361.467394] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
[  361.467399] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  361.467404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  361.467408] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
[  361.686029]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  361.686545] loop0: p1 start 2564762831 is beyond EOD, truncated
[  361.686554] loop0: p2 start 2494347297 is beyond EOD, truncated
[  361.686559] loop0: p3 start 1915790064 is beyond EOD, truncated
[  361.686565] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:14 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000080)=0x1)

[  361.686570] loop0: p5 start 676962771 is beyond EOD, truncated
[  361.686577] loop0: p6 start 3159018777 is beyond EOD, truncated
[  361.686583] loop0: p7 start 745035705 is beyond EOD, truncated
[  361.686589] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:14 executing program 1 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  361.881853]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  361.882674] loop0: p1 start 2564762831 is beyond EOD, truncated
[  361.882682] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:14 executing program 0:
r0 = epoll_create(0x2000007)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x9, 0x7, 0x2, 0x9, 0xf, "6ca7099e7be1466c"})
fgetxattr(r0, &(0x7f00000000c0)=@random={'os2.', '/dev/dsp\x00'}, &(0x7f0000000100)=""/215, 0xd7)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  361.882689] loop0: p3 start 1915790064 is beyond EOD, truncated
[  361.882696] loop0: p4 start 983213520 is beyond EOD, truncated
[  361.882703] loop0: p5 start 676962771 is beyond EOD, truncated
[  361.882710] loop0: p6 start 3159018777 is beyond EOD, truncated
[  361.882716] loop0: p7 start 745035705 is beyond EOD, truncated
[  361.882723] loop0: p8 start 3542136138 is beyond EOD, truncated
[  362.069625]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  362.070037] loop0: p1 start 2564762831 is beyond EOD, truncated
[  362.070046] loop0: p2 start 2494347297 is beyond EOD, truncated
[  362.070051] loop0: p3 start 1915790064 is beyond EOD, truncated
[  362.070057] loop0: p4 start 983213520 is beyond EOD, truncated
[  362.070063] loop0: p5 start 676962771 is beyond EOD, truncated
[  362.070069] loop0: p6 start 3159018777 is beyond EOD, truncated
[  362.070075] loop0: p7 start 745035705 is beyond EOD, truncated
[  362.070082] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:14 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000100))
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0xfff, 0x6, 0x4, 0x10000, 0x20, {}, {0x2, 0x1, 0x81, 0x5, 0x6, 0x4, "bd82dbea"}, 0x8, 0x2, @offset=0x100, 0x3, 0x0, r3})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x85, 0x0, 0x6, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:14 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf12}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @remote, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffe1e5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000)

02:42:14 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  362.235122] FAULT_INJECTION: forcing a failure.
[  362.235122] name failslab, interval 1, probability 0, space 0, times 0
02:42:14 executing program 1 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  362.235135] CPU: 1 PID: 18051 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  362.235140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  362.235144] Call Trace:
[  362.235161]  dump_stack+0x13e/0x194
[  362.235178]  should_fail.cold+0x10a/0x14b
[  362.235193]  should_failslab+0xd6/0x130
[  362.235203]  kmem_cache_alloc+0x2b5/0x770
[  362.235218]  ? anon_vma_interval_tree_insert+0x211/0x3e0
[  362.235233]  __khugepaged_enter+0x32/0x330
[  362.235246]  do_huge_pmd_anonymous_page+0xd16/0x11e0
02:42:14 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80200, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$tipc(0x1e, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xf0002016})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

02:42:14 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x181, 0x0)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x9, [0x1020000, 0xa24], 0x4}, 0x10)

[  362.235257]  ? save_trace+0x290/0x290
[  362.235267]  ? prep_transhuge_page+0xa0/0xa0
[  362.235276]  ? pud_val+0x6c/0xd0
[  362.235285]  ? pmd_val+0xd0/0xd0
[  362.235294]  ? trace_hardirqs_on+0x10/0x10
[  362.235305]  __handle_mm_fault+0x23ac/0x3280
[  362.235317]  ? copy_page_range+0x1d70/0x1d70
[  362.235328]  ? find_held_lock+0x2d/0x110
[  362.235347]  handle_mm_fault+0x288/0x7a0
[  362.235359]  __do_page_fault+0x4bc/0xb40
[  362.235370]  ? vmalloc_fault+0xdf0/0xdf0
[  362.235379]  ? do_page_fault+0x60/0x4f2
[  362.235390]  page_fault+0x25/0x50
[  362.235401] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  362.235406] RSP: 0018:ffff888081a4f968 EFLAGS: 00010206
[  362.235414] RAX: ffffed1010349f5b RBX: 0000000000000100 RCX: 0000000000000100
[  362.235419] RDX: 0000000000000100 RSI: ffff888081a4f9d8 RDI: 0000000020000040
[  362.235426] RBP: ffff888081a4f9d8 R08: ffffed1010349f5b R09: 0000000000000003
[  362.235432] R10: ffffed1010349f5a R11: ffff888081a4fad7 R12: 0000000020000040
[  362.235437] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  362.235458]  _copy_to_user+0xaa/0xd0
[  362.235470]  con_get_trans_old+0x182/0x200
[  362.235481]  ? con_set_default_unimap+0x390/0x390
[  362.235509]  ? security_capable+0x88/0xb0
[  362.235522]  vt_ioctl+0x7a8/0x1f20
[  362.235532]  ? complete_change_console+0x350/0x350
[  362.235541]  ? avc_ss_reset+0x100/0x100
[  362.235554]  ? get_pid_task+0x91/0x130
[  362.235567]  ? __lock_acquire+0x5f7/0x4620
[  362.235576]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  362.235583]  ? complete_change_console+0x350/0x350
[  362.235594]  tty_ioctl+0x6c5/0x1220
[  362.235605]  ? tty_vhangup+0x30/0x30
[  362.235617]  ? trace_hardirqs_on+0x10/0x10
[  362.235637]  ? tty_vhangup+0x30/0x30
[  362.235660]  do_vfs_ioctl+0x75a/0xfe0
[  362.235671]  ? selinux_file_mprotect+0x5c0/0x5c0
[  362.235682]  ? ioctl_preallocate+0x1a0/0x1a0
[  362.235701]  ? security_file_ioctl+0x76/0xb0
[  362.235710]  ? security_file_ioctl+0x83/0xb0
[  362.235722]  SyS_ioctl+0x7f/0xb0
[  362.235730]  ? do_vfs_ioctl+0xfe0/0xfe0
[  362.235742]  do_syscall_64+0x1d5/0x640
[  362.235756]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
02:42:14 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000000)=""/136)

[  362.235763] RIP: 0033:0x45c829
[  362.235768] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  362.235777] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  362.235784] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
[  362.235789] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  362.235794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  362.235800] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
02:42:15 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBENT(r5, 0x4b46, &(0x7f00000001c0)={0x1, 0x87, 0xf321})
sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22001004}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0xc0)
openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0)
r6 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  362.415591]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  362.666688] loop0: p1 start 2564762831 is beyond EOD, truncated
[  362.666697] loop0: p2 start 2494347297 is beyond EOD, truncated
[  362.666703] loop0: p3 start 1915790064 is beyond EOD, truncated
[  362.666709] loop0: p4 start 983213520 is beyond EOD, truncated
[  362.666715] loop0: p5 start 676962771 is beyond EOD, truncated
[  362.666722] loop0: p6 start 3159018777 is beyond EOD, truncated
[  362.666728] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:15 executing program 1 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  362.666733] loop0: p8 start 3542136138 is beyond EOD, truncated
[  362.715740] FAULT_INJECTION: forcing a failure.
[  362.715740] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  362.715751] CPU: 1 PID: 18073 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  362.715757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  362.715761] Call Trace:
[  362.715777]  dump_stack+0x13e/0x194
[  362.715792]  should_fail.cold+0x10a/0x14b
[  362.715806]  __alloc_pages_nodemask+0x1bf/0x700
[  362.715817]  ? find_held_lock+0x2d/0x110
[  362.715828]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  362.715841]  ? lock_downgrade+0x6e0/0x6e0
[  362.715854]  ? anon_vma_interval_tree_insert+0x211/0x3e0
[  362.715863]  alloc_pages_vma+0x310/0x4a0
[  362.715876]  do_huge_pmd_anonymous_page+0x386/0x11e0
02:42:15 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff, 0x1000, 0x3}})
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x40000000})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  362.715890]  ? prep_transhuge_page+0xa0/0xa0
[  362.715898]  ? pud_val+0x6c/0xd0
[  362.715908]  ? pmd_val+0xd0/0xd0
[  362.715915]  ? trace_hardirqs_on+0x10/0x10
[  362.715924]  __handle_mm_fault+0x23ac/0x3280
[  362.715941]  ? copy_page_range+0x1d70/0x1d70
[  362.715952]  ? find_held_lock+0x2d/0x110
[  362.715970]  handle_mm_fault+0x288/0x7a0
[  362.715981]  __do_page_fault+0x4bc/0xb40
[  362.715991]  ? vmalloc_fault+0xdf0/0xdf0
[  362.715999]  ? do_page_fault+0x60/0x4f2
[  362.716007]  page_fault+0x25/0x50
[  362.716016] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  362.716020] RSP: 0018:ffff88804d107968 EFLAGS: 00010206
[  362.716027] RAX: ffffed1009a20f5b RBX: 0000000000000100 RCX: 0000000000000100
[  362.716031] RDX: 0000000000000100 RSI: ffff88804d1079d8 RDI: 0000000020000040
[  362.716035] RBP: ffff88804d1079d8 R08: ffffed1009a20f5b R09: 0000000000000003
[  362.716039] R10: ffffed1009a20f5a R11: ffff88804d107ad7 R12: 0000000020000040
[  362.716043] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  362.716061]  _copy_to_user+0xaa/0xd0
[  362.716073]  con_get_trans_old+0x182/0x200
[  362.716084]  ? con_set_default_unimap+0x390/0x390
[  362.716114]  ? security_capable+0x88/0xb0
[  362.716125]  vt_ioctl+0x7a8/0x1f20
[  362.716136]  ? complete_change_console+0x350/0x350
[  362.716144]  ? avc_ss_reset+0x100/0x100
[  362.716157]  ? get_pid_task+0x91/0x130
[  362.716169]  ? __lock_acquire+0x5f7/0x4620
[  362.716178]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  362.716185]  ? complete_change_console+0x350/0x350
[  362.716197]  tty_ioctl+0x6c5/0x1220
[  362.716208]  ? tty_vhangup+0x30/0x30
[  362.716220]  ? trace_hardirqs_on+0x10/0x10
[  362.716239]  ? tty_vhangup+0x30/0x30
[  362.716252]  do_vfs_ioctl+0x75a/0xfe0
[  362.716262]  ? selinux_file_mprotect+0x5c0/0x5c0
[  362.716274]  ? ioctl_preallocate+0x1a0/0x1a0
[  362.716293]  ? security_file_ioctl+0x76/0xb0
[  362.716303]  ? security_file_ioctl+0x83/0xb0
[  362.716312]  SyS_ioctl+0x7f/0xb0
[  362.716320]  ? do_vfs_ioctl+0xfe0/0xfe0
[  362.716333]  do_syscall_64+0x1d5/0x640
[  362.716348]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  362.716355] RIP: 0033:0x45c829
[  362.716361] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  362.716370] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  362.716376] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
[  362.716381] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  362.716387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  362.716392] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
[  362.896319]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  362.896907] loop0: p1 start 2564762831 is beyond EOD, truncated
[  362.896915] loop0: p2 start 2494347297 is beyond EOD, truncated
[  362.896921] loop0: p3 start 1915790064 is beyond EOD, truncated
[  362.896927] loop0: p4 start 983213520 is beyond EOD, truncated
[  362.896933] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:15 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000040)={0x2, 0xb52c})

02:42:15 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r6)
write$P9_RGETATTR(r1, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x0, {0x20, 0x3, 0x2}, 0x601d79d194d4db46, r4, r6, 0x0, 0x80000001, 0x5, 0x3f, 0x0, 0x8, 0x0, 0xfffffffffffffff7, 0x0, 0x6, 0x80, 0x9, 0x8, 0xffff, 0x4}}, 0xa0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  362.896939] loop0: p6 start 3159018777 is beyond EOD, truncated
[  362.896946] loop0: p7 start 745035705 is beyond EOD, truncated
[  362.896952] loop0: p8 start 3542136138 is beyond EOD, truncated
[  363.212767] FAULT_INJECTION: forcing a failure.
[  363.212767] name fail_page_alloc, interval 1, probability 0, space 0, times 0
02:42:15 executing program 1 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:15 executing program 5:
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x3)
dup(r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x8201, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x440, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4)

[  363.212779] CPU: 0 PID: 18096 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  363.212785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  363.212788] Call Trace:
[  363.212806]  dump_stack+0x13e/0x194
[  363.212822]  should_fail.cold+0x10a/0x14b
[  363.212837]  __alloc_pages_nodemask+0x1bf/0x700
[  363.212850]  ? refill_stock+0x270/0x270
[  363.212859]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  363.212870]  ? lock_downgrade+0x6e0/0x6e0
[  363.212884]  ? get_mem_cgroup_from_mm+0x157/0x460
[  363.212895]  alloc_pages_current+0xe7/0x1e0
[  363.212905]  ? mem_cgroup_try_charge+0x3ca/0x670
[  363.212917]  pte_alloc_one+0x15/0x100
[  363.212929]  do_huge_pmd_anonymous_page+0x561/0x11e0
[  363.212943]  ? prep_transhuge_page+0xa0/0xa0
[  363.212953]  ? pud_val+0x6c/0xd0
[  363.212962]  ? pmd_val+0xd0/0xd0
[  363.212971]  ? trace_hardirqs_on+0x10/0x10
[  363.212983]  __handle_mm_fault+0x23ac/0x3280
[  363.212995]  ? copy_page_range+0x1d70/0x1d70
[  363.213008]  ? find_held_lock+0x2d/0x110
[  363.213030]  handle_mm_fault+0x288/0x7a0
[  363.213042]  __do_page_fault+0x4bc/0xb40
[  363.213055]  ? vmalloc_fault+0xdf0/0xdf0
[  363.213063]  ? do_page_fault+0x60/0x4f2
[  363.213072]  page_fault+0x25/0x50
[  363.213091] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  363.213096] RSP: 0018:ffff88804e0bf968 EFLAGS: 00010206
[  363.213106] RAX: ffffed1009c17f5b RBX: 0000000000000100 RCX: 0000000000000100
[  363.213112] RDX: 0000000000000100 RSI: ffff88804e0bf9d8 RDI: 0000000020000040
[  363.213119] RBP: ffff88804e0bf9d8 R08: ffffed1009c17f5b R09: 0000000000000003
[  363.213125] R10: ffffed1009c17f5a R11: ffff88804e0bfad7 R12: 0000000020000040
[  363.213131] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  363.213152]  _copy_to_user+0xaa/0xd0
[  363.213164]  con_get_trans_old+0x182/0x200
[  363.213177]  ? con_set_default_unimap+0x390/0x390
[  363.213207]  ? security_capable+0x88/0xb0
[  363.213221]  vt_ioctl+0x7a8/0x1f20
[  363.213234]  ? complete_change_console+0x350/0x350
[  363.213243]  ? avc_ss_reset+0x100/0x100
[  363.213256]  ? get_pid_task+0x91/0x130
[  363.213270]  ? __lock_acquire+0x5f7/0x4620
[  363.213280]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  363.213288]  ? complete_change_console+0x350/0x350
[  363.213300]  tty_ioctl+0x6c5/0x1220
[  363.213310]  ? tty_vhangup+0x30/0x30
[  363.213323]  ? trace_hardirqs_on+0x10/0x10
[  363.213344]  ? tty_vhangup+0x30/0x30
[  363.213356]  do_vfs_ioctl+0x75a/0xfe0
[  363.213366]  ? selinux_file_mprotect+0x5c0/0x5c0
[  363.213378]  ? ioctl_preallocate+0x1a0/0x1a0
[  363.213398]  ? security_file_ioctl+0x76/0xb0
[  363.213407]  ? security_file_ioctl+0x83/0xb0
[  363.213419]  SyS_ioctl+0x7f/0xb0
[  363.213428]  ? do_vfs_ioctl+0xfe0/0xfe0
[  363.213440]  do_syscall_64+0x1d5/0x640
[  363.213456]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  363.213463] RIP: 0033:0x45c829
[  363.213468] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.213493] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  363.213499] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
02:42:16 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[&(0x7f0000000000)="941c281373abf41654dc8bbcda42f65a74052e511765c02586801943e0f967ff1c499a4d845fedbafb498abd", &(0x7f0000000040)], 0xf80})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:16 executing program 1 (fault-call:1 fault-nth:6):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  363.213505] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  363.213511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  363.213517] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
[  363.326986] Unknown ioctl 35090
[  363.413446] Unknown ioctl 35090
[  363.672269] FAULT_INJECTION: forcing a failure.
[  363.672269] name failslab, interval 1, probability 0, space 0, times 0
[  363.672280] CPU: 0 PID: 18117 Comm: syz-executor.1 Not tainted 4.14.180-syzkaller #0
[  363.672286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  363.672290] Call Trace:
[  363.672305]  dump_stack+0x13e/0x194
[  363.672322]  should_fail.cold+0x10a/0x14b
02:42:16 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24004080)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21e01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendfile(r5, r0, 0x0, 0x10002)

[  363.672335]  should_failslab+0xd6/0x130
[  363.672344]  kmem_cache_alloc+0x2b5/0x770
[  363.672360]  ? get_mem_cgroup_from_mm+0x157/0x460
[  363.672375]  ptlock_alloc+0x1d/0x70
[  363.672387]  pte_alloc_one+0x57/0x100
[  363.672398]  do_huge_pmd_anonymous_page+0x561/0x11e0
[  363.672412]  ? save_trace+0x290/0x290
[  363.672424]  ? prep_transhuge_page+0xa0/0xa0
[  363.672434]  ? pud_val+0x6c/0xd0
[  363.672443]  ? pmd_val+0xd0/0xd0
[  363.672451]  ? trace_hardirqs_on+0x10/0x10
[  363.672461]  __handle_mm_fault+0x23ac/0x3280
[  363.672472]  ? copy_page_range+0x1d70/0x1d70
[  363.672482]  ? find_held_lock+0x2d/0x110
[  363.672502]  handle_mm_fault+0x288/0x7a0
[  363.672513]  __do_page_fault+0x4bc/0xb40
[  363.672525]  ? vmalloc_fault+0xdf0/0xdf0
[  363.672534]  ? do_page_fault+0x60/0x4f2
[  363.672546]  page_fault+0x25/0x50
[  363.672558] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  363.672564] RSP: 0018:ffff888051087968 EFLAGS: 00010206
[  363.672573] RAX: ffffed100a210f5b RBX: 0000000000000100 RCX: 0000000000000100
[  363.672578] RDX: 0000000000000100 RSI: ffff8880510879d8 RDI: 0000000020000040
[  363.672583] RBP: ffff8880510879d8 R08: ffffed100a210f5b R09: 0000000000000003
[  363.672588] R10: ffffed100a210f5a R11: ffff888051087ad7 R12: 0000000020000040
[  363.672593] R13: 00007ffffffff000 R14: 0000000020000140 R15: 00000000ffffffff
[  363.672612]  _copy_to_user+0xaa/0xd0
[  363.672623]  con_get_trans_old+0x182/0x200
[  363.672636]  ? con_set_default_unimap+0x390/0x390
02:42:16 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

[  363.672667]  ? security_capable+0x88/0xb0
[  363.672680]  vt_ioctl+0x7a8/0x1f20
[  363.672691]  ? complete_change_console+0x350/0x350
[  363.672700]  ? avc_ss_reset+0x100/0x100
[  363.672712]  ? get_pid_task+0x91/0x130
[  363.672724]  ? __lock_acquire+0x5f7/0x4620
[  363.672733]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  363.672740]  ? complete_change_console+0x350/0x350
[  363.672751]  tty_ioctl+0x6c5/0x1220
[  363.672761]  ? tty_vhangup+0x30/0x30
[  363.672773]  ? trace_hardirqs_on+0x10/0x10
[  363.672792]  ? tty_vhangup+0x30/0x30
[  363.672803]  do_vfs_ioctl+0x75a/0xfe0
[  363.672813]  ? selinux_file_mprotect+0x5c0/0x5c0
[  363.672823]  ? ioctl_preallocate+0x1a0/0x1a0
[  363.672842]  ? security_file_ioctl+0x76/0xb0
[  363.672851]  ? security_file_ioctl+0x83/0xb0
[  363.672861]  SyS_ioctl+0x7f/0xb0
[  363.672870]  ? do_vfs_ioctl+0xfe0/0xfe0
[  363.672881]  do_syscall_64+0x1d5/0x640
[  363.672895]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  363.672902] RIP: 0033:0x45c829
[  363.672907] RSP: 002b:00007f48b66bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.672915] RAX: ffffffffffffffda RBX: 00000000004e5820 RCX: 000000000045c829
[  363.672920] RDX: 0000000020000040 RSI: 0000000000004b40 RDI: 0000000000000003
[  363.672925] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  363.672930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  363.672935] R13: 0000000000000331 R14: 00000000004c5965 R15: 00007f48b66bf6d4
02:42:16 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = getpid()
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0x24, 0x33, 0x14, 0x1d, 0x6, 0x2, 0x5, 0xb8})
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x1a, 0x4, @tid=r1}, &(0x7f0000000080)=<r4=>0x0)
timer_getoverrun(r4)

02:42:16 executing program 0:
r0 = epoll_create(0x2080007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d10, &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x18e, 0x10002)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000180), 0x4)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x5612c1, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x4, 0x800, 0x5, 0x0, 0x6})
sendfile(r5, r4, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r6 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
r7 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x7ac841, 0x94)
ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0)

02:42:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x2, 'hsr0\x00', {0x6}, 0x7fff})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
r3 = epoll_create(0x1000)
preadv(r3, &(0x7f0000001380)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/209, 0xd1}, {&(0x7f0000001200)=""/45, 0x2d}, {&(0x7f0000001240)=""/151, 0x97}, {&(0x7f0000001300)=""/110, 0x6e}], 0x5, 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  364.132459]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  364.140660] loop0: p1 start 2564762831 is beyond EOD, truncated
[  364.151608] loop0: p2 start 2494347297 is beyond EOD, truncated
[  364.172189] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:16 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x7, 0xc, 0x0, 0x0})

[  364.185063] loop0: p4 start 983213520 is beyond EOD, truncated
[  364.191208] loop0: p5 start 676962771 is beyond EOD, truncated
[  364.199549] loop0: p6 start 3159018777 is beyond EOD, truncated
[  364.206483] loop0: p7 start 745035705 is beyond EOD, truncated
[  364.213246] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:16 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))

02:42:16 executing program 4:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x1000, 0x3e58, 0x81, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:16 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x400140, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x4, 0x3}, {0x9, 0x800}, {0x2, 0x6}, {0x6}, {0x101, 0x2}]})

02:42:16 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x85, 0x5, 0xfff8, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:16 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x16201, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x18d)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/diskstats\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x1003)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc)

02:42:16 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x24, 0x9, 0x0, 0xe8, 0x1, 0x3, 0x3, 0x7fff, 0x2db, 0x40, 0x2d3, 0x3, 0x9b4e, 0x38, 0x2, 0x3, 0xff7e, 0x3}, [{0x6474e551, 0xbf3, 0xffffffffffffffff, 0x6, 0x4, 0x100000000, 0x8, 0x7fff}, {0x1, 0xffffffff, 0x7, 0x3, 0x4, 0x9, 0x1ff, 0x8001}], "929458c8abcff3656c218bc6b84e8ab08aa8cfbdfe549244e73a070c36a06594b80fc00ecbf2f61db07f5d4a5d64467c6bcfba129c0d86d313746eaf176651261b7f559dcc4708cc9abc033adbf17564744dd3d8115ca8df3a99644bf25660031aadc6f5cc9319ac9056ec6c7ecbb9c63d38a04aa3f9236b709b1df1d7c2b4474a2bbb45a0a404cc120d00467f952bab3aa0b6724b9b46a5fc4191392d741a948d7f76b6f46dd2983f8c2e243b31367d898ced3ffb2a916e2fc3a1d2610537fc7ff9759097", [[], []]}, 0x375)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x4000009, 0x704a00)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r2})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000040)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0xc, 0x1a, 0x12e, 0x0})

02:42:16 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = dup3(r1, r4, 0x80000)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x10008044)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:17 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  364.715258]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  364.725340] loop0: p1 start 2564762831 is beyond EOD, truncated
[  364.739723] loop0: p2 start 2494347297 is beyond EOD, truncated
[  364.776885] loop0: p3 start 1915790064 is beyond EOD, truncated
[  364.776895] loop0: p4 start 983213520 is beyond EOD, truncated
[  364.776902] loop0: p5 start 676962771 is beyond EOD, truncated
[  364.776908] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:17 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4, 0xfffc}}}, 0x90)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @mcast2, 0xfff}, {0xa, 0x4e22, 0x10000, @remote, 0x8}, r3, 0xea4a}}, 0x48)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  364.776915] loop0: p7 start 745035705 is beyond EOD, truncated
[  364.776920] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:17 executing program 0:
r0 = epoll_create(0x2000007)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2b0f000000000000000800000000"], 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4001)

02:42:17 executing program 1:
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:17 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000400)={0xab, 0x13, &(0x7f0000000000)="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"})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0xffff)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={<r8=>r7, 0x63, 0x20, 0x401, 0x180000}, &(0x7f0000000540)=0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e22, 0x98c, @mcast2, 0x7}}, 0x0, 0x101}, 0x90)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000480)={0x3, 0x80, [0x8, 0x2, 0xfff, 0x7fff], 0x20})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x2, 0x0)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  365.082401]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  365.088210] loop0: p1 start 2564762831 is beyond EOD, truncated
[  365.099411] loop0: p2 start 2494347297 is beyond EOD, truncated
[  365.106590] loop0: p3 start 1915790064 is beyond EOD, truncated
[  365.113225] loop0: p4 start 983213520 is beyond EOD, truncated
[  365.119205] loop0: p5 start 676962771 is beyond EOD, truncated
[  365.125526] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:17 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

[  365.131965] loop0: p7 start 745035705 is beyond EOD, truncated
[  365.138512] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:17 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$chown(0x4, r2, 0x0, 0x0)
keyctl$clear(0x7, r2)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000080)={0x18, 0x1, 0xdd07e66, 0x6})

02:42:17 executing program 4:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x3ff, 0x9})
r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="7be04e1ff60ec11fdd06ca20dd7a8487b4a27fdcc1967e7c5cd8c545a521d830f1dc0259331724c1b05c6b1548ef19ace8bdf166957337cf924b3055aeb515e496a3accd2a9c221df5326cc1eee752aad04ee157365a4a1bf579df5180ab5acfd19bdb94338f7658eb6d7895d47bbffc514824d483dc81f3b233d4f5f3aa935dc3cf959a7097687a652670c2a8f9e6ee1560dfa5d9a304926fa53984ed7d5d74b4cbc52e2853aaf5bd17", 0xaa, 0xfffffffffffffffa)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1)
r2 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="fb9286625989b1c75e0e37e23f91444d793bec6224d5ea55a724ada04446cd9b89512d05b9eadb4662458429039485c731e2042b957a23a8ef34ed2a94b2562fe501922cd56dae8879e48ab77306cb9ead865d5bf5006130aa33c01a19c7ebf4e344013f265d635c40ab73ccd058d1d71555004d6d8288e7551c6d77019ee409028dd9d6fff148376f45a13c0729d3989a13085eb7d6d402a56a3064f2a3fc897228a0146276e286228e100ff2b0ac06c4ccf7003c47b772816353663fc12902e1a7e792041645ab635933d43946884ad13a04e9ff0b63c9aa5480de3b1726793bca58a44762b0cae8088d", 0xeb, r1)
keyctl$negate(0xd, r0, 0x15, r2)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:42:17 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x200, 0x2, {<r4=>r1}, {r3}, 0x9, 0x7})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x81, 0x7f, 0x4, 0x8, 0x0, 0x8000, 0x36880, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x61, 0x5, @perf_config_ext={0x25, 0x100000001}, 0x4000, 0x4, 0x5, 0x5, 0x2, 0x48, 0x2}, r4, 0xd, r5, 0x12)

02:42:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="35096829bc6e10d16f3758b6fcb9c088cd96cd53954cd5135d47804de0539093c1a9678da038eda8eca242857beca54d255b45ebf219ccfb45f1d40e72bfc79ebb5c64432c365a838cce192f23e4cf1183facb35573fc4fb77b029f2f5f90531b9d1720181ca72d7e0ab59083e9b260764418eee8c009b4c2a18e5f15af38478c9c7a800d5e345ac25f264")
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x8, 0x4)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x7, 0x4})

[  365.335249]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  365.350707] loop0: p1 start 2564762831 is beyond EOD, truncated
[  365.361868] loop0: p2 start 2494347297 is beyond EOD, truncated
[  365.370459] loop0: p3 start 1915790064 is beyond EOD, truncated
[  365.379155] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:17 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:17 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100))
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r1, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  365.391395] loop0: p5 start 676962771 is beyond EOD, truncated
[  365.399145] loop0: p6 start 3159018777 is beyond EOD, truncated
[  365.408737] loop0: p7 start 745035705 is beyond EOD, truncated
[  365.419985] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:17 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000040)={0x5, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @empty}}}, 0x108)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:18 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xa33, 0x20, 0x200}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)

02:42:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast2, 0x4e24, 0x4, 'fo\x00', 0x6, 0x4, 0x10}, 0x2c)
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  365.657163]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  365.674106] loop0: p1 start 2564762831 is beyond EOD, truncated
[  365.687220] loop0: p2 start 2494347297 is beyond EOD, truncated
[  365.700713] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:18 executing program 0:
r0 = epoll_create(0x7)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010400000000000000000000000045991081fa95d9dae8e326d0d9ec8b9f081e8de052774e58d2e1e6f0a80ed3b20e7451e9c48f9d5e9572aca8ee517ca64ad78e98d15c41caaa44bc519c1c0f2119ba9ca704b2aafdfb3d42afe9f7", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000900000008000500", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000038009b536fe0128009000500766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000900000008000500", @ANYRES32=r10, @ANYBLOB], 0x60}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x68, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20005c1, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xec1, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa1, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40084)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000008})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xfffe, 0x40, 0x1fb, 0x300, 0x1b}})
fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)

[  365.708347] loop0: p4 start 983213520 is beyond EOD, truncated
[  365.723581] loop0: p5 start 676962771 is beyond EOD, truncated
[  365.729728] loop0: p6 start 3159018777 is beyond EOD, truncated
[  365.741314] loop0: p7 start 745035705 is beyond EOD, truncated
[  365.748986] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:18 executing program 4:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x85, 0x0, 0x0, 0x9})
syz_open_dev$tty1(0xc, 0x4, 0x2)

[  365.861618] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:18 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/23)
syz_open_dev$ptys(0xc, 0x3, 0x1)

02:42:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xa33, 0x20, 0x200}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[  365.916173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:18 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x4004, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$KVM_SMI(r1, 0xaeb7)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000100)=@rose)
r6 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="017846479230ece17b40579c99961e88ae3672d1d69235c6c6696fdb365f0bb63c9a9eff8f82ffbc794402cad23f2c", @ANYRES32=<r8=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={r8, 0xe685}, &(0x7f0000000200)=0x8)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$sock_ifreq(r1, 0x8919, &(0x7f0000000000)={'hsr0\x00', @ifru_flags=0x400})

[  366.009961] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:18 executing program 0:
epoll_create(0xfd)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = memfd_create(&(0x7f00000001c0)='\xb3=\xbb{\xad\xa1<\x1b4\x83e', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)
socket(0x15, 0x5, 0x0)

[  366.088229]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  366.100694] loop0: p1 start 2564762831 is beyond EOD, truncated
[  366.127861] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xa33, 0x20, 0x200}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[  366.142502] loop0: p3 start 1915790064 is beyond EOD, truncated
[  366.157694] loop0: p4 start 983213520 is beyond EOD, truncated
[  366.173909] loop0: p5 start 676962771 is beyond EOD, truncated
[  366.195380] loop0: p6 start 3159018777 is beyond EOD, truncated
[  366.208161] loop0: p7 start 745035705 is beyond EOD, truncated
[  366.219828] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xa33, 0x20, 0x200}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)
syz_open_dev$tty20(0xc, 0x4, 0x1)

02:42:18 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xe0}, 0x2)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440, 0x40)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:18 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)={0x5, 0x0, [{}, {}, {}, {}, {}]})
ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  366.522009]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  366.527801] loop0: p1 start 2564762831 is beyond EOD, truncated
[  366.550079] loop0: p2 start 2494347297 is beyond EOD, truncated
[  366.560270] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:18 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xa33, 0x20, 0x200}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

[  366.569939] loop0: p4 start 983213520 is beyond EOD, truncated
[  366.587379] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x0, 0x0, 0x0, 0x0})

02:42:19 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  366.615050] loop0: p6 start 3159018777 is beyond EOD, truncated
[  366.621157] loop0: p7 start 745035705 is beyond EOD, truncated
[  366.647667] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000100)=0x8c000)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

02:42:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_GET_SECCOMP(0x15)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:19 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040))

[  366.802093]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  366.822869] loop0: p1 start 2564762831 is beyond EOD, truncated
[  366.829009] loop0: p2 start 2494347297 is beyond EOD, truncated
[  366.829018] loop0: p3 start 1915790064 is beyond EOD, truncated
[  366.829025] loop0: p4 start 983213520 is beyond EOD, truncated
[  366.829032] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = socket$netlink(0x10, 0x3, 0x12)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000000200)=0x401, 0x4)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

[  366.829039] loop0: p6 start 3159018777 is beyond EOD, truncated
[  366.829046] loop0: p7 start 745035705 is beyond EOD, truncated
[  366.829053] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:19 executing program 0:
r0 = epoll_create(0x2000008)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x12, 0x1e, 0xd, "09dc6b3bb5c009ceca2522a971478d9a9342ad3f2da1ad385d647449fba9940f36fdee8a92524e3b471e428f29b6900e7424183fee3c41727d22888417e7429e", "426f1613b5fc62c20903184412d3fb35b48a9c5c6d9bc29fc84bbe695a91f57ed652d9dc62ffe19fbcc770075d3a81706d89d415507cb545130f6266e6ea30b1", "e84edd7485ca7f577c329e67957f88965f3af087ade74910eee152521f6f540c", [0x2, 0x680]})
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000200))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  367.011127]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  367.030631] loop0: p1 start 2564762831 is beyond EOD, truncated
[  367.042403] loop0: p2 start 2494347297 is beyond EOD, truncated
[  367.048516] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
socket$netlink(0x10, 0x3, 0x12)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

02:42:19 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  367.082317] loop0: p4 start 983213520 is beyond EOD, truncated
[  367.088438] loop0: p5 start 676962771 is beyond EOD, truncated
[  367.108807] loop0: p6 start 3159018777 is beyond EOD, truncated
[  367.129689] loop0: p7 start 745035705 is beyond EOD, truncated
[  367.136793] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

02:42:19 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x402000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x99}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c880}, 0x40804)

[  367.301373]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  367.313065] loop0: p1 start 2564762831 is beyond EOD, truncated
[  367.325917] loop0: p2 start 2494347297 is beyond EOD, truncated
[  367.333584] loop0: p3 start 1915790064 is beyond EOD, truncated
[  367.333593] loop0: p4 start 983213520 is beyond EOD, truncated
[  367.333599] loop0: p5 start 676962771 is beyond EOD, truncated
[  367.333605] loop0: p6 start 3159018777 is beyond EOD, truncated
[  367.333611] loop0: p7 start 745035705 is beyond EOD, truncated
[  367.333617] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:19 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

02:42:19 executing program 0:
r0 = epoll_create(0x10002)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000000})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0x21, 0x3})
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0)
vmsplice(r3, &(0x7f0000001600)=[{&(0x7f0000000140)="a281ec88254d459695fa30964a45f36eb4f28849127f3e496892de2fe9e2f4256cd0ed57ff79fb0c818a6f2b79776c299cdbc12f07ce0e8f05416ed16c9e55549ccda4658aafdea7fa3ca84658f39908bcdd5505dd0024fba0811db9b32c6cb81ee66814ba73bc0c6c57d29b22c42a90729cef0a4c1ec3682373711c1feec21d8ccea0b96f3e8f5864a462fed9dcda1f5cbc16c9ee9ab34a38017798bd08d2553ac5f7c8626c16fb6943ce6d965888a29588d253ce640efd32a6917848dd6a45e778a263c34a7aca98cac641b44a80ea3578e1aa3b33b39df2557e291491143454a66d4c0b1afc6c600bd614811405", 0xef}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="9add9648785430419324767ecdb9ef2d6bb54c0267be69f2a224137abbe37dda2026962b8ffe7e5818af1a7ddb5cdcc9b90c9d87601d414d92a623740fd1f283f2e0c045e79adafe4a10f0074dc4f1eb940773ba65a9e851a45cac1c2b6a79238e152248c47b6cfa6f9419add1cf9c64917d48edccc905dde8c97a697c6a10b897dd62ef78e69e746225151227423efa16b0a3f8783ca656586566a19a2b2370b90bab09092140c73673fc61314c8e045224da484fbf3f429da7b6a4ca6e2eb50f3e60c6fa8ad3d5fd8661f8a6", 0xcd}, {&(0x7f0000001340)="5d93353e910d9affabed1457cf3b57d2091e9272c1baa33a88e3431b4a3054bce93a9c06c29ae98899fa84a48a45dc707a43c49c3e8f4d0a834461f25a22b4fbb4b7079c860652bff0300f3026258d0c5fe28fa2eadffb1b787777781e1b2b91616d8b58d5edfecf8a349368abbd501af7d7281ed9ecd5032955ca66bd4d41e6", 0x80}, {&(0x7f00000013c0)="d49ecee89f582ced0e3d944a9608c91b12312d59ce77bd0a22b1a61dca9c9faf8f425467ff69326ff8ee087bdc332e6d8eeb94377649877bea756325f5bad87ee29eb791921f2e437a9c4172954ff1e9555cca5431213e85047c3deed685cc92690bbccde5501e0e28668ab078fa1cb754fcc9a38d8bebc167401072e878d8ab7728c8c380eb475ee58aa1649ceea4bff6ce20262b09292dcbb7522d2135553c9550e9a209cac2a417975f3543d329d1eb664a27e2a0ba87be753059aea7405c3f6beb8db9bea03ac04dbc28c9e3799bbad1b95f17421a48485466c8537dd89a8df6f2fe1ce914e7e7f2f6c9", 0xec}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="b3455f7bcbad5b4ca1246bd8cc07c57c69c613dc1c6f494a8b1adbc4da506428ce107cc4cfabbac72dc1b54b54cc83d09b20fcf28b38c5052f813ef033cb3f8dc1ac7fae83b04b54cad234e9d1b5ceac2ce1ca1d6cfb8bbc67e717d67b1d657c79b5dca31035913e8d2c069cc3ab4fff441bf98dcd5ab16ff5607ceca81556e578b63c7a6acbe0f802ee41f54309831d02a68c5606553dd151c80ac5dbc7235ec73d25a5015a8527c89c7b4d929c383375767f9070cbc8f7dac3e62de05f45b690b0d97dc624d66425", 0xc9}], 0x7, 0xc)

02:42:19 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x18, 0x106, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0xfffffffb, 0xffffffed})
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000), 0x4)

[  367.631061]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:20 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:20 executing program 0:
r0 = epoll_create(0x2000007)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  367.672046] loop0: p1 start 2564762831 is beyond EOD, truncated
[  367.690009] loop0: p2 start 2494347297 is beyond EOD, truncated
[  367.702479] loop0: p3 start 1915790064 is beyond EOD, truncated
[  367.716810] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:20 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000040)={0x40002000})
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x0, 0x6, 0x401, 0xff, 0x6, "1f647e9e7814f464"})

[  367.729654] loop0: p5 start 676962771 is beyond EOD, truncated
[  367.753085] loop0: p6 start 3159018777 is beyond EOD, truncated
[  367.765873] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x0, 0x8, 0x13})
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

[  367.778632] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:20 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e24, @empty}})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000010})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:20 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

02:42:20 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  368.076016]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  368.081682] loop0: p1 start 2564762831 is beyond EOD, truncated
[  368.088206] loop0: p2 start 2494347297 is beyond EOD, truncated
[  368.095355] loop0: p3 start 1915790064 is beyond EOD, truncated
[  368.101768] loop0: p4 start 983213520 is beyond EOD, truncated
[  368.112260] loop0: p5 start 676962771 is beyond EOD, truncated
[  368.118257] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0x1a01)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

[  368.129759] loop0: p7 start 745035705 is beyond EOD, truncated
[  368.136643] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x10000000}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r0)
r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000010c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b2c7218a9169c0a8e5f2e97070af0d6d5ff7b8e0fdb87b65e414f421050000e33089754c8107c3cd3923dd4a71c2ff06007b6b481612382550829eaa9435c9992655043d2ce0d23f4d2f6b0bfb1a4ebb022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60027e6fc3c20453bb873f07c9500ce0637ce0000b4ec24c53dc9f2653d661ff5ff70e48884ca000018cea71fcf13ba7e9b0000000000", 0xc0, r1)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00'}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x40, 0x2, 0x4, 0x2000, 0x3, {0x0, 0xea60}, {0x3, 0x2, 0x81, 0x3f, 0x2, 0x14, "b14ae598"}, 0xff, 0x4, @offset=0x80000000, 0x2, 0x0, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, r4, 0x1b}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7)

02:42:20 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000004})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:20 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x9e, 0x8, 0x9, 0x5, 0x3, 0x3, 0x20, 0xff, 0x40, 0x15f, 0x7, 0x5, 0x38, 0x1, 0x7, 0x39, 0x3}, [{0x3, 0x3, 0x6, 0xff72, 0x1, 0x0, 0x1ff, 0x9}], "cc5df21cc8a7e95df4919f1246c01b94d5d026d289e1a1f3ca6f8d2fa9588c5f0b4d2cff63784578539d2f0c4bd5761a79b03a53311c269403fabdb289b5ecbf2cda9c1862a30a5afcdda33f3df4b92efab126498f5b0e2e946b0e45a2a09efdfb8aba99d9da0e48bd617efbe8d20ff9397b4a84cb5ed830f0cc4e20ed46a5fbbc66d81588b3e4548258009140afcf1a692c4734e353b3ae9b8741d4fdf105e0dda6a89cf6316c28c7b3e594a680ff4f0f205ce84389aa47", [[], [], [], [], []]}, 0x630)
r1 = epoll_create(0x2000007)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x4})
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  368.247555]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  368.258092] loop0: p1 start 2564762831 is beyond EOD, truncated
[  368.272465] loop0: p2 start 2494347297 is beyond EOD, truncated
[  368.285179] loop0: p3 start 1915790064 is beyond EOD, truncated
[  368.298218] loop0: p4 start 983213520 is beyond EOD, truncated
[  368.311039] loop0: p5 start 676962771 is beyond EOD, truncated
[  368.332202] loop0: p6 start 3159018777 is beyond EOD, truncated
[  368.338379] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:20 executing program 1:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4b4502, 0x0)
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {<r1=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x2})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080))
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {<r5=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000100)={r5, 0x2})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000001c0)={r5, 0x2})

02:42:20 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x200, 0x8)
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000040))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4)

[  368.352213] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

02:42:20 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00')
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0)
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r5})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
connect$x25(r8, &(0x7f0000000100)={0x9, @null='               \x00'}, 0x12)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040))

02:42:20 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

02:42:20 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x400500)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x3, 0x2, 0x4, 0x0, 0x800, {r1, r2/1000+60000}, {0x4, 0x0, 0x80, 0x0, 0xdc, 0x2, "65350704"}, 0x2, 0x1, @offset, 0x8000, 0x0, <r4=>r3})
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000140)=0x18, 0x4)
open_by_handle_at(r0, &(0x7f0000000040)={0x21, 0x7fff, "02275a358181c38ca09b29c958bca0dc71f925284c97f4370f"}, 0x102)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000180))
ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:21 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/19)

02:42:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r2, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

02:42:21 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x580, 0x304}})
fallocate(r1, 0x40, 0xc45, 0xc5b)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000180)=0x54)

02:42:21 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x0, 0x0, 0x300, 0x2}})
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x18, 0x0, 0x1f6})

02:42:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000140)=""/190)
ioctl$TCSBRKP(r0, 0x5425, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x4)

02:42:21 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$bt_bnep(0x1f, 0x3, 0x4)
fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:21 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x171002, 0xa3fdadcea99c4ae)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000140))
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000))

02:42:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = semget$private(0x0, 0x1, 0x6e)
semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000140)=""/190)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x4)

[  368.950916]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:21 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x802, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRES16=r6, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r5], 0x4}}, 0x8000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000340)={0xe4, 0x1, 0xf0b, 0x8, &(0x7f0000000300)=[{}]})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250b00000008003a0001ffffff05002d0000000000060028000200000008003200ff01000008000b00ff070000050030000000000008000600", @ANYRES32=r9, @ANYBLOB="f66f1bc54a5b545beb54f4248b3f959f14688188bcd2f497a5cdd8a8b17c08239b4efe0cc781ed67cb4ee22e1ddf7ca300d7f603a95e74195b1be18476d33c689a2549cfc1ae6f6c04dd07bcaefeeb20ddf74e513d4b2986625cec97f4a752bf1c72b15f3ab1e74f1bd3d4d3977bd8c2ea354e6092e2f134f39d5a25ebceecac1b498e77b8397e5201ffc47ce6fc981f3c190e057cd8761815914a4763328ca619850faf86078eafe2e698ea0bcb6ed6d14dcdc08af5a27712d1b04bd389357011"], 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00')

[  368.951347] loop0: p1 start 2564762831 is beyond EOD, truncated
[  368.951356] loop0: p2 start 2494347297 is beyond EOD, truncated
[  368.951363] loop0: p3 start 1915790064 is beyond EOD, truncated
[  368.951370] loop0: p4 start 983213520 is beyond EOD, truncated
[  368.951376] loop0: p5 start 676962771 is beyond EOD, truncated
[  368.951381] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
semget$private(0x0, 0x1, 0x6e)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x4)

02:42:21 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1}, 0x0)
r5 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0)
write(r5, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c532", 0x4a)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000001c0)={0x0, 0x2})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x0)
sendfile(r5, r5, &(0x7f0000000200), 0xff8)
r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='Z\x00')
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  368.951387] loop0: p7 start 745035705 is beyond EOD, truncated
[  368.951393] loop0: p8 start 3542136138 is beyond EOD, truncated
[  369.105386] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:21 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x4, 0x7, 0x5})
alarm(0x80)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/50)

02:42:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x4)

[  369.236074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:21 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/16)

02:42:21 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$int_out(r1, 0x3, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xfefffffd)

02:42:21 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x1fd, 0x0})

02:42:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4)

02:42:21 executing program 1:
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xbd, 0x4)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:21 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x7}, 0xf)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:22 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x12}, 0x1}, 0x1c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_batadv\x00', {0x1ff}, 0x8})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4)

[  369.605080]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  369.628230] loop0: p1 start 2564762831 is beyond EOD, truncated
[  369.639889] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:22 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x3, 0x7, 0x1})

[  369.659354] loop0: p3 start 1915790064 is beyond EOD, truncated
[  369.671867] audit: type=1400 audit(1589251342.031:93): avc:  denied  { name_connect } for  pid=18534 comm="syz-executor.3" dest=20002 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4)

02:42:22 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  369.711632] loop0: p4 start 983213520 is beyond EOD, truncated
[  369.727990] loop0: p5 start 676962771 is beyond EOD, truncated
[  369.741013] loop0: p6 start 3159018777 is beyond EOD, truncated
[  369.769001] loop0: p7 start 745035705 is beyond EOD, truncated
[  369.785563] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4)

02:42:22 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x47, &(0x7f0000000080)="6dc2701b742a4e0684065e6984e64c68485ca541ebd98a7b06cac602b3ecd8228d8388dc814af1ebc7a405be2d2e52b72c6e12105c150c2ac188da5030652a248f253a4346d9b8", 0x5c, 0x0, &(0x7f0000000100)="5c903cac9634f1b4cbe56f169a3bde3b6041bd46719dd98854b63d1b7963d5322a75273b1322fbc0202c2d0b22b33786dabe3ba19ad2d7568ad3dc6bc4be10e54af59d6a0de10b28c24f62c5892f3d8a34548a55f11a1c2291829ab9"})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4)

02:42:22 executing program 0:
r0 = epoll_create(0x2000007)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x70}, 0x4)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040))

02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

[  370.034064]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  370.044275] loop0: p1 start 2564762831 is beyond EOD, truncated
[  370.060872] loop0: p2 start 2494347297 is beyond EOD, truncated
[  370.060883] loop0: p3 start 1915790064 is beyond EOD, truncated
[  370.060889] loop0: p4 start 983213520 is beyond EOD, truncated
[  370.060896] loop0: p5 start 676962771 is beyond EOD, truncated
[  370.060903] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

[  370.060910] loop0: p7 start 745035705 is beyond EOD, truncated
[  370.060916] loop0: p8 start 3542136138 is beyond EOD, truncated
[  370.178197]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  370.196258] loop0: p1 start 2564762831 is beyond EOD, truncated
[  370.206622] loop0: p2 start 2494347297 is beyond EOD, truncated
[  370.222453] loop0: p3 start 1915790064 is beyond EOD, truncated
[  370.235233] loop0: p4 start 983213520 is beyond EOD, truncated
[  370.248082] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:22 executing program 0:
r0 = epoll_create(0x894)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f00000012c0)={0x2, 0x3, 0xfe46, 0x86, &(0x7f00000001c0)=""/134, 0x1d, &(0x7f0000000280)=""/29, 0x1000, &(0x7f00000002c0)=""/4096})
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000100)="48bf78bc30cc5f3670d69e4b070699fcffab4b4b92d2c20826ed437c23852ef0768c8abda00bb49dbb82f4aef004560203fffce187fc448db43fa3ea6aae2223827e2b056e478c1a70dad78803c707ee3914bd1f352ce5e0c1f5c8f60dffd5f31dcd1abba6ea8c33f48cf7669e0cf4ba6148d6d59c16aedb", {0x0, 0x8000, 0x20303159, 0x3, 0x101, 0x7, 0x1, 0xffff}})

02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4)

[  370.272131] loop0: p6 start 3159018777 is beyond EOD, truncated
[  370.278224] loop0: p7 start 745035705 is beyond EOD, truncated
[  370.302146] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:22 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0))
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  370.551293]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  370.571559] loop0: p1 start 2564762831 is beyond EOD, truncated
[  370.583837] loop0: p2 start 2494347297 is beyond EOD, truncated
[  370.589931] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80301, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x4)

[  370.626565] loop0: p4 start 983213520 is beyond EOD, truncated
[  370.639897] loop0: p5 start 676962771 is beyond EOD, truncated
[  370.650187] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:23 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

02:42:23 executing program 4:
r0 = epoll_create(0x7)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010400000000000000000000000045991081fa95d9dae8e326d0d9ec8b9f081e8de052774e58d2e1e6f0a80ed3b20e7451e9c48f9d5e9572aca8ee517ca64ad78e98d15c41caaa44bc519c1c0f2119ba9ca704b2aafdfb3d42afe9f7", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000900000008000500", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000038009b536fe0128009000500766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000900000008000500", @ANYRES32=r10, @ANYBLOB], 0x60}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x68, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20005c1, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xec1, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa1, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40084)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000008})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r11 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xfffe, 0x40, 0x1fb, 0x300, 0x1b}})
fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)

[  370.676017] loop0: p7 start 745035705 is beyond EOD, truncated
[  370.691098] loop0: p8 start 3542136138 is beyond EOD, truncated
[  370.773148] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'.
[  370.791916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
02:42:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:23 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000100)={0x4, "a2214d284a4d5c2860874655ca9450dd2e45e59ae7bae76a48a12299092d704b", 0x2, 0x1})
r2 = epoll_create(0x7)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x3, 0x1, 0x5, 0x0, 0x834})
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x4, 0x5, 0x6}}, 0x30)
sendfile(r4, r3, 0x0, 0x10002)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x8001)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r9, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0xfffffffd)

02:42:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:23 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000000100)=""/201, 0xc9}, &(0x7f0000000080), 0x2e}, 0xa0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:23 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r3)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  371.263611]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  371.284924] loop0: p1 start 2564762831 is beyond EOD, truncated
[  371.301222] loop0: p2 start 2494347297 is beyond EOD, truncated
[  371.319406] loop0: p3 start 1915790064 is beyond EOD, truncated
[  371.336979] loop0: p4 start 983213520 is beyond EOD, truncated
[  371.349773] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:23 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r2)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x5, 0x4)

[  371.367105] loop0: p6 start 3159018777 is beyond EOD, truncated
[  371.380716] loop0: p7 start 745035705 is beyond EOD, truncated
[  371.389859] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:23 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {}, {<r5=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000100)={r5, 0x2})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000000)={r5, 0x2})
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r1, 0x0, 0x10002)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

02:42:23 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x1000000a})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:23 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fsync(r2)

02:42:24 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000000))
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x202, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000000c0))
pause()
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040))

[  371.663122]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  371.668965] loop0: p1 start 2564762831 is beyond EOD, truncated
[  371.685808] loop0: p2 start 2494347297 is beyond EOD, truncated
[  371.691904] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})

[  371.718496] loop0: p4 start 983213520 is beyond EOD, truncated
[  371.725717] loop0: p5 start 676962771 is beyond EOD, truncated
[  371.741911] loop0: p6 start 3159018777 is beyond EOD, truncated
[  371.752333] loop0: p7 start 745035705 is beyond EOD, truncated
[  371.763103] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000002c0)={0x2, 0x6, 0x490f, 0x0, 0xe})

02:42:24 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x7f, 0x9}]}, 0xc, 0x2)
sendfile(r1, r0, 0x0, 0x10002)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x9, 0x3, 0x4, 0x2, 0x7fffffff, {r2, r3/1000+60000}, {0x5, 0x8, 0x4, 0x9, 0x3f, 0x9, "9751fde3"}, 0xd0, 0x4, @fd=r4, 0x7fffffff, 0x0, <r6=>0xffffffffffffffff})
ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x1ae, 0x0})

02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)

02:42:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x80600)
r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf63, 0x4000)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x40)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, [0x1, 0x8, 0x97, 0x1]})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

02:42:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = msgget$private(0x0, 0x200)
msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/18)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
eventfd(0x80)
gettid()
pselect6(0x40, &(0x7f0000000040)={0x5, 0x0, 0xfffffffffffffffb, 0x6247, 0x8, 0x51b, 0x10001, 0x2}, &(0x7f0000000080)={0x511, 0x5, 0x9, 0x6, 0x58f, 0x1, 0xfffffffffffffffd, 0x2}, &(0x7f00000000c0)={0x100, 0x8, 0x100000001, 0x0, 0x5, 0x2, 0xfffffffffffffffa, 0x1000}, &(0x7f0000000140)={r2, r3+60000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8})

02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)

02:42:24 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000))

02:42:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x8, 0x6, @empty, 0x8}}, 0x0, 0x0, 0x2c, 0x0, "a423e4983aa6423801ec3c0eac574f8348f99cd0fb5dc7d1d36aaaf9a1f67cf76660ee6eb170f1c0fa973b52d02afb2642fe28aa7295683800a2cd06f3a639cec45ae7f5fc7673bde698df165d17762c"}, 0xd8)

02:42:25 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2802, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/90)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000000)={r4, 0x7})

02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)

[  372.667030]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  372.686931] loop0: p1 start 2564762831 is beyond EOD, truncated
[  372.712631] loop0: p2 start 2494347297 is beyond EOD, truncated
[  372.727920] loop0: p3 start 1915790064 is beyond EOD, truncated
[  372.744096] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:25 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x5)

[  372.769060] loop0: p5 start 676962771 is beyond EOD, truncated
[  372.789811] loop0: p6 start 3159018777 is beyond EOD, truncated
[  372.802789] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

[  372.816288] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
write$P9_RSTAT(r1, &(0x7f00000000c0)={0x8b, 0x7d, 0x2, {0x0, 0x84, 0x5, 0x81, {0x4, 0x2, 0x3}, 0x4840000, 0xffffffff, 0x0, 0x80, 0x11, '/dev/qat_adf_ctl\x00', 0x11, '/dev/qat_adf_ctl\x00', 0x1b, '%eth0vmnet0/[.cgroupnodev$\xe3', 0x14, '$prockeyring\\$-nodev'}}, 0x8b)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x30040, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000080))
rt_sigpending(&(0x7f0000000000), 0x8)

02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)

[  373.008753]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  373.038264] loop0: p1 start 2564762831 is beyond EOD, truncated
[  373.048264] loop0: p2 start 2494347297 is beyond EOD, truncated
[  373.079147] loop0: p3 start 1915790064 is beyond EOD, truncated
[  373.086734] loop0: p4 start 983213520 is beyond EOD, truncated
[  373.097102] loop0: p5 start 676962771 is beyond EOD, truncated
[  373.105210] loop0: p6 start 3159018777 is beyond EOD, truncated
[  373.111389] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:25 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000300)=0x84b, 0x4)
r2 = epoll_create(0x2000007)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x40000, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000380)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff631034c54ba6b092061b1db76e6fe3470347b853095c6b91a1d17df36d6b72d5737ee4", @ANYRES32=r7], 0x4}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x0, 0x3b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000000200))
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000240)=<r9=>0x0, &(0x7f0000000280)=0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00', r9})

[  373.124002] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x7, "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"})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0xfffffffc, 0x80000000, 0x1c, 0x20000000, 0x0})

02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000100)={0x55, "95fa4ab6ab297c53fe1322c5cbbe831a75c3857fa3f24101410b7be5450d5e39", 0x2, 0x80000001, 0x5, 0x4, 0x2})

02:42:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x9, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2400c080)
sendfile(r2, r1, 0x0, 0x10002)
sendmsg$rds(r1, &(0x7f0000003d00)={&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/26, 0x1a}], 0x5, &(0x7f0000003b40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @fadd={0x58, 0x114, 0x6, {{0x200, 0xed}, &(0x7f0000002240)=0x8001, &(0x7f0000002280)=0x2, 0x1, 0x2, 0xfff, 0x6, 0x2, 0x7f}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8}, &(0x7f00000022c0)=0x2, &(0x7f0000002300)=0x1, 0x5, 0x80000000, 0x400, 0x4, 0x2, 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x19, 0x8732}, {&(0x7f0000002340)=""/98, 0x62}, &(0x7f0000003980)=[{&(0x7f00000023c0)=""/59, 0x3b}, {&(0x7f0000002400)=""/251, 0xfb}, {&(0x7f0000002500)=""/156, 0x9c}, {&(0x7f00000025c0)=""/252, 0xfc}, {&(0x7f00000026c0)=""/158, 0x9e}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/123, 0x7b}, {&(0x7f0000003800)=""/167, 0xa7}, {&(0x7f00000038c0)=""/186, 0xba}], 0x9, 0x41, 0xf27e}}, @cswp={0x58, 0x114, 0x7, {{0x1ff, 0x80}, &(0x7f0000003a40)=0x29, &(0x7f0000003a80)=0xfffffffffffffbff, 0x20, 0x8, 0x5, 0x2, 0x0, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x401, 0xab}, &(0x7f0000003ac0)=0x8, &(0x7f0000003b00)=0x5, 0x7, 0x377c, 0x8, 0x1, 0x60, 0x7}}], 0x1c0, 0x4000000}, 0x4048000)

02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2)

02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  373.428133]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  373.441205] loop0: p1 start 2564762831 is beyond EOD, truncated
[  373.462106] loop0: p2 start 2494347297 is beyond EOD, truncated
[  373.468208] loop0: p3 start 1915790064 is beyond EOD, truncated
[  373.498919] loop0: p4 start 983213520 is beyond EOD, truncated
[  373.511632] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:25 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup3(0xffffffffffffffff, r0, 0x80000)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x20, 0x2, [0x8000, 0x3f]}, &(0x7f0000000040)=0xc)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0xe, 0x0, 0x0})

[  373.549032] loop0: p6 start 3159018777 is beyond EOD, truncated
[  373.585921] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  373.606609] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x4, 0x2, 0x0})

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x9, 0x3f, 0x1ff, 0x800})
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:26 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
getpeername$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x37, 0x5}, &(0x7f0000000040)=0x18)

02:42:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x5, {{0x2, 0x4e24, @loopback}}}, 0x88)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x300}})
recvfrom$l2tp(r0, &(0x7f0000000140)=""/174, 0xae, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
dup(0xffffffffffffffff)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0xf, 0x13, 0xffffffff, 0x0})

02:42:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))

02:42:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0)

02:42:26 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x40000000, 0x83, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x404005c)

02:42:26 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0)

02:42:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0)

02:42:27 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000))

02:42:27 executing program 4 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:27 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0xc3f2)
r2 = epoll_create(0xc)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000002000000090001"], 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x8000)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040))

02:42:27 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00')
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070000006b472d12c181ef9f086361e10a44840195f8ef000000000000010082a16ccf78", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x60}}, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x400000, 0x0)
ioctl$KDFONTOP_COPY(r8, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0xe, 0xb, 0x1c0, &(0x7f0000000600)})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x800)

[  374.948546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:27 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r5, 0x0, 0x1000010002)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x4)
r10 = openat(r8, &(0x7f0000000180)='./file0\x00', 0x6fdf5d993babfd93, 0x10)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r12 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r12, r11, 0x0, 0x10002)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0002000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf25020000000c00030009000000000000000c00080007000000000000000c0002007b000000000000000c00040006000000000000003c00078008000100", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c00080005000000000000000c00030052000000000000000c00030005000000000000000c000400db00000000000000"], 0xb0}}, 0xc000)

02:42:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x0, &(0x7f00000001c0), 0x24000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
quotactl(0x5, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000240)="8b570830f2b29dcfff4e88617b236739fe2231d181dc84c1669511fd10bbfd4f31623aae03ade1f84668f345a220c10e68867b12e8b55476e452038c22f561b9564fb878f44de85f4e7fdf589717d92c5281387a1ae903924441023048ebed9ceaad01134964bfca5f0fcabc65bf67126e8b6f9becea584302e8e070d76e463a30bdcf0425f57fa8e881ac2f9855a47d6c9aa05410ce00b96090d0e87a9bfa2c40960154d2418bc50a18e63d03f16dee1ce96cf7330dc5dc2895dee8580b011d8bb17dd36cf0db5e5960d1c5839984d8be29f9cf98b4557346b4efb1bc25a83017b526e5a05bd4a574d147448da9b63ce1d843a3bab66cccf27dfa97023a926400fd0ac7313dc65ff3d3555c891b46480d4528ea7826a9fc5a118e1d7f16b48bfd328f600ac24cac281d815fec76eaca78d68d083948d27364d59326114c6aea93a9b095d27bbf62601fb8b6be58cfa68d9641c98d871e6ed34c9158d76843f93837f60ebd39006b3504ce8a238be994531f5a6f42cfc3832f272327b34734e7e3ddc3600fc8022b2637401d8ca2e7336cfa9295893651ec7ed704ec5a8239ad05b0919c5b92f96c1eeec2c1c8dfb15c5c2f28b36db7cc8495427642afb88c5875707975cd674bd37ea2d57ddbe600d4caefe5874cde1e10c3db430678c5a641a8b98db3a8971a24e9a404438a5885fb66178c597c4e7e21301a8fa1c85a7430b64b672680427ad7104b25ccd23e3ba0c2bb9ab9a446bd96fb29ce2e19e2458f52653c8a3dc3a9b980cf79bfe3e8f697e9d05e20e029b0d4901c79f449a6b1ab9e6662ec1e94370d98486ba29701579b5b8825e4ace61649c2e00a40ec1c405bfe96c6337b2a571dbc5cae0c7c3ea2421c6a0877eb41fb67014601de4620da1af68dcd5e1d24c70aec236dc54875569c6d5ff0ab15633ee67d29c46212ed5c3e83247286e371969f6b5e2f9c0434af8b2f3e2bab865e253eae211e0aadb57b9b095e4271172d812b9360fedc0117cbfbe3e40c656026aa4ebb5e13acec222130919af30b7ccc860691700bdc5b1c4212db490e9d82a8507bb4ba8c7ede8485c592686b5f9a08138939165793933548901922439a34451fa36def337ed8d45bc651408e06a97fa517f7ccee52c89dba03b94c35d53f9237f06d708135e48b190d4c0fb6ff7bb4ce25a6d761069e00e29384e1091da28b61298a92df6edc2a655898654f57227246091c173d945c32644ea027803f5a2527b12e4a792e2230caa074abca133a38ee248482a6ed5530eb52f0849507a6f0982cdf7f4a7e12b260ea451ef4c227d5c69f0636df82bbe294ead5c5ed000d01e069ebfdb70604472ee7c2254ce8e587ca5a427dab4195964acebb63cd8541dbb0b153b788b22335feaed8a7451b2d6251d186fc7b9f4ed4568d2a23307d41cdb805dd955d665f95c948c36ce669307b156e69777b555d90e0e1f5ba1bd916668da8ccb058074c1f8ebe019398100280189d46426d0f64d8a826b537c7dbe5c88f69f33bd266176ede63bd4600dd6c5ab6209471b30b8e6a867f25d968334dfad6ff3f36792961123098dfeb0889601d637274b05fb2ac17cb2813321ff39ee0084133eb455676a1c2b7b3ddb1bd0303dea881a80a5c1619c7b370d3ccaa3deb0d7e40fd77f09407dc8ab85370b49bddfd30754b21e1806a4ebc726b03a0a93e1f887f1177cc9efc3e93809cf9692b641e9dc599093345a7894a51cb9c382ae0eecba1445cf16270b1405c89c1eba908e69dd4c07dd0287ad26c0dc9535b7e6c49cffa4a5f8e8dab12d9b19da913efd76c24630d31619a0e20f886ef186cc755bac3908882290ad92be93f372c330698922109cb8c5a1e171b72a30df8f837adcfd4fc59ef5931860839c0a94244a86bcf21d9fe172e825a81baaccbe48285bdd56bdb21f0928f133019e89039033b60830f1596ca0c5fa9a24abb22863dcf7fc1d061a82e378607de1c68a239c87343f7000d213d0df431a47c03e9b2f14f3bf44c1802ddefe82f2614c227d2475f0b10b356a10415f0769b606cc2701340fd0687c355b9fe0ce6c2e622c2c22512ef483c9fbda5d3ff024adeba01dc538e52164de83ec72c630f47fef61bdfd7701804724e4831b1214ec3a2c5f19067db4135c61c1e3f90838864178a028b7b30440b5005dacd1b702195e79f9f9eb714cf4158211a1336a8c9f6e31ed3d8fdf391b0fc403bc918c054a7e64d0dbc6d0fb74ae5d8917eb0901cc5f319e829265b897e55d077f83e2e8713335df02784116070adb6366577c44ca24527923415fe9b2c3ee356764e2270f525d3046a4f69c80950bf6e9e162cee67a3dd533389bde81d0713ceb7930f2e2d9454307d1e9003adeb3bdf88557cd39562c203c61e4b065b88becc0d6c596faf4bee2a5a1f41350b50ead0cb6527210f7a4c744bd031a36f7b3822076515d70ed51941b661051b307b27e4141c74c1bafebc6cbfdf576dfb97f5f29bde452bc3b8d1c2c61cc27d974570c538c5b9fed87cf536a52b45d972aa113e00bffad144d6838da234b950cc8b617ca66b17aeb516849809c91c336d06f22b4d59de321447afbb0b02dee15d52409d2d2c897195036f0ef86676f5541ea55661a62b6289d3bc6d44a793a458799f300585e94061c5d00704165c7e85d3bae897ff86e44528343ffffc6bb85ebcc7668081274e5a345cff3770e8fce9121c4cc9bc2d47600bb1d64b6a368cbc19600328e9191768ed3e9774258a5f2487ea530e0aaffd8e422da7864cdc207236a9af5f9d80898898dc272e967fc54520e7b4dc2b0ec96bca9dd3b21a50f274d12466598d6df4f47777530a29a5fd1b3d9d65f2094d193dbde76e5d0f1a4bba149ad3e1840e6c4085dfa40a2628d331eee775da283c545e443e6549e6294c6035ffcb3c0ca5bcb8669945b3b523018c6c490650a56e628d6f1760ec971c32805545ba58b16926300a638e927c1be354ac9a724f4f7a4c135af5ff76d4a8abbb713de4e6e52e8f7a13d548e874ec9ff55d546c4b76a77f2800656fbe19e69dd6a7eecd1f40c87cc863fc0c3df38e1cb59ff7907e40d6cf34a742196d462832e1c2a39afd59d9f33b7af4dafca6f4b5e28d90584156712d4bc6de651b8686fa0cdbbd4fcad2575243b5d562bd84e7085f558d20fe810e75ae5c9c4677975e8916048f85ca0819766d491dd05d70026df9889fdcfa69bc9a8848a8f5729a2d52e9561d25ba6fdce37b00c1ae8da81576d478e0a83f3bf3beb82eb03ac34b5b33231bbeb2da014a4bcfabb98a367b8998c79957063052e3b392d2a84fa7b9d0537cb4505d23c567286149dbd740430518ca7647e1989edd2cde02cd29ab55f9b328c571d338084d52c908909b2bbbad1a55cdaf3ea3e0b77366fda1787ca1c4b92a56dafbd862245c95ac996e38da4c54a3c9d23c26fd72dcc4781e070f1bd4eb6ef53d25bd08b16bd3a4b63a7fe33c7d518718054028bc62c7f7e738828f4b4c2f81bd96de2b97d2f21ccde27c77040ccec6c4554e51b79c7b78f5d45e283c46c426bb0da125d068aa0b5bd3b75f94489b32515842f85079811f1f693b93fdbf86598bc7c514802588c7df1c1bfcfa52d9d3aa2c306a6c6b25a9a847fb69c888ad7e283f45bfc47b569556ded04311a0540acf9bdee9cbb6166d7f6ba4866dfe6aecffb1949d47d82b0925b2794cb7ec911919436671dea5e649b838e65a8fbf2c64492965a70a1db2bea6d84fd3282aa10f3a4cfc755dac97076eda8154070e505498ec4b489d6fdaff43552da0a35125735d2aa147c5b2cbac0d8505550dcda9e9832bee9023a3e72706b0832bfe299709688c743754c5c6c9a42c0f278ef7ef8f6bffeb6fb837769c40cfad6e2e41aa83ee090c85aabfd3578b8cfb6315dbb3bd94e39617cd80ff778532c7ec45f1e6bcb73a4e78f5040fec24c81ae091750b3fcc4eb21bec8bf375f91c102f49df4d17b2cd1e3641cceb662dfba3a2f6072d972275ff87bcb020fb0b65cbe37128dd3b9e26c1543573d7f2dbcd762fcc27a5e4909aa4f76039ff343edcdba7f3668609c8fa1a5138d020d3ff974da69fa043ae3fd3b243545aa6a7f745e1fcd164380c0c89645865c34c63f86a23ab074c4660c2144e46c12d575091a4550bedcfa7a85bc93f2efc2f42824eea0efef4200576d180ef097026fba7834dc90a6dd843f0ca1bc9cbbc02a6b551b2067dde26ee09dca194c18a1ecd5764cfe8bc42e4c59fcd0fdfa2e31e351815bc7171285997847fc76b31e13f6c6cc5c46648b7b9a486f9bbe109f492f81e7e944e9cd8b3e723e1744200e4c9a9c526a3ac565de2fc23450d776f7eb383daae7cab5c7c78610bad90f9b50933e8b849a973a7aec5cef2ec71c6b624372816cf698e082a354e9949404c91bcdf7e33c6932c0a776859f73cd292f470e2581f9d7970d9677ac012d18e0e9b76c09700f01b9448f87873edda6f3d1fae7a034eeff3aea9847fe2604c524828d4bb58a242c8ad354c5c5715fba0fe19fcd79ad7bc362ac30958bca759ef67860627396734c737c6ea853a1eba37f1ceae5670b3e06aa859ca9a3c8c192fc3d4e96ec14d8da1852fa880362955d816f26d21253c31e624f0ca92385e8b18587c12be1d796d425d15c34dcdf5af200e31e3adec7af1cb19741560a227b2e84b05acdcb9ffcf02c04cc670bd50af55ac97c5aa924df235cb3a4e4d726823307d2fa7f550c3aa5bebda9d26fc4f14ba15a375dd8b7344440d8883628263d58389943724afad499756d3fa10f206d397b94296cccba2fce173bd8082a82646efed7f7f6458523baea9b9b8b49172e0f0c54f676227c4fb93bd8b4f26109662d9f7facfce750fb4bbd620d262ba81870ea77e9bacae346fb9f77a5cf240e7af9f985e53fc0bd8b397de1e298f6184a17441a05627fb38ff826ed6662d3479f26c7a462954fe68f9c16679bd02a749157d87289735d2b9b7b14d8d7beee0f93ea41fd71fc572b7e087f112c0713a9428cb4754ac54406c647c415135c8c49e759f297f58df5570c7bad6874c58516c437bb3080753920ab1d57f9e73b5799af1441737b69301f71ddbf20d1e14ec3f7703d3614ddc0d65801ccd133435ab7b1780ebf7e3e2495137ab8cc54128e97c1fb78c7e262f422e4297342e87e234d37b16979d0b4091f246a838d1a07ca6ed33bd5f6c32033f06cee70a253219c03f03d9a5cf834f1b706e6e3b6c501e18fd0729901b32f8e5457843c4005620fb03c2d3a0635d1ae075c89bc46fe3b6ea7cb942940841ab1ba95223714598eaa23313af0fb760ed27eb5393ca674fda1a0fe9308c28c02da3ee5ba86bebf8a063f39c5ea65ce4f0d7148265e699e9d203dc9a3cbd1baeba9c2eee0b4afa6a7c19948490514e7ce5bc75339b422bd76fe77ed6676dd8d6c89335da7013a02189e56b9b06509c77c8a020ac3704271faadecf7307378459dbcf33dd41cbbca057727758d080e51f6b567ba8de319060012a5b9c26b1cfa5d05c3a1c5120a225e34f9b646abc395ae02f123002e3fa9e4532e42827ae5d479d8d842811e3861e12e4c91eb1ed066183c7e961b9c1a84c2f68d4f9187d1aac0ec360b57bf6beced281ee8090bdc840e1a52eddce17be114826cf9b7b16372f29bcdc563b5944f28bdc306ca7c1136d99fe5658fbdd29f9295c8223d8ff771a87b2227e111f1a8d5f707de9e02a5cf7363c58a932c83d4db321ea0243dd4208922546ce7adf438c29bab37b329b1017ba9250")
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  375.034467] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
02:42:27 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000))

[  375.110902]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  375.116762] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  375.126390] loop0: p1 start 2564762831 is beyond EOD, truncated
[  375.140689] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:27 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)
syz_open_pts(r3, 0x40000)
r4 = accept(r2, &(0x7f0000000100)=@ax25={{0x3, @rose}, [@netrom, @rose, @default, @netrom, @netrom, @remote, @rose, @rose]}, &(0x7f0000000040)=0x80)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum})

02:42:27 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7f)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

[  375.157631] loop0: p3 start 1915790064 is beyond EOD, truncated
[  375.170649] loop0: p4 start 983213520 is beyond EOD, truncated
[  375.189420] loop0: p5 start 676962771 is beyond EOD, truncated
[  375.203936] loop0: p6 start 3159018777 is beyond EOD, truncated
[  375.218673] loop0: p7 start 745035705 is beyond EOD, truncated
[  375.231433] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:27 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f0000000140)}, {&(0x7f0000000380)=""/209, 0xd1}], 0x5, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x4}, &(0x7f0000000500), &(0x7f0000000540)=0x101, 0x30834e8a, 0xdf, 0x100, 0x145, 0x2, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x10001, 0x8d}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=0x6, 0x100000001, 0x4, 0x5, 0x7, 0x1, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x0, 0x4}, &(0x7f0000000600)=0x3, &(0x7f0000000640)=0x5, 0x7, 0x3, 0x0, 0x7, 0x20, 0xf75}}], 0x108, 0x90}, 0x40001)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
sync()
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0xfffffffc)

02:42:27 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
write$USERIO_CMD_REGISTER(r6, &(0x7f0000000040)={0x0, 0x1f}, 0x2)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r5, r8, 0x0, 0x10002)
socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="78ee3e8b8117bc3c2bb0051bd3cb361fa685fabcf0b829490af0e2a19f02f266e82fcbfa42608833cd18b9cbc8b5b34788ef033bf8c1b125e26138cc26260000d27a75e5915b4a50791be51be3152a996e4384483454f3fb05b7938d754900060f877c08a0f5c181e5370646cfb5da670421ed0331c86586e479531268d6d6ddcc111836311f2b4ca5ce497db514b37c139a5d35ec8b33b4210e81427053f8a37d80b86a5edad16420ce746310a944586f1e52c711fb7d75ca44d514841eeb92674cb9b26c30"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:42:27 executing program 3:
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x13, 0x0, 0x0, 0x0})

02:42:27 executing program 0:
epoll_create(0x2000007)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
lseek(0xffffffffffffffff, 0x0, 0x1)
sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x320}, 0x10040080)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000180)=0x3, &(0x7f0000000200)=0x2)
sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000400)={0x0, 0xbcb}, 0x8)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000500)='2', 0x1}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x20000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = memfd_create(&(0x7f00000001c0)='\xb3=\xbb{\xad\xa1<\x1b4\x83e', 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0)
syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0)

02:42:27 executing program 3:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x18b400)
fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0479f15852eb4087520000c000"], 0xd, 0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x4, 0x0, 0x3, 0x0, 0x0})

02:42:27 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x4, 0x4)

02:42:27 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3)
sendfile(r1, r0, 0x0, 0x10002)

02:42:28 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0xffffffff, 0x4)

02:42:28 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x54)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r2, 0x5}, 0x10)
dup(r4)
syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xe0c, 0x281)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f00000001c0)=0x101)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x7ff)
sendfile(r3, r2, 0x0, 0x10002)

02:42:28 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r3], 0x4}}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc8b8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2000)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = semget$private(0x0, 0x2, 0x0)
semop(r5, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)
semctl$SETVAL(r5, 0x0, 0x10, &(0x7f0000000240)=0x8)
ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000180))
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000040)=""/1)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
ioctl$TIOCNXCL(r8, 0x540d)

[  375.835998]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  375.848962] loop0: p1 start 2564762831 is beyond EOD, truncated
[  375.868624] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:28 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x7, 0x10, 0x0, r5})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r8 = socket$kcm(0x29, 0x7, 0x0)
r9 = dup3(r7, r8, 0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  375.886495] loop0: p3 start 1915790064 is beyond EOD, truncated
[  375.898990] Unknown ioctl 21517
[  375.899537] loop0: p4 start 983213520 is beyond EOD, truncated
[  375.916156] loop0: p5 start 676962771 is beyond EOD, truncated
[  375.928956] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:28 executing program 3:
prctl$PR_MCE_KILL_GET(0x22)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x34, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x2404c400)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r0, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x6}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000540)={r7, 0x2}, &(0x7f0000000580)=0x8)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd5dfe186e70c009f}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xffffffff, 0x72, 0x0})

[  375.939080] loop0: p7 start 745035705 is beyond EOD, truncated
[  375.955684] loop0: p8 start 3542136138 is beyond EOD, truncated
[  375.992307] Unknown ioctl 21517
02:42:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x4f, &(0x7f0000000040)=0x4)

02:42:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:28 executing program 0:
r0 = epoll_create(0x2000007)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000180)={0x80, @multicast})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0xa20000, 0x484d, 0xc000, r0, 0x0, &(0x7f0000000100)={0x980929, 0x4c5082d9, [], @p_u8=&(0x7f0000000080)=0x69}})
flock(0xffffffffffffffff, 0x9)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040))

02:42:28 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x900, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000))

[  376.210707]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  376.230251] loop0: p1 start 2564762831 is beyond EOD, truncated
[  376.244278] loop0: p2 start 2494347297 is beyond EOD, truncated
[  376.267242] loop0: p3 start 1915790064 is beyond EOD, truncated
[  376.287109] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = accept$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000140))
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x1ff, 0x0, 0x9}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000000000000e4e65b3a1fac5c86fdfcec73f27f481c7aa9eef31709d49289065d10edfcdb03ea1c64210abdbab296d0344cf394e99f696ba2f4fab7293928944b76ad", @ANYRES16=r1, @ANYRESOCT=r7], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000180))

[  376.316004] loop0: p5 start 676962771 is beyond EOD, truncated
[  376.322126] loop0: p6 start 3159018777 is beyond EOD, truncated
[  376.343247] loop0: p7 start 745035705 is beyond EOD, truncated
[  376.355900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18918 comm=syz-executor.4
02:42:28 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @vbi={0x2, 0x9, 0xcea3, 0x20363059, [0x9a0f, 0x1], [0x1ff], 0x13a}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={@null='               \x00', 0xd, 'veth1_to_bridge\x00'})
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0x1, 0x3ff, 0x74d, 0x1, 0xfc, 0x1, 0x41}, 0xc)

[  376.356081] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:28 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x101000, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140d, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000002c0)={0x3, 'veth0_macvtap\x00', {0x6}, 0xffff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
write$evdev(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0xea60}, 0x16, 0x5, 0x8000}, {{}, 0x3, 0x3, 0x3}], 0x30)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r8 = dup2(0xffffffffffffffff, r5)
bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58)
sendfile(r4, r2, 0x0, 0x10002)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})

[  376.445756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18922 comm=syz-executor.4
02:42:28 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000))
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000440)={0xf000000, 0x3, 0x1, <r2=>r0, 0x0, &(0x7f0000000400)={0xa20965, 0x1ff, [], @p_u8=&(0x7f00000003c0)=0x81}})
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000480), 0x8)
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000080)={0x60, 0xd9, 0x7, 0x3ff, 0x157f})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000009f0e00003f000000020000840000000000013ead"])

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = semget$private(0x0, 0x1, 0x20)
semtimedop(r1, &(0x7f0000000000)=[{0x2, 0xe79}, {0x3, 0x36, 0x800}, {0x4, 0xdf, 0x1000}, {0x0, 0xb2, 0x800}], 0x4, &(0x7f0000000040))

[  376.687304]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:42:29 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0)
r5 = accept$netrom(r2, &(0x7f0000000140)={{}, [@remote, @default, @default, @remote, @rose, @remote, @rose, @netrom]}, &(0x7f00000001c0)=0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)

[  376.688230] loop0: p1 start 2564762831 is beyond EOD, truncated
[  376.688239] loop0: p2 start 2494347297 is beyond EOD, truncated
[  376.688245] loop0: p3 start 1915790064 is beyond EOD, truncated
[  376.688250] loop0: p4 start 983213520 is beyond EOD, truncated
[  376.688256] loop0: p5 start 676962771 is beyond EOD, truncated
[  376.688262] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:29 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)

[  376.688269] loop0: p7 start 745035705 is beyond EOD, truncated
[  376.688275] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x2, 0x7, {0x77359400}, {0x3, 0xc, 0x6, 0x9, 0x5c, 0x7f, "c5e2323d"}, 0x10000, 0x2, @offset=0x92, 0x4103})
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10)

[  376.999777]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  377.007181] loop0: p1 start 2564762831 is beyond EOD, truncated
[  377.032033] loop0: p2 start 2494347297 is beyond EOD, truncated
[  377.038539] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
sendmsg$nfc_llcp(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x27, 0x1, 0x2, 0x1, 0x1, 0x78, "fdcf24befa0fc280892cc2f9078130257fe46ef087eaf0847f5b29a20cecc631637d5b30d38f63abee195e9b38fbf79eaf9bf40696cb7b229acc3103ab9864", 0x19}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000080)="524d4659c9deb525b701c44ab5a1f4a9a2aa8c385303c226711f973a08e4530b4a9a03699cff2838134014d36cd0dc4a938ef9b94668e198e8c6e6098f9f9194296851effd32758ff4e904cdbbccd5da3726", 0x52}], 0x1, &(0x7f00000001c0)={0xc0, 0x118, 0x9, "c78898d0293147dbc1ff710ea51f16831f98ec609fcb4ff466a3917c40cf8ae42713d3f48dbfd31bb6ec300706ca80b81e9d97d9897f255e1e4947f81c200cea90638b6e5b9f05482cde4d61221ed2cc045c356a628e473ba8006815d0b9649824df25ff1022383e701a61ebf04c1191caeb35bb1a20ea73155167c744734ff0c3c03b124b38171e6c1e481050813bde59bb9ebdc30f1bb5fc2dd19536d1d4c927dbc3e8871ca40fd7989b681f60"}, 0xc0, 0x4044844}, 0x5)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  377.038548] loop0: p4 start 983213520 is beyond EOD, truncated
[  377.038555] loop0: p5 start 676962771 is beyond EOD, truncated
[  377.038561] loop0: p6 start 3159018777 is beyond EOD, truncated
[  377.038567] loop0: p7 start 745035705 is beyond EOD, truncated
[  377.038573] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x381081, 0x1)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x100010, r1, 0xfffffffffffffff8)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000d06810400100000000400000000000000b72d7aaed20000010000000d00010006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8869}, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x100)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x81)

[  377.301000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  377.329257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
02:42:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x1f, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x1, 0x9, 0x7, 0x1}, 0x10)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x8)

02:42:29 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r5)
getgroups(0x4, &(0x7f0000000200)=[0xee00, 0xee00, <r6=>r3, r5])
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000240)={0xa0, 0xfffffffffffffffe, 0x8, {{0x3, 0x0, 0x1d, 0x20, 0x1f, 0x5, {0x1, 0x4f, 0x3, 0x81, 0xa5, 0x200, 0xffffffff, 0x7, 0x4, 0x80000001, 0x1ff, 0x0, r6}}, {0x0, 0xb}}}, 0xa0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4)
ioctl$TCSETXF(r7, 0x5434, &(0x7f0000000100)={0x0, 0x7, [0x8, 0xc24, 0xee0, 0x454, 0x2], 0xffff})
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000000)={0x10000, 0x6000, 0x3f, 0x0, 0x4})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:29 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x14, 0xf, 0xca})

02:42:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCCONS(r0, 0x541d)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40, 0x0)

02:42:30 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$USBDEVFS_GET_SPEED(r3, 0x551f)
ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000))

02:42:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x9)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/144)

02:42:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040))
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x208001, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x80080000, 0x0, 0x0, 0x0})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x309441, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000100))
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/169)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0)
r6 = getpid()
sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
syz_open_procfs(r6, &(0x7f0000000200)='net/icmp\x00')
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5})

02:42:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2b004, 0x0)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
socket$rds(0x15, 0x5, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000040)=[{r2, 0x8}, {r3, 0x4020}, {r4, 0x15}], 0x3, &(0x7f00000000c0)={r5, r6+60000000}, &(0x7f0000000100)={[0x571]}, 0x8)

02:42:30 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x3)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000000)={0x1, 0xfff7, [0x7, 0x100, 0x16, 0x8b, 0x6], 0x200})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
socket$nl_xfrm(0x10, 0x3, 0x6)

02:42:30 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:30 executing program 4:
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x7)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:30 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0x3bd, 0x0, 0x7ff}, {0x2f4, 0x0, 0x1}, {0x2ff, 0x0, 0x8}, {0x29d}, {0x882, 0x0, 0x2d5d}]})
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="010007008f6c5afa228dffc35c3701a496fd70255999961312a053e47db41bf351081b8e93d6e59cff9ba959a92d6125a8827c212a37dc409f6d3aea21aed923561c5caab6d17d7ae99a5074159c039c1c08f8cfa9ff39927fe98c50d7efe175db7e8404f135b3716b6f9a5da0da7ddbf04288fd928864b30c85100a90680ae53aa600"/140, @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r6, 0x59}, &(0x7f0000000140)=0x8)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:31 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x8000})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = semget$private(0x0, 0x2, 0x0)
semop(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x1400}], 0x1)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r6=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r6)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xb)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r9)
semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000340)={{0x1, r4, r6, r7, r9, 0x41, 0x4}, 0xe980, 0xce91, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1000000, 0x0, 0x0, 0x0})

02:42:31 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x374, 0x8, 0x100}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1e, 0x1, 0x0)

02:42:31 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x5, 0x51, 0x0, "a521447658eba26be2690136aa21e0bbdf9b5c80a273121e4781164b85e66650eea24335d09dc1ddc844ad0d4577cda1c862df34a775381356df9a7281e29b", 0x14}, 0x60)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:31 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000280))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xbc4, 0x320a00)
sendfile(r7, r6, 0x0, 0x10002)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r8=>0x0}, &(0x7f00000000c0)=0xc)
r9 = getpid()
sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r10 = getpid()
sched_setattr(r10, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x7}, 0x0)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x2, r3, r5, 0xee00, r8, 0x9c, 0x7}, 0x8, 0x3, 0x4, 0x1000, r9, r10, 0x4})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040))

02:42:31 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
open_by_handle_at(r2, &(0x7f0000000300)={0xf8, 0xb671, "d591ef274dcba43a15b48823cbff25aff06ddbc7aec3f69da3b45a980b66b73e6ce1fa8756df7176635086727e50a5193d500097a44270c81c716ef96384a31d1d8bbcbdf2c8213333980279071566631b097d7d8e646ba56e5944e1af5968342637a18fcb86014cdac7552540047597eada0a3a958494b11ab4045c4cf86719e5095558bde9b28869aff0b376a8d121dbaf2ec849810f70eec5196ff4127f7f8ade6ccd27ca5c68dde0342c92803ab8a0578fbcc5a4834bf111d36dfd94fdeb2d1919a489496a918665c1f9ae85cfd73a5b545b8c16599c1195ad31647ff009ffd35bb7160087911c2e106dfcb239d8"}, 0x100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r4, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
socketpair(0x3, 0x5, 0x1, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8e7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4c}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004009}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x5)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x5, 0x17, 0x96, 0x0})

[  379.394384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=19087 comm=syz-executor.3
[  379.435397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=19087 comm=syz-executor.3
02:42:31 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000100), &(0x7f0000000400)=""/4096, 0x1000})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x20, 0x3, 0xc1, 0x6, 0x9, 0x3, 0x4d, 0x20, 0x9, 0x1, 0xe9, 0x0, 0x80, 0x36, 0x1, 0xff}})
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180))
r5 = socket$inet6(0xa, 0x3, 0x6722)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4840, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x120, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)
sendfile(r5, r6, &(0x7f0000000040)=0x7f, 0x1000)

02:42:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x1f, 0x10020000, 0x0, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDDISABIO(r1, 0x4b37)
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f00000001c0)=ANY=[], 0x0, 0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540))
msgsnd(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0)
msgrcv(r2, &(0x7f0000000040), 0x8, 0x0, 0x0)
msgctl$IPC_RMID(r2, 0x0)

02:42:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000240)={0x9, {{0x2, 0x4e22, @private=0xa010101}}}, 0x88)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x3f, &(0x7f0000000000)="dc7ae207c9c8aed8e15234e04378f41f6036b916bc06e9a74a9875142461167c6636e972b642413d22e2815f864d5c3dc4495487e34514b9912cb7eade9ed5", 0xa5, 0x0, &(0x7f0000000100)="dd307db3ac9afbed77efed96def1f3c355658bc7f596e13261eb03194ee52dadce2a58be6fa76a41fa245eafd7166265f400976f012ff9c5ec3aa1ac3626fbd6a6a779ef644e41728587f04b0269e39835ef093d09cfbb128b2b5824dc99a3afe50ac9741e4d7c1f9a9b55d95975a484be7fd9ec7b42dbcf7c2d4cd804332c5170c3d4d29c516165f682232f05a66f020498cd0cef7b4f645ce68b8a3026c70320c54efd46"})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x100000000, 0x3465c1)
sendfile(r3, r2, 0x0, 0x4)
read$FUSE(r2, &(0x7f0000000540), 0x1000)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:32 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @any, 0x81}, 0xa)
syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x10001, 0x2080)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000000)
fdatasync(r5)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x900, 0x0)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in6={0xa, 0x4e24, 0xffc, @dev={0xfe, 0x80, [], 0xd}}}}, 0x90)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r4, 0x66}}, 0x10)

02:42:32 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e23, @rand_addr=0x64010102}})
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000140))
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000))

02:42:32 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000000)='./file0\x00', 0x0)

02:42:32 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
write$P9_RLERROR(r0, &(0x7f0000000000)={0x17, 0x7, 0x2, {0xe, 'nodevvboxnet1J'}}, 0x17)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:32 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={{r2}, 0xff, 0x43ac, 0xb362})
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x8000)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:32 executing program 3:
prctl$PR_MCE_KILL_GET(0x22)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10002)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x34, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x2404c400)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r0, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffffd, @loopback, 0x6}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000540)={r7, 0x2}, &(0x7f0000000580)=0x8)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd5dfe186e70c009f}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xffffffff, 0x72, 0x0})

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x21e81)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = socket$rds(0x15, 0x5, 0x0)
accept(r6, 0x0, 0x0)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000003c0))
syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2)
r7 = syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x76, 0x88000)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000340)={0x6, 0x0, 0x4, 0x100, 0xffffffff, {}, {0x5, 0xb, 0xfe, 0xff, 0x2, 0x7}, 0x8, 0x2, @userptr=0x1000, 0xffff01d4, 0x0, r7})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000200)={0xffff, 0x8, &(0x7f0000000100)=[0x7, 0xc341, 0x8, 0x9, 0x2, 0x7fff, 0x3ff, 0x0], &(0x7f0000000140)=[0x7d61], &(0x7f00000001c0)=[0xa788, 0x3, 0xed]})
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x421a00)
open(&(0x7f0000000400)='./file0\x00', 0x400, 0x93)
sendfile(r8, r1, 0x0, 0x10002)

02:42:33 executing program 3 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x5, 0x0, 0x1, 0x2ff, 0x4}})
ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000000)={0x7fff, 0x6, [0x9, 0x40, 0x7fff, 0x9, 0x1], 0x3ff})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r1, 0x540b, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x2000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000001c0)=[{{0x3}, {0x4, 0x1, 0x1, 0x1}}, {{}, {0x4, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x48)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:33 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
dup2(r1, r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x6, 0x9, 0x4, 0x0, 0x8, {}, {0x4, 0xc, 0x8, 0xa0, 0x6, 0x1, "bff57048"}, 0x80000000, 0x1, @userptr=0x100, 0x10001})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = dup(r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000280)={0x6, {{0xa, 0x4e23, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x4, 0x3, 0x4, 0x2, 0x200, {0x77359400}, {0x5, 0x8, 0x0, 0x4, 0x3f, 0x0, "088f8b38"}, 0x7f, 0x3, @userptr=0xae6, 0x4, 0x0, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000240))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r6, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xda1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x80)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x102, 0x1, {0x5, 0x800, 0x3, 0x8}})

02:42:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@null='               \x00', 0xa, 'bond_slave_1\x00'})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:34 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x20})

02:42:34 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x763, 0xbd})

02:42:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:35 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x185, 0x10, 0x0}, 0x3f)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x6, 0x6, 0x4, 0x80400000, 0xff, {0x0, 0x2710}, {0x3, 0x1, 0x2, 0x10, 0x1, 0x0, "759adef3"}, 0xffffffff, 0x3, @planes=&(0x7f0000000000)={0x200, 0x0, @fd, 0x9}, 0x3, 0x0, <r2=>r1})
ioctl$KDADDIO(r2, 0x4b34, 0xfffffffffffffffa)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
rt_sigreturn()

02:42:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000000)={0x8, 0xd89a, [0x1, 0x1f, 0x3, 0x7, 0x3d], 0x21})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0xffff, 0x8, 0x4})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x121201, 0x0)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000001c0)={"013527fec7a85617d018484daf619c51b18b4a1572bfc8c82588f206c437b4019a5e34e02562f8665f10729a15b2bd909a709bb5255039948237128486ac921bd95bd2ffc021601eb63d907ef0e588ce24b1a124339fce1186fabb7e86b157eb31a3135193b68d0db91b34419a3a7d5db5677ef5cf6a48746fefd3fcd38d6d2aa85e5c4d044ba9a6925541117d2c4617558bcab6dde6739775061bcbb3823ae6d184f693f94718c7bf6443fcd07e077213e2eef4cbe2bd07d9627d203f3adecd4a14359d8bb4072df75723340f85aea11ab565e8b0297c8a222feeec3b4b5b2268957ad9adff483b2905f3fc1583d3f72bbce3eaf2133880843258d159fff60fa267fddbfd0dc2d9b077878e04f0e67062b2de431600251ea89cea8ddbbdf9aabc73c02e8f3949d8f128907bc46e6d9e90302db01dbb26deb14dbc4d0a6ef973f9229e4e76f8c89c3b8d268ba20bdacf8ee7720551d038f2c9f2b0cb9710c96fc2f6474226c15af46e2e3dc9b2ba90344bdfa536524ad388d3674a56e2ce7a3b23a00fc96a0dd2bd44299f318f339d2d2d54c7ca5a65dc62d51871957efe8adb0d4e76a6880c98646a9caf2d4eeed812d5566052890ae351051b423690b8d9f439e57d6845eb162bd52dbe1fdb7e061bae672c6c2b981b2428b15293169c69bbc1641b64ee891d41595d1a44c5321d7914738ae42329b69d04bec75f48ea80ec7389316fa6f9cd1dd58c8955086970d457cbe8acce4a546e0aeea3f1bc8db14db59eb428be0082698ee7e95491627abce32d9b60dd7f62d1bebb66c9cb74c4ebadb241bbd5505d7ec73e4c7444d4da0e5bc8b7c1ef7074014b88b70eed8deddc05b6e539ada8e8080a123f5f2c34627afa0d0cb902ef897f7d6035010067bb2a927fbfcb984bb1339846026009a05f15acbe553419a3a155f556ae26de224e7789ff5388ecba83929f6596627b06ccae8daf72a946561e1e5f261b36dfa5d909b6e8a7f40816179c6c395ddc700d158e5cb7db4cd28d60861ba82991ac48a9af790bb531b7d53fae7a6ac3cfc05cb4be478b1bf94b622092477529cec60018effe0b06832b3cf1750147ba97dd4f5c93ce627efc516301a67f53acc890e637bbe88c687460d6774bc62d23b2776a2ecb031a8664513b8aa4987dd3249fec85e3515d06496026bb8bd7b1b77b4d9f6cf0a7919d33ce0dd1e2b1200fa5733be37d7659a4b5ceb1492478d317bcffd3fd508fe3f9fb39d3c691a5f5a01b1d26de1eeebb3b9bf34cc77aa80ddcf96f6e054c5bc030dd86bf29628154930cce031358374b0ccb2ce140dde31be25132b9f1dd5efb04a55824ac4d8450302e7245758fa5d5f1996aa04a8c4c9cefcdf16fd925e95b1efa3edc9eea04b7903fabeb49382e6b804559a54ba4afbbdab9c44a76d60341d50f96933814c6eb0041ce4a38c1"})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r5, 0x901, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x400c080)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
sendfile(r7, r6, 0x0, 0x10002)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000780)={0x8, 0x35, 0x2, 0x2}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x0, 0x6, 0xfffffc01, 0x10, r1, 0x7, [], r4, r6, 0x4, 0x1, 0x3}, 0x40)

02:42:35 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
chdir(&(0x7f0000000000)='./file0\x00')
r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r6}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={<r7=>r6, @in={{0x2, 0x4e22, @empty}}, 0x80, 0x2, 0x4, 0x7f, 0x50, 0xffff}, &(0x7f0000000140)=0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x0, 0x5, 0xfffffe01, 0xffff0000, 0x14, 0x3, 0xab}, &(0x7f0000000280)=0x9c)

02:42:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x414800, 0x0)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x1000)

02:42:36 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x838, 0xd0, 0x0, 0x560, 0x0, 0x560, 0x768, 0x768, 0x768, 0x768, 0x768, 0x6, 0x0, {[{{@ipv6={@private2, @mcast1, [], [], 'veth0_vlan\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x308, 0x350, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @fd}, @common=@ah={{0x30, 'ah\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@dev}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, [], [], 'batadv_slave_1\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"aaed"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @multicast1}, @ipv4=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x898)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r2, 0x40044145, &(0x7f0000000040)=0x7)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
socket$caif_stream(0x25, 0x1, 0x4)

02:42:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0xa1a03)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x20, 0x3, 0x5, 0x1000, 0x4}})
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000100))

02:42:36 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

02:42:37 executing program 4:
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000200)=0x2, 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x9c}, 0x1, 0x0, 0x0, 0x40805}, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x10002)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000000a9090000008311d2b60a9619c0000000a5030000000000000800000000000000b0e4de26f775815b01c4b93cb78797dd71d1a8f210cff63f1d4e0e30c5acad344d073237ee6ff2d7f203aa64bdc6b9c8de083e367e17a37af8cd577b9068c4d87ee28231cdf45b7bbd055f3874e6af9d3b33798a51038d3ce6fb73dd3e833daf9bed20738ac84bc231bf24b71181b05606deb78415f4b871b304b958b8193a9b2abdd10d943b52a5bfe15814049cefb02d028eef14f9794ed0a4e93cbb875f96fd282c6efa19108885e2021a5f86f1dfa8ddff0914"])

02:42:37 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FIOCLEX(r1, 0x5451)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x400, <r4=>0x0, 0x1, 0x8000})
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000000c0)={0x1, r4, 0xf65b8f9ca7dcfe27, 0x101})

02:42:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/27)

02:42:40 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:40 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000000)={0xfffffffffffffec1, 0x0})
sendfile(r1, r0, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x134, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xad85}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x127}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

02:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x3c1040, 0x0)
getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000140)=0x20, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000080)={0x8001, 0x7, 0x4})
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4100, 0x58)
ioctl$KDMKTONE(r3, 0x4b30, 0x9)

02:42:41 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{0x2, 0x3f}, {0x2a, 0x7f}, 0xfffffe01, 0x1, 0xff})

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001180)={&(0x7f0000000000)="0fd889c54e60fe6fa60e4cfa43abf6dbbaf03cebb8", &(0x7f0000000080)=""/62, &(0x7f00000000c0)="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", &(0x7f00000010c0)="da2f06e0bca4684162da9e9003db7cefa112f4a91c4e2cead80b30161d04fe3cdcbd32a3c50757c944e0ca8d3b7044171874f1c56fc971aa309cb3d8a3f54bde01564f5e6c5c69d105abcde682ff50f0295054e02ab33f1cc1accbeac93bd22998d69fb7ab131891ac29221ca3f4b48310d2f5fbc074633cf94effef18428217182ca1791d7c6c87f9e21e8c3b46f39052fa79f1dd97d3ca36a0ec3518e86fc0c9655bc3cf5551c00c55339cf2e1", 0x80000001, r1, 0x4}, 0x38)

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x24000, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000080)=0x2)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:42 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000001c0)={0x6, 0x61})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$PPPIOCDISCONN(r1, 0x7439)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/ldiscs\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0xa3, "5c7de4da91a1b36b6cd7013d1e32aa627fd8792067215d8c5685e2bd69962b33954219a32056a65d9af70dcbfcca3377d0cdcbb125d0c5bdbdb70d0693039ce9aa6f6908e9349ce9a1836efab8a5c2cb7063b4c02da51a73b21d269ad0bd24be1fb3b5ece8e68d21d63214e8a701e2e2226252004649174e3b49a3d72f23c290c5d067698645ea38e7a8e0c9fc3f4906115b01e48b895d44e9af673b3d1022843e8b16"}, &(0x7f0000000000)=0xc7)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x29201)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000240))

02:42:42 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
pipe(&(0x7f0000000500)={<r3=>0xffffffffffffffff})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000100)="dbec92003e16ba2dbcde", 0xa)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r3, 0x0, r6, 0x0, 0x30005, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8090)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000080))

02:42:43 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:43 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/35)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@getlink={0x1f8, 0x12, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x40071, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_VFINFO_LIST={0x44, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xebcd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x9}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x55c0fab8, 0x9e}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x5d}, @IFLA_VF_PORTS={0x170, 0x18, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "00567c477291d078247c6cb02246debf"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08111b71664e44226818f56ab625040c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1835bab0ee4ef57ec1f0389aac0afd34"}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "604f7f338d9cbb791b787abbaa28c5c6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "31f190e9d5b912c779f2ec34e4f4733a"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d5cf384e7b424c455f2229dacfdd03b4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a3a4ef424c8fdf59e85c1e2d0a5ed8de"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'self\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_VF={0x8, 0x1, 0xd1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe0}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '[(^'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b1a010486d535d861b289327572aa588"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a891abda4e8303528c4e636030d84c8b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "66e6b084ad6e7de99282e5f5dbe3e197"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "485e542560139e460d371037aaaf4043"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "af04f7421d31100e94c04909c96fed8f"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7a}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa795}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)

02:42:43 executing program 1:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x448843, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1f, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0xa00000, 0x800, 0x7fffffff, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090b, 0xb1, [], @value64=0x8}})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000100)={0xffff, 0x0, 0xde3, 0xdededede})

02:42:43 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:43 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r7 = dup(r6)
setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f00000001c0)=0x8, 0x2)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={0x0, @ax25={0x3, @bcast, 0x1}, @generic={0x2b, "722832d793e16c8fb41e7c7733a8"}, @xdp={0x2c, 0x9, 0x0, 0x40}, 0x8, 0x0, 0x0, 0x0, 0xff, &(0x7f00000000c0)='veth0_to_bridge\x00', 0xc9c, 0x5, 0x1})
bind$can_raw(r2, &(0x7f0000000180), 0x10)
ioctl$VT_WAITACTIVE(r1, 0x5607)
setgid(0x0)
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_xen(&(0x7f0000000200)='syz\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x1220400, &(0x7f0000000400)={'trans=xen,', {[{@cache_none='cache=none'}, {@dfltgid={'dfltgid'}}], [{@fowner_gt={'fowner>', r8}}, {@measure='measure'}]}})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:44 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'ip6gre0\x00', 0x3}, 0x18)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4, 0xfffc}}}, 0x90)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/16)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getpid()
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2, 0x0, 0x0, 0x300, 0x3}})
ioctl$TIOCEXCL(r1, 0x540c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100))
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002abd7000fbdbdf25050000000c009900030700000000000108000300", @ANYRES32=r7, @ANYBLOB="0800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(0xffffffffffffffff, r2, 0x0, 0x3)
ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000080)=0x51ff)

02:42:44 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x1ff)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8f0, 0x0)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x6, 0xff, 0x0, 0xffffffe1, 0x5, "abe3e632df8d486405938e8adac13b99afe124"})

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x4, 0xfffc}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x2}}, 0x18)

02:42:45 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0xae2d, 0x0, 0x80, 0x3}, {0x4, 0x9, 0x0, 0x5}, {0x81, 0x1f, 0x7, 0x5b0e}, {0x8001, 0x99, 0x20, 0x27}, {0x0, 0x5, 0x91, 0x8}, {0x3, 0x7, 0x0, 0x8001}, {0x6, 0x11, 0x2, 0x4}, {0x1bc, 0x20, 0x2, 0x400}, {0x800, 0xff, 0x2, 0x78e0}, {0x43fd, 0x0, 0x8d, 0x3a2d}]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x7c9767e970866407, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x839f}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x28000000}, 0x4000)

02:42:45 executing program 1:
socketpair(0x1, 0x5, 0x40, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e8, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe6}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)=""/16)

02:42:46 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00')
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4000001)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)=""/16)

02:42:46 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440e0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_LINK={0x8}]}, 0x40}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746888bf91a3d1d3e84e15cfa3afe4558ffa23797760c23363d5e94f305ea6ab6a279994653253121f89f1a91d97601adc865e1547bf0d4f625a9f75d1d71d9082b58a809337c9d6f0b30951c01daafe31f5c48b99da5e8f124bd387d2c187cce94bfb5393665f14d4df45bfc8c480a9ddb908bcc32be2eaf99e96d72da80fc39a5dfc6f9a757067111523a7285967e1725a2dcbd41c2fbe4dbd23cc8db39d1c933264c4aef7"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x60}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000340)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000dc0)=""/109, 0x6d}], 0x2}, 0x2}, {{&(0x7f0000000480)=@tipc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/141, 0x8d}], 0x2, &(0x7f00000006c0)=""/224, 0xfffffcf1}, 0x80000001}, {{&(0x7f00000007c0)=@phonet, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000980)=""/104, 0x68}, {&(0x7f0000000a00)=""/113, 0x71}], 0x4, &(0x7f0000000ac0)=""/15, 0xf}, 0x1be}], 0x3, 0x1, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc822}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x60}}, 0x40d4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x5c903a78, 0x0, 'client1\x00', 0x1, "67623b7fcef6300a", "849be427300488055f4995ceac8564453caa8fb3066f984dca415f48d20420d8", 0x100, 0x8})
r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r10, &(0x7f00000000c0))
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x7, @pix_mp={0x9, 0x100, 0x48524742, 0x8, 0x0, [{0x80000000, 0x2}, {0x3, 0x4}, {0x80, 0x9}, {0x9, 0x7fff}, {0x5, 0x1f}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x7ff}], 0x8, 0x81, 0x3, 0x2, 0x6}})
ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000040))

[  394.398515] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r3, @ANYBLOB="0a002b74000000000000000c000400fdffffffffffffff00"/38], 0x2c}, 0x1, 0x0, 0x0, 0xfedcdc6c815a2d1a}, 0x40000)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x303}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4599}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x2001c000}, 0x4040)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044005}, 0x4000)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  394.454924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  394.528143]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  394.542302] loop0: p1 start 2564762831 is beyond EOD, truncated
[  394.549083] loop0: p2 start 2494347297 is beyond EOD, truncated
[  394.555682] loop0: p3 start 1915790064 is beyond EOD, truncated
[  394.562647] loop0: p4 start 983213520 is beyond EOD, truncated
[  394.569393] loop0: p5 start 676962771 is beyond EOD, truncated
[  394.576876] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:46 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x298000, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x13)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f00000005c0)=0xc)
chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0)
syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x6, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="09323f9efd2bce39112f1e26829edef469c9510a2b969ee1da19c7062aa6e4d99fa1824abf9d354d0d51fef3f15dfb9aa9911b96785eaadce73ad749d4d88875000c75b86917f994710392f5857685ccf843a742fd5953e323e83760f7d03800682461f88361f79b7f7f9c75e5bd64e8f4b1eb96fee9da01bcc5e039cc090e25e6b32cf6cc1b438e853ff39d4ff591c392cb337b768149483b1f9d5840f7f06c19c9de8fe996a41c83bad1d5dcdd3fc36fbc364fb5b5bba0fa9d330ddfb776129918180401cce96815c042327a0e5a9810c16e6f199b50b6f01190586e323483345c28fbb663bc9e2f249076c3a4a2ecdf4e674edca4ad", 0xf7, 0x40}, {&(0x7f00000003c0)="85025c7ddf1fd5514ade2cb94a7970d7a2396f68ef8cdc379decb0390a9a09ddc1015496c77f7701403e45e6fd6c324360ef3e092e4d02eb0967e4f1fe0da9abc95add8382a9c18e98b1a0c7156b1c5b96382e4a05a216e37abb60270bf7658d8707682f1fc062c9c71a966b4bde4ac84e28f60c2bf8785217599e00690ae2229858d1e7fdb4bce7", 0x88, 0xffff}, {&(0x7f0000000480)="5d004b43207246b695988b496ced75922a1eaf1e8a5054d6f351ad2bca0b734adf66fad3c6d972a878a1cb644186787db42075b37877efdc1fdc6b59417e43eb80fa1a2729c717af47f5f2e2a8ef55e9ab73fa84ef35f8e40ceffcfed2011130dbcfa990a297f8263d37569417a0ae2cfc8cf4302f002bafbd2e90616443f5b0b8db4e913093fc24bed45fce3497d102e3e028fdcc004db4c93b31048aab20a81f68cab9eabc0337466a0abb0847c22f04de1d4d0c77f40a621a2c", 0xbb, 0x3f}], 0x4050, &(0x7f0000000240)={[{@usrquota='usrquota'}, {@errors_remount='errors=remount-ro'}, {@errors_continue='errors=continue'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_eq={'uid', 0x3d, r7}}]})

02:42:46 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x408000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x3, 0xfa, 0x81, 0x1f, 0x0, 0x3f, 0x23002, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x100000001, 0x101}, 0x10401, 0x8a, 0x5d01e772, 0x7, 0x8, 0x5, 0x8a}, r1, 0x6, r2, 0x2)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  394.600947] loop0: p7 start 745035705 is beyond EOD, truncated
[  394.607050] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
getpriority(0x0, r1)

[  394.807734]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  394.816461] loop0: p1 start 2564762831 is beyond EOD, truncated
[  394.839131] loop0: p2 start 2494347297 is beyond EOD, truncated
[  394.850293] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)

[  394.858116] loop0: p4 start 983213520 is beyond EOD, truncated
[  394.874871] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:47 executing program 0:
epoll_create(0x2000007)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9f0000, 0x1, 0x8, <r1=>r0, 0x0, &(0x7f0000000080)={0xa30001, 0xda, [], @ptr=0x1}})
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000140)={{0x0, 0x0, 0x80}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x800, 0x8010000000000084)
connect$inet6(r2, 0x0, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003e000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="f3f33e6526f20f0174093e0f20050f20d86635200000000f22d8d8d3b807008ed866b9850500000f32660f3880bd07002e3e0f789b0080b804008ec00f01c5", 0x3f}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100))
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

[  394.909241] loop0: p6 start 3159018777 is beyond EOD, truncated
[  394.919574] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:47 executing program 4:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x14200, 0x48)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))

[  394.954792] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))

02:42:47 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_virt_wifi\x00'})

02:42:47 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000040)={0x3027, 0x50, 0x1, 0x80000000, 0x401})
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x3, 0x5, 0x6, 0x2, 0x200})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x1f})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x3)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x3f, 0xa, 0x4, 0x80000, 0x7, {0x77359400}, {0x5, 0x8, 0x5, 0x2, 0x1f, 0x4, "28bf002c"}, 0x10000000, 0x1, @planes=&(0x7f0000000000)={0xaad, 0x5, @userptr=0x6cf6b8ec, 0x6}, 0x7d800000, 0x0, <r2=>r1})
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x2f, @multicast2, 0x4e20, 0x1, 'fo\x00', 0xa, 0x3, 0x2d}, {@remote, 0x4e21, 0x10000, 0x7, 0x8, 0xfff}}, 0x44)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="067b20761bc4e86a0db379391fe4421b613a20fe669f8a1b3208159d27e2aeb03ebf7e65615fabaf3bc2ed7fa54453015faa168b18d3a20f8b720dd490d5f2ac3475037899dafdd09091d3004fc6565c39f7743db49e4740a7d2c298e854181b3ebbe2ed78be658f204f", 0x6a, r1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={<r8=>r7, 0x6, 0x6, 0x7, 0xfffff001, 0x3}, &(0x7f00000002c0)=0x14)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={r8, 0x2}, &(0x7f0000000340)=0xc)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r2, 0x0, 0x10002)
write$6lowpan_control(r2, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)

02:42:48 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x60}}, 0x40080)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x274, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dff1b5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7756b143}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8290}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9663}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df008e2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6926}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd10c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12fe0564}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e0ac7ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb74d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x653ca620}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50c1669e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd520}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431795d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa0cf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x634177a0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c80}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bf3cd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ce85498}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x388e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cb91983}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45aeaf4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2da8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a53a55}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69911f0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53c7c41d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x233d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61beb38b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39de54a1}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2747fa77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x377014f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74a7795e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f878c64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688089d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc35d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75869a58}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af015a4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5679}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf99e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x375}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20f4dd43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f6722ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf81f9}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4546997d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecd9731}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22734e7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x44}, 0x6522d3cbaacab9a4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000004c0)={0x2, 'veth0_vlan\x00', 0x4}, 0x18)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x4, @mcast1, 0x3f}}}, 0x84)
io_setup(0x4, &(0x7f0000000000))

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
socket$inet6_udp(0xa, 0x2, 0x0)

02:42:48 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x101, 0x20200)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
sendfile(r3, r2, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xfffffffffffffd28)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r8=>r7, 0x3, 0x1, [0x0]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x400, 0x5, [0x6, 0x4, 0x6359, 0x4, 0x921f]}, 0x12)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xffff, 0x2fe}})
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x4, 0x81, 0x8, 0x7fff, 0x4, "b1a9401d252825c027ea2be14b3b913b7e23f7", 0xf92, 0x10001})

02:42:49 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x9)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))

[  396.687800]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  396.720155] loop0: p1 start 2564762831 is beyond EOD, truncated
[  396.737348] loop0: p2 start 2494347297 is beyond EOD, truncated
[  396.758084] loop0: p3 start 1915790064 is beyond EOD, truncated
[  396.771127] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000))

[  396.791709] loop0: p5 start 676962771 is beyond EOD, truncated
[  396.808151] loop0: p6 start 3159018777 is beyond EOD, truncated
[  396.821101] loop0: p7 start 745035705 is beyond EOD, truncated
[  396.827193] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:49 executing program 0:
r0 = epoll_create(0x2800007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)=0x40)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xce8c1, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffd, 0x1e00)
sendfile(r7, r6, 0x0, 0x10002)
r8 = socket$inet6(0xa, 0xa, 0x8010000000000084)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000acf6ad0c8eb44a3c2e7c7491b86fe941f2ed9d4268d7ea66b02c912188bc975f4dd31aadeb42981255513bcaa4d24235f6e1579c84b5189831fd40bdd537fe61b5da7567eff9ff1ce3a3449db8649e91c5b9fe8722f6c25858d28dbabb712a97be52806cf95f210300000097c2980385a903ab00ebccd0bab918713be9a5c268a8bb1cd6051fe82e03000000000000040157e8dce81465690b0c1b8e472f4461e674699b5d39", @ANYRES32=<r10=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r10}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000022c0)={<r11=>0x0, 0x1082, "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"}, &(0x7f0000001180)=0x108a)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000011c0)={r11, 0x81}, 0x8)

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x228000, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x52, 0x0, 0x400, {0x2, 0x4}, {0x200, 0xffff}, @period={0x5a, 0x5, 0x400, 0xff, 0xffff, {0x4, 0x7, 0x4, 0x2}, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x2, 0xfa, 0x1f, 0xfff, 0x1, 0xfffd]}})

02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fcntl$getownex(r1, 0x10, &(0x7f0000000000))

02:42:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
ptrace$cont(0x18, r1, 0x8, 0x5)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=<r3=>0x0)
rt_sigqueueinfo(r3, 0x16, &(0x7f0000000080)={0x21, 0x2, 0x1})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0x1, 0xeb})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
write$P9_RLOCK(r4, &(0x7f00000002c0)={0x8, 0x35, 0x2}, 0x8)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00f729bd7000fedbea1daba2c4510a00f67fed301c013379000000000006000f000700000008000900000000200000000000000000000100000000000001", @ANYRESHEX=r7, @ANYRESOCT=r8, @ANYRESDEC, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x40806)

[  397.235058]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  397.250582] loop0: p1 start 2564762831 is beyond EOD, truncated
[  397.270328] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:49 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00')
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, "948b03b76838ee68d0a5cbbb2e8d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)
sendfile(r4, r3, 0x0, 0x10002)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={<r8=>0x0, 0xfe55}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYBLOB="b781161ba79b5f113423d5ea01000400"], &(0x7f0000000180)=0xa)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040))

[  397.286704] loop0: p3 start 1915790064 is beyond EOD, truncated
[  397.301312] loop0: p4 start 983213520 is beyond EOD, truncated
[  397.320315] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:49 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r7, 0xc0, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x2, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0xcbe, @private2={0xfc, 0x2, [], 0x1}, 0x101}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e21, 0x7e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000040)=0x10)

[  397.336916] loop0: p6 start 3159018777 is beyond EOD, truncated
[  397.349780] loop0: p7 start 745035705 is beyond EOD, truncated
[  397.367997] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:49 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0xb700)

02:42:50 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
fchmodat(r2, &(0x7f0000000040)='./file0\x00', 0x24)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000000)=""/5)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSBRKP(r7, 0x5425, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x4)
write$nbd(r2, &(0x7f0000000340)={0x67446698, 0x0, 0x3, 0x2, 0x2, "45bc2a62aabbec084c22856529da39117c4f6d59e017542860cc9c285cd35631738c3f77b68c517bc50989056b7ee8d97c1e6125640e7a64581b7355000b878949ed4a8290a617252970483ddcc155e349077bb2d99eb9a030a294b3959c52a1f41191edcc326ef073a4317390ef2936d20900c01b34b362930a2908afe4c34340c5d1e449fec1b943ecdacaa5334e0fa41529b60007f4ca73baad8a773d6d77869d451e3856683c150ab21c574c3b830b0ec65b8ca67a657bcad21ffff921a5431bda1fdda9b740be0000000000000000"}, 0xe1)

02:42:50 executing program 4:
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000140)={0x80000001, "3564d265505aca5c0589fe232771e0c5afcd9b917717704abe50445cfb66439b", 0x3})
r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x0, 0x10863577, <r4=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9d0903, 0x2ef, [], @value64=0x4}})
bind$isdn_base(r4, &(0x7f0000000100)={0x22, 0x8, 0x1, 0x1d, 0xfb}, 0x6)

[  397.662066]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  397.687159] loop0: p1 start 2564762831 is beyond EOD, truncated
[  397.704866] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:50 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f00000001c0)={0x8, 0x1})
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x6})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140))
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8003, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100))

[  397.720097] loop0: p3 start 1915790064 is beyond EOD, truncated
[  397.741903] loop0: p4 start 983213520 is beyond EOD, truncated
[  397.758506] loop0: p5 start 676962771 is beyond EOD, truncated
[  397.775386] loop0: p6 start 3159018777 is beyond EOD, truncated
[  397.788224] loop0: p7 start 745035705 is beyond EOD, truncated
[  397.805977] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff, 0x1}, 0x20)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KIOCSOUND(r5, 0x4b2f, 0x20003f)
symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:50 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x10002)
epoll_create1(0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r3, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2f6}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c811}, 0x8000)

02:42:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0)

[  398.022065]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  398.032085] loop0: p1 start 2564762831 is beyond EOD, truncated
[  398.059570] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:50 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x123)

[  398.075422] loop0: p3 start 1915790064 is beyond EOD, truncated
[  398.089751] loop0: p4 start 983213520 is beyond EOD, truncated
[  398.103455] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:50 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  398.120920] loop0: p6 start 3159018777 is beyond EOD, truncated
[  398.139861] loop0: p7 start 745035705 is beyond EOD, truncated
[  398.158346] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:50 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x8)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/26)

02:42:50 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]})

02:42:50 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x1000000c})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:50 executing program 1:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

02:42:50 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0))
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2, 0x0)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x6, 0x4, 0x4, 0x800, 0x8, {0x0, 0x2710}, {0x5, 0xc, 0x1c, 0x9, 0x20, 0x8, "c662a03e"}, 0x8, 0x3, @planes=&(0x7f0000000140)={0x60fe, 0x2, @fd, 0x80000001}, 0x4, 0x0, <r4=>r1})
ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000200)=""/67)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

[  398.413332]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  398.431392] loop0: p1 start 2564762831 is beyond EOD, truncated
[  398.445956] loop0: p2 start 2494347297 is beyond EOD, truncated
[  398.460088] loop0: p3 start 1915790064 is beyond EOD, truncated
[  398.473747] loop0: p4 start 983213520 is beyond EOD, truncated
[  398.486858] loop0: p5 start 676962771 is beyond EOD, truncated
[  398.503495] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:50 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  398.516764] loop0: p7 start 745035705 is beyond EOD, truncated
[  398.522906] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x4000, 0x400, {r1, r2/1000+10000}, {0x1, 0x0, 0x7a, 0x3f, 0x3, 0x80, "158d2b5a"}, 0x7fff, 0x1, @userptr=0x748eb1b9, 0x97, 0x0, <r4=>r3})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000140))
ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f0000000100)={0x0, 0xfffffffffffffe01, 0x4, 0x40, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffb})

02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280)=0x5, 0x4)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xfffffffffffffff9, 0x10000)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r7, 0x74, "4ed216fd6ff39317d8ea9955410372a602960d7d6383f089d6c203f8374b04802443e31fb97218b41e110db8f5a5dbec70648229d019b0a560e090bf85f9605b4c1f17b56bf6270ac9640a672133b71f527ae48dfdb126982b87e5f7836dd1e90bd2088e9070fb0ec5d50371de9999b300190e84"}, &(0x7f0000000380)=0x7c)
ioctl$KDDELIO(r3, 0x4b35, 0x54015922)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x1, 0x1}, {0xb3, 0x1}, 0x81, 0x5, 0x1f})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000100)=[0x2, 0x6b, 0x7], &(0x7f0000000140)=[0x9, 0x10000, 0x2, 0x79f, 0xe9f6d44, 0x9, 0x8, 0x0, 0x3], &(0x7f00000001c0)=[0x81, 0x7, 0x0, 0x9, 0x4, 0x1f], &(0x7f0000000200)=[0x0, 0x9, 0x3, 0x3f, 0x8, 0x8, 0x7, 0x3, 0xfff, 0xe2], 0x0, 0x80000000})

02:42:51 executing program 0:
epoll_create(0x2000007)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x111000, 0x0)
syz_extract_tcp_res(&(0x7f0000000280), 0x3f, 0x9)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000080))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x10002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x480, 0x0)
ioctl$NBD_SET_SIZE(r4, 0xab02, 0x1f)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$BLKPG(r5, 0x1269, &(0x7f0000000240)={0xffff, 0x60f9, 0xfd, &(0x7f0000000140)="31aa3c0f1545f88592a28442ae4f96ec909a5c060e26e876688ee8cc1328970db1c0c94bf66a5d2844a408bd46e0e84f97894c2f8c9d8aed19f38f501da955dddd773af049418c0e6a4766b47a6aa33264c3f130664b27a58d3cb5a40af961f920046d66af19b7372751af12347015d950c981e596e3793a9c9ff50236ba2ef4af7251e08e316d7c5bb91f118d9a05ac833b601df6de1512b84537da45246862562faf119c7ab9d53f1ad9ed66ef3ba6079691037b9fe9fea184db75416ad81097582327dc3940e9fe0ea82fb3c5d9f08fabb2eefb0a4fa96ef852a008e417ae6ee9a45fbe76af41cf244ada8b9697412932d1dabf36f30dc9d42e75a5"})
ioctl$TCGETS(r3, 0x5401, &(0x7f0000000100))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

02:42:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x8, 0x9, 0x4, 0x100, 0x7, {r1, r2/1000+10000}, {0x3, 0x0, 0x81, 0x6, 0x4, 0x8, "553ecf7d"}, 0x4063, 0x1, @offset=0xfffffffc, 0x1, 0x0, <r3=>0xffffffffffffffff})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/key-users\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x3)
chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r9)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r11=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r11)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x5}, {0x2, 0x2, r7}], {0x4, 0x4}, [{0x8, 0x4, r9}, {0x8, 0x4, r11}], {0x10, 0x7}, {0x20, 0x6}}, 0x4c, 0x2)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000100))
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:51 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2a882, 0x0)
bind$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
mq_open(&(0x7f00000000c0)='+&GPL}vboxnet1+^posix_acl_access\x00', 0x80, 0x82, &(0x7f0000000100)={0x9, 0xf8dc, 0x0, 0x3})
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))

02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x808180)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x5, 0x19, &(0x7f0000000080)="fb892e137ab317c13a28dd7b9cff00000000000300007fe58d"})
ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x7fe00, 0x9a, 0x8, 0x2, 0xcbf})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:51 executing program 1:
syz_open_dev$tty1(0xc, 0x4, 0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/12)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000080)={0x7, '\x00', {0xeedb}, 0x7fff})
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xe0)

02:42:51 executing program 0:
epoll_create(0x2000007)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x120a81)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$FBIOBLANK(r0, 0x4611, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0000080008000000000006000b001a00000006000b002b00000088b7a0c91ddb448cd38fdcb9eea50305830f34f79dd6ac9f6940bc858fd1f62e1c66c862001e430c7f1126d152e59efefd094bcab50421b54ee39399ece0b171333023269b0b3c826cb7ada5fdd8387e895ce98dc88b01858a"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x21a01)
sendfile(r7, r3, 0x0, 0x10002)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f00000000c0)={0x4000200a})
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  399.047144]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  399.059011] loop0: p1 start 2564762831 is beyond EOD, truncated
[  399.073720] loop0: p2 start 2494347297 is beyond EOD, truncated
[  399.091196] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:51 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x48d02895, 0x6})

[  399.097354] loop0: p4 start 983213520 is beyond EOD, truncated
[  399.109021] loop0: p5 start 676962771 is beyond EOD, truncated
[  399.129250] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:51 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a0, r4, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb121}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6604}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x847}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40c7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x56}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb30d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x14000841}, 0x4000000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000000)={0xffffffffffff2750, <r10=>0x0, 0x10000, 0xfff})
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000040)={r10, 0x8})

02:42:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  399.145766] loop0: p7 start 745035705 is beyond EOD, truncated
[  399.156511] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:51 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x4, 0x0, 0x81})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x200)

02:42:51 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r4 = getpgrp(r3)
write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="300000003701000102000000000000000500000000000000", @ANYRES32=r4, @ANYBLOB="12010f6410ff68a7da3f0367e0e4f753e3dcf3a1cd0fc70932e13c6621f9a7"], 0x30)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r8, r7, 0x0, 0x10002)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14)
sendfile(r6, r5, 0x0, 0x10002)
r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
write$evdev(r10, &(0x7f0000000200)=[{{}, 0x15, 0x2, 0xfffffffd}], 0x18)

02:42:51 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:51 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x88040, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000100)={0x2b, @private=0xa010100, 0x4e23, 0x3, 'nq\x00', 0x20, 0x6, 0xb}, 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x8c, @local, 0x6}, @in6={0xa, 0x4e21, 0x401, @remote, 0x100}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x80, @mcast2, 0x1}], 0x84)

02:42:51 executing program 1:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)

02:42:52 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x390, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fd8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x417}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x2c}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @empty, 0x37f}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x3c, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x12c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4662}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x42102)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0)

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/159)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x10)

02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:52 executing program 0:
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000380)=0x3, 0x4)
r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000140))
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000280)=0xffffffac)
setgid(r7)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xfffffffffffffffc, 0xfffffffe, 0x81})
r8 = epoll_create(0x91c)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040))

02:42:52 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x450, 0x3f4, 0x4, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x16, [0x4f85, 0x40, 0xa32, 0x1, 0xe69c, 0x5, 0x80000000, 0x2, 0x38, 0x7, 0x4, 0x7f, 0x8, 0x81, 0x9, 0xffffffff, 0x9, 0x2de3, 0x48, 0x2, 0xe023, 0x80000001, 0x7, 0x6, 0x7fffffff, 0xdfaf, 0x5, 0x8, 0x996, 0x98c, 0x5, 0x40, 0xfffffffb, 0xc630, 0x6, 0x9, 0xa6, 0x414, 0x7, 0xfffffff8, 0x9, 0x7f, 0x5, 0x7, 0x4, 0x20, 0x6, 0xfffffff7, 0xfd57, 0x84, 0x1d, 0x7f, 0x200, 0x8, 0x6, 0x2, 0x4, 0xfffffffc, 0x4a19, 0x81, 0x6, 0xffffffff, 0x0, 0x100], [0x20, 0x7, 0x8, 0x3, 0x4, 0x927, 0xfffff800, 0x2, 0x401, 0x6, 0x7f, 0x800, 0x39, 0x3, 0x6, 0x0, 0x64, 0x5, 0x6, 0x7c, 0x4, 0x2fe8e770, 0x0, 0x9a3, 0x2bc0d809, 0x4, 0x1, 0x4, 0x1, 0x10000, 0x3, 0x4, 0x58e, 0x3, 0x6, 0x0, 0xfe66, 0x8, 0xd2, 0x2, 0x5, 0x6ce22f52, 0x7, 0x7, 0x6, 0x5, 0x1ff, 0x1263, 0x8eaa, 0x2, 0x40, 0xffffffff, 0x4, 0x2, 0xffffffff, 0x1f, 0x8, 0x3f, 0x1, 0xc76, 0x1000, 0xf8, 0x9, 0x2cf8], [0xa3, 0x101, 0x9, 0x0, 0x1, 0x3, 0x80, 0x7d, 0x9, 0x2, 0x9, 0x30, 0x40, 0x3, 0x100, 0x100, 0x0, 0x4c, 0x1, 0x5, 0x2, 0x6, 0x6, 0x10000, 0x10001, 0xa1b, 0x0, 0x8, 0x1, 0x6, 0x1, 0x7, 0x9, 0x3, 0x114a1e45, 0x9, 0x4, 0x0, 0xeb1d, 0x3f, 0x1, 0x400, 0xffff, 0x7ff, 0x40, 0x9, 0x5, 0x5, 0x10001, 0x8001, 0x8, 0x5, 0x3ff, 0xee000000, 0x1, 0x8, 0x8367, 0x80000000, 0x4, 0x40, 0x9, 0x40, 0xffff7fff, 0x1f], [0x7, 0x2d7464eb, 0x1, 0x0, 0x9cd, 0x6, 0x65e6, 0x20, 0x9, 0x8, 0x1, 0x0, 0x7f, 0x1, 0x2, 0x140, 0x8, 0x32d, 0x1, 0x2, 0x299, 0x6, 0x2, 0xfffff354, 0xfffffff9, 0x7, 0xfff, 0xe4, 0x3, 0x81, 0x3, 0x3, 0x0, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x6, 0xffffffff, 0x358a8990, 0x1, 0xf16, 0x0, 0x1, 0xffffffff, 0x4, 0x0, 0x0, 0x7fffffff, 0x7fff, 0x16b2aa7, 0x200, 0x7, 0xa17, 0x6, 0xd8c2, 0x9, 0x800, 0x7fff, 0x3, 0xfffffff7, 0x1, 0x80000001], 0x2e, ['vboxnet0]bdevvmnet0\x00', '/dev/input/event#\x00', '\x00', '\x00', 'bdev\'\x00']}, ["", ""]}, 0x450}}, 0x4000)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={r4, @empty, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000180))

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0xf})
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:52 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000100)={0x4, 0x1, [0x2, 0x70fb, 0x2, 0x800, 0x8000], 0x4})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:52 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x1a, 0xfffffffd, 0x81, 0x0})

[  399.953331]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  399.959121] loop0: p1 start 2564762831 is beyond EOD, truncated
[  399.966914] loop0: p2 start 2494347297 is beyond EOD, truncated
[  399.974198] loop0: p3 start 1915790064 is beyond EOD, truncated
[  399.980333] loop0: p4 start 983213520 is beyond EOD, truncated
[  399.990363] loop0: p5 start 676962771 is beyond EOD, truncated
[  400.000541] loop0: p6 start 3159018777 is beyond EOD, truncated
[  400.016709] loop0: p7 start 745035705 is beyond EOD, truncated
[  400.031477] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:52 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080))

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x7)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/7)

02:42:52 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0xd7, 0x5000})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:52 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, [], 0x1}}, {0xa, 0x4e22, 0x4beb, @private1={0xfc, 0x1, [], 0x1}, 0x80000000}, 0xfff7, [0xfffffff7, 0x7, 0x4, 0x1, 0xc5c, 0xfffffffa, 0x2, 0x8]}, 0x5c)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x400000, 0xfffffffd, 0x16, 0x1d6, 0x0})

02:42:52 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x1}, 0x1f, 0x2, 0x3000, 0x40, 0x5, 'syz1\x00', "42004c9f535928e10ca4f6f0b915d2dabd3090bd7c1b3a65936b8961f84bdbfa", "373b8b2b893b81e7e434443f420f142a06b0fb46aefe9c2f5e40af47c28f190b", [{0x3ff, 0x80, {0x0, 0x8}}, {0x81, 0x4, {0x1, 0x2}}, {0x1, 0xfff, {0x2}}, {0x7, 0x2}, {0x1ff, 0xffff, {0x3, 0x40}}, {0xfca, 0x0, {0x2, 0x3f}}, {0x5, 0xec, {0x0, 0x8}}, {0x16, 0x8000, {0x0, 0x80}}, {0x2, 0x6, {0x1, 0x2}}, {0x4, 0x200, {0x3, 0x1350}}, {0x6, 0xaf41, {0x0, 0xffffffff}}, {0x9, 0x84, {0x3, 0x101}}, {0x6, 0x100, {0xb7b943be20b8bf77, 0x7}}, {0x87, 0x80, {0x2, 0x1}}, {0x0, 0x6, {0x1, 0x401}}, {0xfff9, 0xffff, {0x3, 0xcc}}, {0x9, 0x51, {0x3, 0xc93}}, {0x2c, 0x7fff, {0x0, 0x7}}, {0xaf, 0x3, {0x2, 0xfffff163}}, {0x1, 0x3, {0x0, 0x2}}, {0x101, 0x4fb, {0x1, 0x200}}, {0xc2, 0x3ff, {0x0, 0x5}}, {0xff, 0x0, {0x0, 0x3ff}}, {0x6, 0x7, {0x3, 0x9}}, {0x8001, 0x2, {0x0, 0x8273}}, {0x4, 0x101, {0x3, 0x3}}, {0x8, 0x0, {0x0, 0x401}}, {0x7fff, 0x5, {0x3}}, {0x2, 0x7, {0x2, 0xffff}}, {0x0, 0x9e0, {0x1, 0x80000000}}, {0x0, 0x0, {0x3, 0xc2}}, {0x0, 0xffff, {0x2, 0xe9}}, {0x1ff, 0x3, {0x3, 0x41b9}}, {0x40, 0x1f, {0x3, 0x2}}, {0x4, 0x0, {0x1, 0x4}}, {0x4, 0x32b, {0x3, 0x401}}, {0x946f, 0x8001, {0xb654a9b98d6eb9b0, 0xffff}}, {0x3, 0x6, {0x2, 0x5}}, {0x2, 0x3, {0x3, 0x7}}, {0x0, 0x8, {0x1, 0x141}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x81, 0x90, 0x4f, 0xe95, 0x6, 'syz0\x00', "9c5d655e7dc58c441ccea228d7fa9cac7508df2666c42c557c71115cb0003c3b", "7ec580d9607de0a0ccd80bf1e268148b93db4fec66596fc7136f4bf8dc2df29c", [{0x8000, 0x6, {0x3}}, {0x4, 0x6, {0x0, 0x10001}}, {0xfff7, 0x800, {0x0, 0x5}}, {0x8, 0x2, {0x1, 0xffffffc1}}, {0x843c, 0x43, {0x3, 0x9}}, {0x7, 0x7fff, {0x2, 0x9}}, {0x200, 0x8, {0x0, 0x7}}, {0x6, 0x6, {0x0, 0x9}}, {0x81, 0x5, {0x0, 0x3}}, {0x1, 0x8, {0x0, 0x40}}, {0x1, 0x2, {0x1, 0xffff}}, {0x3ff, 0x0, {0x3, 0x9}}, {0x8, 0x8001, {0x1, 0xad}}, {0x7, 0x7, {0x1, 0x692b8916}}, {0xffff, 0xe0, {0x3, 0x7}}, {0x81, 0x7fff, {0x3}}, {0xfee, 0xb2ea, {0x1, 0x3}}, {0x72, 0x2, {0x3, 0x3f}}, {0x4, 0x7, {0x1}}, {0x200, 0x9, {0x0, 0x1}}, {0x445, 0x9, {0x1, 0x6}}, {0x2, 0x5, {0x1, 0x7}}, {0x5, 0x4, {0x0, 0x1}}, {0x5, 0x9, {0x3, 0x5}}, {0x6, 0x5b7, {0x3, 0xffffffff}}, {0x3, 0x5, {0x2, 0x5}}, {0x40, 0x7, {0x2, 0x4}}, {0xfff, 0xffff, {0x0, 0x5}}, {0xffff, 0xfffb, {0x0, 0x8}}, {0x80, 0xc258, {0x3, 0xfffffff7}}, {0x800, 0x0, {0x0, 0x101}}, {0x1, 0x6f, {0x1, 0x7fff}}, {0xdf4b, 0xab, {0x0, 0x1}}, {0x3, 0x71cd, {0x1, 0x3}}, {0xff, 0x100, {0x3, 0x7}}, {0x9, 0x5, {0x2, 0x5}}, {0x3, 0x0, {0xc05de3301ccd04bb, 0x8}}, {0x0, 0x4, {0x0, 0x4}}, {0x400, 0x3, {0x3, 0x3f}}, {0x800, 0x2, {0x0, 0x2}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4008844}, 0x22004801)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000))
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

02:42:52 executing program 0:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))

02:42:52 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000000)=0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
fcntl$addseals(r4, 0x409, 0x8)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r3, 0x0, 0x10002)
getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @private}}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r9, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@rand_addr=0x64010100, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0x9, 0x2, 0xa0, 0xc0, 0x2, r7, r9}, {0x4, 0x3, 0x800, 0x0, 0x1000, 0x20000, 0x4}, {0x4000000000000002, 0xa2, 0x80000000000000, 0x2}, 0x80000000, 0x6e6bb5, 0x2, 0x8a741b9c6c4330f7, 0x3, 0x2}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x8, @in6=@loopback, 0x3501, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xe8)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

[  400.425310]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  400.442692] loop0: p1 start 2564762831 is beyond EOD, truncated
[  400.461850] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:52 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x208002, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2601, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, [], 0x3f}, 0x20}], 0x1c)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x20, 0x0, 0xfffffffc, 0x0})

02:42:52 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa8, r5, 0x180, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe89d}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb8c7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00')
sendfile(r7, r6, 0x0, 0x10002)
ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000200)={'bond0\x00', 0x1})
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x10002)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000300)='fou\x00', 0x4)
read$dsp(r1, &(0x7f0000000080)=""/9, 0x9)

[  400.479893] loop0: p3 start 1915790064 is beyond EOD, truncated
[  400.500348] loop0: p4 start 983213520 is beyond EOD, truncated
[  400.517275] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:52 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
syz_open_procfs(r0, &(0x7f0000000000)='schedstat\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000180))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x200, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x300, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x850)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10800}, 0x1)

[  400.530055] loop0: p6 start 3159018777 is beyond EOD, truncated
[  400.554656] loop0: p7 start 745035705 is beyond EOD, truncated
02:42:52 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x1, 0xd, 0x56, 0x0})

[  400.585909] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400100, 0x0)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000080))

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x48d02895, 0x6})

02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x48d02895, 0x6})

02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x7)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000002c0))
lseek(r1, 0x2, 0x2)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/122)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x8, 0x9016, 0x7, 0x0, 0x0, [{{r4}, 0x2}, {{r0}, 0xfffffffffffffffb}, {{r5}, 0x6}, {{r6}, 0xff}, {{r0}, 0x401}, {}, {{r2}, 0x1}]})
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]})
ptrace$getregs(0xffffffffffffffff, r3, 0x27d84c0, &(0x7f0000000000)=""/126)

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x48d02895, 0x6})

02:42:53 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r5)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x3c000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r3, @ANYBLOB="000002090000000000a4c7e41d", @ANYRESDEC=r5, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303230302c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c616c6c6f775f6f746865722c61756469742c646f6e745f61707072616973652c6f626a5f747970653d2a27403a73656c696e75786d643573756d6e6f6465762e405bf3cd6370757365742c646f6e745f686173682c61707072616973655f747970653d696d617369672c636f6e746578743d73797361646d5f752c00"])
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000040)=""/16)

02:42:53 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x4, 0x6, 0x6, 0x1200000, 0x1})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @mss={0x2, 0x5}, @window={0x3, 0x6, 0x800}, @sack_perm], 0x4)
socket$inet6(0xa, 0x2, 0x3ff)

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  401.050905]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  401.056655] loop0: p1 start 2564762831 is beyond EOD, truncated
[  401.076523] loop0: p2 start 2494347297 is beyond EOD, truncated
[  401.093194] loop0: p3 start 1915790064 is beyond EOD, truncated
02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000080)="8b3458877f3a0313ddbaa62d4f1a3e89f720ed9e7f1da25324ee898961bb25fec40319893d0ba378b8c5353e26dc462b705cd3bff588e49990d9a74bd5aecc3b73d319dadc36bc04b6f5241659dec5cc2e1ffabae0d18b237b0da1d2dcd7982b8815ad6ab5fd686e62383d83cb2c19c9166c7437357000f888358949e28b76af5f343050b90912f7468384529e05f056465388ceacef279a1e9feb6abbe5e5b72392a84008dfc2a4e807bf2eb71ea889ae0aa3c8bfd80653486a39"}, 0x20)

02:42:53 executing program 0:
r0 = epoll_create(0x2000007)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x1}, 0xf)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  401.101654] loop0: p4 start 983213520 is beyond EOD, truncated
[  401.107650] loop0: p5 start 676962771 is beyond EOD, truncated
[  401.114012] loop0: p6 start 3159018777 is beyond EOD, truncated
[  401.120100] loop0: p7 start 745035705 is beyond EOD, truncated
[  401.126602] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:53 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000))
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/13)

02:42:53 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = openat(r4, &(0x7f0000000140)='./file0\x00', 0x1, 0x15a)
close(r6)
sendfile(r5, r4, 0x0, 0x10002)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000440bb62ebcbe8701cd3dccb8dc370dfca3e2cabf10826bd7074ee578366d3f944170fee5a6fe7e5037409b56e76dc868d8b2f5454d982ad299ba2227c7ea5b24659e5e03413059c377110e0926a1a8fcf0343f8bb34e141ab39066b0ce2cdcd47a9cedf627a8358d2094d49d04f597a13e0ea3", @ANYRES32=0x0, @ANYRES32=<r7=>0x0], &(0x7f0000000040)=0xfffffffffffffda8)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f0000000100)={{0x1, 0x0, @identifier="a35a2946e0ea722f50bfb4bb01805337"}})
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x2, 0x7fff}, &(0x7f00000000c0)=0x8)
syz_open_dev$tty1(0xc, 0x4, 0x2)

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)

02:42:53 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x5d, 0x1})

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
syz_open_dev$tty1(0xc, 0x4, 0x1)

02:42:53 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x40, 0x140a, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810)
pipe(&(0x7f0000000500)={<r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
syz_mount_image$hfs(&(0x7f0000000340)='hfs\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x6, &(0x7f0000001780)=[{&(0x7f00000003c0)="1900a19e4eed9524e9627dce1cca87310b8b7e2f9dd9876e49d53fb408fd41a207c64eb163fc32b6f875029dd338e68d17eb00323525a54051fea16fc292c16f1401a5f1809049b7ecf31c4c2a568a050ee8f77cbd86826f9439cdb569f18696f6a57846e3e054e550bbef984a0a8e47962f033d890f021af05234ada584957e3c8182aed7892f7e7e4b468ace8d8f5df1fce0b002b5c4a443037ea647c8994aea8cc9bb2e3ebd9ccf7d634bfc4f762131ee492c58b09e6793ca4fbb61247ddca6b9b7082899b8b7e2485ef2ea31c2305aa7e80d9081a6b3dec6272bbe103547438ce9", 0xe3, 0x3}, {&(0x7f00000004c0)="272f0cc64efc", 0x6, 0x1}, {&(0x7f0000000540)="84c0a26bfd8e080dbfcfee81d446270d20f6982342ce7819d307af87664a5558c83600ca887be4b5eb86bc86380cd19c736d7e9254", 0x35, 0x6}, {&(0x7f0000000580)="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", 0x1000, 0x9}, {&(0x7f0000001580)="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", 0xfe, 0x7}, {&(0x7f0000001680)="79da9449ac444f7162a2febfd945f44e2ea6ff312663ea9f7c8f6e2f8ddeddaafd13af8be5e33446080e6ac6645ebf4a571006d17a24b2141a06b8d3774208974776d9d74f49cb72ff0fcf4915c1b04ad01850becf3df66a288dcb7e30746833f521428dc23a79f868b416391d4dbd9e9f624d64357d8c2e49ed2163a1d2d78648a7abefd1e1e58581ee893c7b7f7f54c8f210dc6fe380f0909ebb2c310def56e709528e1a2933a822de21f09a671bc011a402ccb9efa94493365da04054ea1ff2c04e31351dbc915f7a0331aa93", 0xce, 0x7}], 0x2058800, &(0x7f0000001840)={[{@dir_umask={'dir_umask', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "fa292541"}}, {@umask={'umask', 0x3d, 0x5}}, {@umask={'umask'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@session={'session', 0x3d, 0x57}}, {@creator={'creator', 0x3d, "3845cf97"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@creator={'creator', 0x3d, "3bcb172f"}}], [{@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snapshot\x00'}}, {@measure='measure'}, {@context={'context', 0x3d, 'user_u'}}]})
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r4, 0x0, r5, 0x0, 0x30005, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00')
sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r6, 0x602, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4001)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000240)={0x4, 0xe2, 0x7})

02:42:53 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080))

[  401.442279]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  401.449003] loop0: p1 start 2564762831 is beyond EOD, truncated
02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_STAT(r3, 0xd, &(0x7f00000001c0)=""/4096)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4)

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup(r1)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  401.486282] loop0: p2 start 2494347297 is beyond EOD, truncated
[  401.504348] loop0: p3 start 1915790064 is beyond EOD, truncated
[  401.522442] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:53 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xffffffff, 0x9, 0xfffffffffffffc7e, 0x4406c40, 0xffffffff, {r2, r3/1000+60000}, {0x5, 0x0, 0x30, 0x40, 0x6, 0x82}, 0x3d, 0x2, @userptr=0x4, 0x1800, 0x0, <r4=>0xffffffffffffffff})
read$FUSE(r4, &(0x7f0000000180), 0x1000)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  401.545289] loop0: p5 start 676962771 is beyond EOD, truncated
[  401.567464] loop0: p6 start 3159018777 is beyond EOD, truncated
02:42:53 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
open(&(0x7f0000000000)='./file0\x00', 0x203181, 0x148)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
sendmsg(r1, &(0x7f0000002600)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)="cdb8af6326e32ef06c73b3a45eec05dddaff3fa7fa19dad518fb98c2dd0d9c5912b29945d51416acb6149a942945ad1bc6b611526626a5b5bda5d1d917634a96c1e77054c9506df1805a97476d57703de97871049a5a01a2bf70e7285bf4b8e43d1a67e5af4c0abd02d6f28b0c9be938c6c2daf73040f6100a3329a76e275a95f17abc4a1716ecb48d0c7a6c8744a6aabb5dd98ffa6a8483b01d0ca7", 0x9c}, {&(0x7f00000001c0)="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", 0x1000}], 0x2, &(0x7f0000001200)=[{0xd0, 0x114, 0x400, "2b7ca69c605d6dee538f6cd944a35e03074c08c12d9e12d27d3723b89ba291d0bb50d77cfcc5726d0884f70fc876d2c0d2aa38c8e5995aa336d7feeb37da07d55335265a744209b6002736da6febc95a71304d0d1f60ebc6b10777a0f227be6bfd4af6eeb1f3b1a49172d37e36a870f09f3ecb8da8fd1e2ab2b340a1a45750b99991ecd8a47f684e65d2a0e7f46e5dcec9190960a0e696466f28e3b1de7ed49b9fa2cd3cec0bd352ea7ee313b5e39057c2a7e0ffc1163eddd3"}, {0x1010, 0x10e, 0x0, "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"}, {0x60, 0x114, 0x2, "8443c621c14532b2864230696d3469282f3a21e6227472bdf85a23338b0853f40abf27d09fa3d4f698c1e909a8f52ac95742ead1571bc111456bb82938cf9901ff974f00c74b40e6c46dccc6"}, {0x20, 0x1, 0x2, "d956b9e9c1a7a3e6ab"}, {0x100, 0x1, 0xebc, "c569096c1a933047dc93beaf72ae5ec464011eef639464e51b70812e94cd5d9b85a9e2b3f42abbd3f5b356fae4c837fb5874ae9420ec9658de120813982995f52633226fb3cb6c942ba417f25af2cd124409a6d0acbe493590c1a541138c5624b1f4b54aba30f7bcd24eeb0d53208615165e443ca32630b6baa290fce71efd25a12fd4fe047a6f103da95ec904b52b216050de0e619c9f38d903107f280c1b19c81e760b08c94d5b06be9900f692da8a3c88939df253d13c836e0c9245b18b3c4c25f4cd9dcb4435a41bfa711636a4c124a212af1095f51ac0008378b0ea2a44bbce0259f94028d3bfff7c087c"}, {0x10, 0xff, 0x70}, {0x100, 0xff, 0x2, "7435ebb4e46ac598c7cd0af8cd5fab58258b6132497d44ad8129136da1f70894f5006f94995470b17b472b26ce7a159d77a9bafa68d55186220d6408bd7c05a2d574fec0a8af115bbc018add03275035bf8848e4411db54e9d9cf412a044493de6b4c461f31ddbc86345efd3e5a579bd7e7081a1149bec09ccbfd016afa95de8c3416a3678389d057ef055d070b1f2f8d79d264b0f3022db412bf4b6d203a40fc3947beb490d577ce2362a87da1aee3fba3e3ef3235d396cfe151a3fdf9e05866ced43e86afdeb19d60c313c724a7197ed9d54fcb92f90766ca466a3749118571cbf2a6f0a082c38e72b"}, {0x78, 0x114, 0x4, "ea19f1b1034bac74282338513d561f48b4b1f7eb46bed45fa99976eff4335cbb54883ebc3189b714a0c28974af6876328a653f55f3ede23ca671910a948d50705be4945675e914f2623f433cf760212ab472afa73f0ccf0caca32859566158364369"}], 0x13e8}, 0x40084)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:53 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
dup(r1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  401.590504] loop0: p7 start 745035705 is beyond EOD, truncated
[  401.599689] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:54 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffff9, 0x421a01)
sendfile(r3, r2, 0x0, 0x10002)
setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:54 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:54 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
sendto$packet(r0, &(0x7f00000001c0)="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", 0x1000, 0x810, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000180))
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000000)=0x3)

02:42:54 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:54 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000080))

[  401.936777]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  401.958296] loop0: p1 start 2564762831 is beyond EOD, truncated
[  401.973428] loop0: p2 start 2494347297 is beyond EOD, truncated
[  401.984521] loop0: p3 start 1915790064 is beyond EOD, truncated
[  401.999485] loop0: p4 start 983213520 is beyond EOD, truncated
[  402.013521] loop0: p5 start 676962771 is beyond EOD, truncated
[  402.023896] loop0: p6 start 3159018777 is beyond EOD, truncated
[  402.031218] loop0: p7 start 745035705 is beyond EOD, truncated
[  402.037527] loop0: p8 start 3542136138 is beyond EOD, truncated
[  402.395415] print_req_error: I/O error, dev loop3, sector 0
02:42:54 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0xf}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040891)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:54 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
sync_file_range(r1, 0xff, 0x6, 0x4)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]})
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r9, r8, 0x0, 0x10002)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000100)=0xe8)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000080)={0x8029, 0x2})
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:54 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:54 executing program 2:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:55 executing program 2:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
fgetxattr(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="74727533746547eab2a8e842affc01368aef8913642e6d643573756d4014e8038035d812a9ca2d02710feddb7d8ee6664853ca9d0d848af14d59ef5a14957b6a6a57ea59065dd02e64e7e2eeb597c238a21aa58314a0b55554b58b3b0254eb3e070edd5c2146f2585de6c9f8b2bca9b57da42f33d678ad57ff061c5790b30cb0c3a6d261914c1c67b1aeb2760eaf3f06b7bd1d3dcd12ce88feee84a89452362f341908f3c0279724331782a4adaa6fbf99152d6c88eb9417fae53f4aa9d2c4d0f336a7ad45be26f4f80b34cb3424f7b7355970e63d3aa8f9e01e45c786a444a1887e1d5aaaa9b458dd9d151f250decf204ffd0fff626dc41c34a1c998626364552c126685cd3f93a0edc5d229643d40b942a4f327584fae549c9f600b9fcacf697e34b05"], &(0x7f0000000040)=""/233, 0xe9)

02:42:55 executing program 2:
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:55 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x4, 0xfffffffffffffff9)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]})
r3 = syz_genetlink_get_family_id$ethtool(0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x18, r3, 0x1, 0x0, 0x2, {0x4}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x198, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r6, 0x4b63, 0x0)

02:42:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:55 executing program 0:
r0 = epoll_create(0x2000007)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x2, 0x68, "a813854a7aab496606ca356af4e976021ea1a60fe13632d4ad649c9d2715e86f78ae41ca0e0beab18b2c604b48271ede6e921ce8052361b979b1e45b66c5d5a48655f94d95c42c9c61c851ac695859ec118e8c4f77f7aac362d680d10fd462812d84e8aecb96bad2"})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040))

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x48, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c)
setpriority(0x2, r1, 0x800)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:55 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  402.936841]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  402.956748] loop0: p1 start 2564762831 is beyond EOD, truncated
[  402.975378] loop0: p2 start 2494347297 is beyond EOD, truncated
[  402.995288] loop0: p3 start 1915790064 is beyond EOD, truncated
[  403.021774] loop0: p4 start 983213520 is beyond EOD, truncated
[  403.037869] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:55 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:42:55 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@private0={0xfc, 0x0, [], 0x1}, 0x4d, r5})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140))
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$inet6_buf(r6, 0x29, 0x2e, &(0x7f0000000240)="0383b82bf2e56e462e3814e5d6bfd190c6a01847aa63685ba09100009bf2e8dbb0e888683a60f9792e085836fb28db96a144f59e6fc2d005407b7f2260dcc49bd26cf99173ca6e6869422528af6fef4ded79de0a9ab5a7cb315328edecc9b0589a3ecbabd5189faa756c1d6cbe8637a9de1d1312fd7521f16a380edf91190c87a7c6b62d8eca9f61515861cc4fd7b378", 0x90)

[  403.060561] loop0: p6 start 3159018777 is beyond EOD, truncated
[  403.070861] loop0: p7 start 745035705 is beyond EOD, truncated
[  403.081244] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000000", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r4}, 0x8)
setsockopt(r3, 0x3, 0x3f, &(0x7f0000000040)="0a8b830bcaf2517979fc90c8ff76136f396c5ab4ebe51939f373a0f1db7070878324e1ca6f525069cae70ac4002c0691d1137dfcc808f1542f04029b43f4df5ce1", 0x41)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x400, 0x40}, 0x8)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:55 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  403.177412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)

02:42:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x210480, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040))

02:42:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)

[  403.377074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
02:42:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0)

02:42:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0)

02:42:55 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r6, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
setgid(0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r9=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r9)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{0x2, 0x4}], {0x4, 0x5}, [{}, {0x8, 0x7}, {0x8, 0x2, r9}], {0x10, 0x4}}, 0x44, 0x3)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x220, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4028890)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r3})
ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r3, 0x7f})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:55 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x295e40)
sendfile(r1, r0, 0x0, 0x10002)
recvfrom$phonet(r0, &(0x7f0000000100)=""/118, 0x76, 0x10000, &(0x7f0000000080)={0x23, 0x81, 0x0, 0x7f}, 0x10)
r2 = epoll_create(0x2000007)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040))

02:42:55 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
fgetxattr(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="74727533746547eab2a8e842affc01368aef8913642e6d643573756d4014e8038035d812a9ca2d02710feddb7d8ee6664853ca9d0d848af14d59ef5a14957b6a6a57ea59065dd02e64e7e2eeb597c238a21aa58314a0b55554b58b3b0254eb3e070edd5c2146f2585de6c9f8b2bca9b57da42f33d678ad57ff061c5790b30cb0c3a6d261914c1c67b1aeb2760eaf3f06b7bd1d3dcd12ce88feee84a89452362f341908f3c0279724331782a4adaa6fbf99152d6c88eb9417fae53f4aa9d2c4d0f336a7ad45be26f4f80b34cb3424f7b7355970e63d3aa8f9e01e45c786a444a1887e1d5aaaa9b458dd9d151f250decf204ffd0fff626dc41c34a1c998626364552c126685cd3f93a0edc5d229643d40b942a4f327584fae549c9f600b9fcacf697e34b05"], &(0x7f0000000040)=""/233, 0xe9)

[  403.550779]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  403.564631] loop0: p1 start 2564762831 is beyond EOD, truncated
[  403.590514] loop0: p2 start 2494347297 is beyond EOD, truncated
02:42:55 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

[  403.611920] loop0: p3 start 1915790064 is beyond EOD, truncated
[  403.635538] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:56 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x1})
r2 = gettid()
ptrace$setregs(0xf, r2, 0xffffffff, &(0x7f0000000100)="2733329db431ac0c40558348e23aa24d11953604631de069c38ff7deb18df73ce8040dce4a5551bd195f30a4bfd73799124bc4f517e5da0763d48caf125dcda685ca3a1c47d1595b8fea35b66428ee3450aa0beb014ae5b42754fe06d9bebf3812e7761eb97c20a21ab9ce89362b32da0875e92a6801180f8e5874f066b0a7b8080c6357c9be28581a283368f7b6f02079460f47f2f0a4fc6c21748e5a810f48ef2e0cc52e7c73262e6c0e27fcebc6329a73c77f")

02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDISABIO(r0, 0x4b37)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x200000, 0x4, {0x77359400}, {0x0, 0x17, 0x7, 0x20, 0xf8, 0xaa, "8f94c80d"}, 0x5, 0x1, @offset=0x5, 0x4, 0x0, <r1=>0xffffffffffffffff})
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000080)={0x550, 0xf0, 0x320, 0x240, 0x9, 0x757e, 0x1, 0x2, {0x47, 0x3}, {0x2d, 0x3}, {0x6, 0x6ff1, 0x1}, {0xfffffffd, 0x4}, 0x3, 0x2, 0x300000, 0x6, 0x1, 0x200, 0x0, 0x8, 0x7fffffff, 0x40, 0x2, 0xfffffffa, 0x5, 0x0, 0x1, 0xb})
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:56 executing program 2:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xffffffff, 0x9, 0xfffffffffffffc7e, 0x4406c40, 0xffffffff, {r2, r3/1000+60000}, {0x5, 0x0, 0x30, 0x40, 0x6, 0x82}, 0x3d, 0x2, @userptr=0x4, 0x1800, 0x0, <r4=>0xffffffffffffffff})
read$FUSE(r4, &(0x7f0000000180), 0x1000)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  403.657828] loop0: p5 start 676962771 is beyond EOD, truncated
[  403.675335] loop0: p6 start 3159018777 is beyond EOD, truncated
[  403.697005] loop0: p7 start 745035705 is beyond EOD, truncated
[  403.712656] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:56 executing program 2:
epoll_create(0x2000007)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/crypto\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x10002)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f00000001c0)={0x8, 0x1})
sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000180)={0x6})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140))
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8003, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100))

02:42:56 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getpeername(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r6, 0x301, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r6, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0xff, 0x800, 0xffffffff, 0x3, 0x4})

02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x181400, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8, 0x2400000, 0x6, 0x9, 0x16, "631a7c15d31a3fad5d12b5f7aaf880db1028b7"})

02:42:56 executing program 2:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x1})
r2 = gettid()
ptrace$setregs(0xf, r2, 0xffffffff, &(0x7f0000000100)="2733329db431ac0c40558348e23aa24d11953604631de069c38ff7deb18df73ce8040dce4a5551bd195f30a4bfd73799124bc4f517e5da0763d48caf125dcda685ca3a1c47d1595b8fea35b66428ee3450aa0beb014ae5b42754fe06d9bebf3812e7761eb97c20a21ab9ce89362b32da0875e92a6801180f8e5874f066b0a7b8080c6357c9be28581a283368f7b6f02079460f47f2f0a4fc6c21748e5a810f48ef2e0cc52e7c73262e6c0e27fcebc6329a73c77f")

02:42:56 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x5)
bind$netrom(r2, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8}, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  404.066474]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  404.072601] loop0: p1 start 2564762831 is beyond EOD, truncated
[  404.079147] loop0: p2 start 2494347297 is beyond EOD, truncated
[  404.088582] loop0: p3 start 1915790064 is beyond EOD, truncated
[  404.095728] loop0: p4 start 983213520 is beyond EOD, truncated
[  404.102509] loop0: p5 start 676962771 is beyond EOD, truncated
02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xff, 0xff, 0x0, 0xffffff], 'hsr0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x5e, 0x1, 0x6, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffffe00}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x0, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x100, 0x0)

02:42:56 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x101, 0x20200)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
sendfile(r3, r2, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xfffffffffffffd28)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r8=>r7, 0x3, 0x1, [0x0]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x400, 0x5, [0x6, 0x4, 0x6359, 0x4, 0x921f]}, 0x12)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xffff, 0x2fe}})
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x4, 0x81, 0x8, 0x7fff, 0x4, "b1a9401d252825c027ea2be14b3b913b7e23f7", 0xf92, 0x10001})

[  404.117418] loop0: p6 start 3159018777 is beyond EOD, truncated
[  404.128642] loop0: p7 start 745035705 is beyond EOD, truncated
[  404.135077] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:56 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x80)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
clock_getres(0x0, &(0x7f0000000000))
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x432040, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4090)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x9c, 0x10}, &(0x7f0000000040)=ANY=[@ANYBLOB='enc=raw hash=b160-generic\x00'/77], &(0x7f00000000c0)="47fc38b9b0e960096a62a683527e488ea0873b334d54e61d5c7760288ea0b99b327ff1f297f22a14962284d1554e6d5ccfe4ff5aa8fe42f73469bf83a0ee04d49f744b670896040db2496ba43cda4b15894b6918e7ce67e717809360fa9abb1e66f6eaf1a7bec8935d45741c831ff0d8949af0d348d308b9a1ef23643156f1c3162de0e8269d920784d9890f1ac143db05235cd4d44c373e192abff0", &(0x7f0000000180)="fe577bc4d29da10019551418a20483af")
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x18000001}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x48, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x1a, 0xac, "01a51a712d9f400423adeb1f4ec75e0e6a1a1b76fbae"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x11b, 0x7fff, 0x9f0, 0x0, 0x6000, 0x3]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x80}]}, 0x48}}, 0x4)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000380))
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x501900, 0x0)
ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000200)="da67c3118867aa199056bcfa2c677c312545c46814fafe05f228bb021656a4065de1239cc0")
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200041, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0xff, 0x4a15, 0x837, 0x0, 0x16, "1359d5cdd2c77353"})

02:42:56 executing program 0:
r0 = epoll_create(0x2000004)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

[  404.362341]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  404.394419] loop0: p1 start 2564762831 is beyond EOD, truncated
[  404.408070] loop0: p2 start 2494347297 is beyond EOD, truncated
[  404.431574] loop0: p3 start 1915790064 is beyond EOD, truncated
[  404.441623] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

02:42:56 executing program 0:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080))
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000240)={0x6, 0x2, 0x1, 0xf4, 0x2, [{0x0, 0x9, 0xff, [], 0x2000}, {0x8, 0x965e, 0x0, [], 0x100}]})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x460}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xec55}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000)

[  404.459485] loop0: p5 start 676962771 is beyond EOD, truncated
[  404.467294] loop0: p6 start 3159018777 is beyond EOD, truncated
[  404.475047] loop0: p7 start 745035705 is beyond EOD, truncated
[  404.486251] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:56 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffc000/0x2000)=nil)

02:42:56 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x3, 0x6, 0x4, 0x1000000, 0x101, {0x0, 0x2710}, {0x1, 0x1, 0x1, 0xff, 0x2, 0x7f, "1a0a21fb"}, 0x5, 0x2, @userptr=0x10000, 0xffffffff, 0x0, <r1=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x8001, 0x8, 0x300}})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x40, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0xfc01, 0x4a7f, 0x0, 0x3ff, 0x18, "bd376e2643fae856"})
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
socket$vsock_stream(0x28, 0x1, 0x0)

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = dup2(r1, r0)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x0)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))

[  404.727365]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  404.737186] loop0: p1 start 2564762831 is beyond EOD, truncated
[  404.749934] loop0: p2 start 2494347297 is beyond EOD, truncated
[  404.757576] loop0: p3 start 1915790064 is beyond EOD, truncated
[  404.769900] loop0: p4 start 983213520 is beyond EOD, truncated
[  404.778074] loop0: p5 start 676962771 is beyond EOD, truncated
[  404.797157] loop0: p6 start 3159018777 is beyond EOD, truncated
[  404.808993] loop0: p7 start 745035705 is beyond EOD, truncated
[  404.818152] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:57 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x101, 0x20200)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
sendfile(r3, r2, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xfffffffffffffd28)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r8=>r7, 0x3, 0x1, [0x0]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x400, 0x5, [0x6, 0x4, 0x6359, 0x4, 0x921f]}, 0x12)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xffff, 0x2fe}})
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x4, 0x81, 0x8, 0x7fff, 0x4, "b1a9401d252825c027ea2be14b3b913b7e23f7", 0xf92, 0x10001})

02:42:57 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xfc, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/252}, &(0x7f0000000200)=0x78)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:42:57 executing program 0:
r0 = epoll_create(0x1)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x0, 0x300, 0x10}})
fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x204840, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000001c0)={0x9, "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"})
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080))

[  405.155116]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  405.163940] loop0: p1 start 2564762831 is beyond EOD, truncated
[  405.181096] loop0: p2 start 2494347297 is beyond EOD, truncated
[  405.187284] loop0: p3 start 1915790064 is beyond EOD, truncated
[  405.194659] loop0: p4 start 983213520 is beyond EOD, truncated
02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x21a01)
sendfile(r2, r1, 0x0, 0xfffffffffffffffb)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1)
setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000000)="c6dab432babb83fe02f576831a821b4e36ab91f9529e", 0x16)

[  405.220414] loop0: p5 start 676962771 is beyond EOD, truncated
[  405.227389] loop0: p6 start 3159018777 is beyond EOD, truncated
[  405.240457] loop0: p7 start 745035705 is beyond EOD, truncated
[  405.246638] loop0: p8 start 3542136138 is beyond EOD, truncated
02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:57 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$VT_DISALLOCATE(r0, 0x5608)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x101, 0x20200)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
sendfile(r3, r2, 0x0, 0x10002)
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xfffffffffffffd28)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7}, 0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={<r8=>r7, 0x3, 0x1, [0x0]}, &(0x7f0000000080)=0xa)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r8, 0x400, 0x5, [0x6, 0x4, 0x6359, 0x4, 0x921f]}, 0x12)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0xffff, 0x2fe}})
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x4, 0x81, 0x8, 0x7fff, 0x4, "b1a9401d252825c027ea2be14b3b913b7e23f7", 0xf92, 0x10001})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x40002, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x6db6e559)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000000)={0xfffffffffffffec1, 0x0})
sendfile(r1, r0, 0x0, 0x10002)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x134, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xad85}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x127}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r2, 0xa, 0x11)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000080)=r3)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r3, 0x7fff00000000000, 0x1})
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:42:59 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x0, 0x20, 0x12, 0x1af, &(0x7f0000000100)="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"})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000540)=0x2)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x48, 0x5, {0x0, 0xea60}, {0x4, 0xc, 0x1, 0x5, 0x95, 0x7, "fe5b85fe"}, 0x330, 0x2, @userptr, 0x4, 0x0, <r6=>r0})
ioctl$TIOCSISO7816(r6, 0xc0285443, &(0x7f0000000080)={0x9, 0xffffff3b, 0x80000000, 0x1, 0x20})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r8, r7, 0x0, 0x10002)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xfffffffffffffff9)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000180))
sendfile(r1, r0, 0x0, 0x10002)
accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x80000)
r4 = epoll_create(0x2000006)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fcntl$setsig(r5, 0xa, 0x11)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000000)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000080)=r6)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000140)=r6)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040))

02:43:00 executing program 3:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000))
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x1d, 0x0, "e8167f914fbd49439ebb7988aa0c9b24af6ded6974d26ca187771b2affc253bae571a1236183cd1091d69e408ea762bac79dba4264f6a6fdbb09d4bcecb5e390799e62c95d4f2809c9adfdccd436fdfd"}, 0xd8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
write$P9_RREADDIR(r1, &(0x7f0000000180)={0x49, 0x29, 0x1, {0x7, [{{0x40, 0x0, 0x1}, 0x2, 0x1, 0x7, './file0'}, {{0x10, 0x4}, 0x7ff, 0x1, 0x7, './file0'}]}}, 0x49)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="76c5074783a855abc12815c4be0de1f7ea3d9b059f8c3b8b54b110e49118d4b4fe9f0e47a336d80072e1d58e5310467c648a432979f7f1ccfa0d39d589aab500355a764bfd71b7a36abbba570f0cbc68cc1a9a5d938c5249d2904a5324e4e8d1feab0f2e26f871a017c85cff7cd9e2173043086ff3f93df5dda0926f4f5dccb0b45f2c60536ac494dbf9faf0e899b09e9d70f9cd3b65950944f3c4e7480186c2ce615cfdade9926e325c2dc967deb52d27c91cc8bf5c220974958376223dd4df371c513bba7ace4c761bd10c23244284100fce0bb3338e8024ce")
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)

02:43:00 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:00 executing program 2 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  408.275129] FAULT_INJECTION: forcing a failure.
[  408.275129] name failslab, interval 1, probability 0, space 0, times 0
[  408.315463] CPU: 0 PID: 20249 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  408.324730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  408.334269] Call Trace:
[  408.336880]  dump_stack+0x13e/0x194
[  408.340527]  should_fail.cold+0x10a/0x14b
[  408.344691]  should_failslab+0xd6/0x130
[  408.348690]  kmem_cache_alloc_trace+0x2db/0x7b0
[  408.353899]  ? cap_capable+0x1c4/0x230
[  408.357801]  vt_do_diacrit+0x236/0x8b0
[  408.361709]  vt_ioctl+0x376/0x1f20
[  408.365265]  ? complete_change_console+0x350/0x350
[  408.370202]  ? avc_ss_reset+0x100/0x100
[  408.374225]  ? get_pid_task+0x91/0x130
[  408.378127]  ? __lock_acquire+0x5f7/0x4620
[  408.382373]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  408.386701]  ? complete_change_console+0x350/0x350
[  408.391651]  tty_ioctl+0x6c5/0x1220
[  408.395294]  ? tty_vhangup+0x30/0x30
[  408.399285]  ? trace_hardirqs_on+0x10/0x10
[  408.403541]  ? tty_vhangup+0x30/0x30
[  408.407293]  do_vfs_ioctl+0x75a/0xfe0
[  408.411102]  ? selinux_file_mprotect+0x5c0/0x5c0
[  408.416307]  ? ioctl_preallocate+0x1a0/0x1a0
[  408.420743]  ? security_file_ioctl+0x76/0xb0
[  408.425195]  ? security_file_ioctl+0x83/0xb0
[  408.429637]  SyS_ioctl+0x7f/0xb0
[  408.433033]  ? do_vfs_ioctl+0xfe0/0xfe0
[  408.437030]  do_syscall_64+0x1d5/0x640
[  408.440953]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  408.446154] RIP: 0033:0x45c829
[  408.449352] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  408.457070] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
02:43:00 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
connect$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffd8ee, @my=0x0}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:43:00 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

[  408.464381] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  408.471782] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  408.479063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  408.486432] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
02:43:00 executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x88001, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

[  408.515548]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  408.533199] loop0: p1 start 2564762831 is beyond EOD, truncated
[  408.554673] loop0: p2 start 2494347297 is beyond EOD, truncated
02:43:00 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

[  408.578393] loop0: p3 start 1915790064 is beyond EOD, truncated
[  408.606896] loop0: p4 start 983213520 is beyond EOD, truncated
02:43:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:43:01 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
getsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4)

[  408.635400] loop0: p5 start 676962771 is beyond EOD, truncated
[  408.665683] loop0: p6 start 3159018777 is beyond EOD, truncated
02:43:01 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc0000, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x4)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x9fbdd51a, 0x401, 0x7ff, 0x1009, 0xd, "b7a9b2a80200a482c768befdbf7c68002000"})
sync_file_range(r1, 0x1000, 0x3, 0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x11, 0x8200)
sendfile(r4, r3, 0x0, 0x10002)
connect$netrom(r3, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x48)

[  408.690688] loop0: p7 start 745035705 is beyond EOD, truncated
[  408.711074] loop0: p8 start 3542136138 is beyond EOD, truncated
02:43:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x49c5e51641988580, 0x0)
write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
dup(r2)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0)

02:43:01 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x1)

02:43:01 executing program 2 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:43:01 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
epoll_wait(r2, &(0x7f0000000080)=[{}, {}], 0x2, 0x5)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040))

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0)

[  408.954721] FAULT_INJECTION: forcing a failure.
[  408.954721] name failslab, interval 1, probability 0, space 0, times 0
[  408.986372] CPU: 0 PID: 20284 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  408.994319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.003696] Call Trace:
[  409.006297]  dump_stack+0x13e/0x194
[  409.010022]  should_fail.cold+0x10a/0x14b
[  409.014182]  should_failslab+0xd6/0x130
[  409.018159]  kmem_cache_alloc+0x2b5/0x770
[  409.022497]  __anon_vma_prepare+0x59/0x370
[  409.027098]  do_huge_pmd_anonymous_page+0xc7d/0x11e0
[  409.032242]  ? unwind_get_return_address+0x5a/0xa0
[  409.037183]  ? __save_stack_trace+0x7b/0xd0
[  409.041779]  ? prep_transhuge_page+0xa0/0xa0
[  409.046200]  ? pud_val+0x6c/0xd0
[  409.049575]  ? pmd_val+0xd0/0xd0
[  409.052947]  ? trace_hardirqs_on+0x10/0x10
[  409.057193]  __handle_mm_fault+0x23ac/0x3280
[  409.061615]  ? copy_page_range+0x1d70/0x1d70
[  409.066036]  ? find_held_lock+0x2d/0x110
[  409.070114]  handle_mm_fault+0x288/0x7a0
[  409.074178]  __do_page_fault+0x4bc/0xb40
[  409.078244]  ? vmalloc_fault+0xdf0/0xdf0
[  409.082308]  ? do_page_fault+0x60/0x4f2
[  409.086290]  page_fault+0x25/0x50
[  409.089760] RIP: 0010:__put_user_4+0x1c/0x30
[  409.094164] RSP: 0018:ffff88805431faf8 EFLAGS: 00010297
02:43:01 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDADDIO(r0, 0x4b34, 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = accept4$tipc(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x80000000, <r8=>0x0, 0x2, 0x7})
ioctl$DRM_IOCTL_AGP_UNBIND(r6, 0x40106437, &(0x7f0000000100)={r8, 0x3f})
sendfile(r3, r1, 0x0, 0x10002)

[  409.099537] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  409.107246] RDX: 00000000000263db RSI: ffffffff833de403 RDI: 0000000000000286
[  409.114548] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  409.121832] R10: ffff888050558b08 R11: ffff888050558280 R12: 00000000200001c0
02:43:01 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000100)="a444be03e3f11081519f930a85977d5c0b380982abf732e70130ebb6513f5647215799011403bc87706906d7fcd39060e8899a88f99fc7fd6040fd87ef68a5b6398ffcee6df2143ea477d37d5d508786a13599d1bec0039adb97491efd06711c09c69d663c38828c4ce8d32a42f3c163da3f4bcc078572d442759f0a5c1f9b2c3ae288943b6ab38c36212cbfec9ba10bee77b0b02e11bbb283f2440983331678de8142e63fa951644809c1a421d0d4a4c761d395b76e8a671bd3ee60b37138f19314d6dc48439631b0ed929bfcc5826ff4857d1e49a80bf4839beac9ecedf4a939f5988d3635c0362e3c6f8f35eb299c4f95b096949e884bc11376cb950a0517")
recvfrom$unix(r0, &(0x7f0000000000)=""/244, 0xf4, 0x2020, 0x0, 0x0)
ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0)

02:43:01 executing program 0:
r0 = epoll_create(0x2000007)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x78)
tkill(r1, 0x22)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
unshare(0x20040400)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0)
r3 = getpid()
sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r4 = getpgid(r3)
tgkill(r4, r1, 0x31)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040))

[  409.121838] R13: ffff88808a637200 R14: ffffffff881e1f10 R15: ffff88808a6372cd
02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, 0x0)

[  409.121860]  ? vt_do_diacrit+0x3e3/0x8b0
[  409.121872]  vt_do_diacrit+0x3ee/0x8b0
[  409.121884]  vt_ioctl+0x376/0x1f20
[  409.121894]  ? complete_change_console+0x350/0x350
02:43:01 executing program 2 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:43:01 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x10, 0x5, 0x63, &(0x7f0000000480)})

[  409.121904]  ? avc_ss_reset+0x100/0x100
[  409.121917]  ? get_pid_task+0x91/0x130
[  409.121929]  ? __lock_acquire+0x5f7/0x4620
[  409.121942]  ? tty_jobctrl_ioctl+0x3b/0xbf0
02:43:01 executing program 2 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  409.121949]  ? complete_change_console+0x350/0x350
[  409.121959]  tty_ioctl+0x6c5/0x1220
[  409.121969]  ? tty_vhangup+0x30/0x30
[  409.121980]  ? trace_hardirqs_on+0x10/0x10
[  409.121997]  ? tty_vhangup+0x30/0x30
[  409.122008]  do_vfs_ioctl+0x75a/0xfe0
[  409.122019]  ? selinux_file_mprotect+0x5c0/0x5c0
[  409.122032]  ? ioctl_preallocate+0x1a0/0x1a0
[  409.122052]  ? security_file_ioctl+0x76/0xb0
[  409.122061]  ? security_file_ioctl+0x83/0xb0
[  409.122073]  SyS_ioctl+0x7f/0xb0
[  409.122082]  ? do_vfs_ioctl+0xfe0/0xfe0
[  409.122095]  do_syscall_64+0x1d5/0x640
[  409.122113]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  409.122121] RIP: 0033:0x45c829
[  409.122127] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.122138] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
[  409.122143] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  409.122149] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  409.122154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  409.122159] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
[  409.283249]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  409.289014] loop0: p1 start 2564762831 is beyond EOD, truncated
[  409.289023] loop0: p2 start 2494347297 is beyond EOD, truncated
[  409.289029] loop0: p3 start 1915790064 is beyond EOD, truncated
[  409.289034] loop0: p4 start 983213520 is beyond EOD, truncated
[  409.289040] loop0: p5 start 676962771 is beyond EOD, truncated
[  409.289046] loop0: p6 start 3159018777 is beyond EOD, truncated
[  409.289052] loop0: p7 start 745035705 is beyond EOD, truncated
[  409.289058] loop0: p8 start 3542136138 is beyond EOD, truncated
[  409.392061] FAULT_INJECTION: forcing a failure.
[  409.392061] name failslab, interval 1, probability 0, space 0, times 0
[  409.392075] CPU: 1 PID: 20315 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  409.392081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.392085] Call Trace:
[  409.392103]  dump_stack+0x13e/0x194
[  409.392120]  should_fail.cold+0x10a/0x14b
[  409.392135]  should_failslab+0xd6/0x130
[  409.392145]  kmem_cache_alloc+0x2b5/0x770
[  409.392158]  ? anon_vma_compatible+0x5d/0x290
[  409.392171]  __anon_vma_prepare+0x19b/0x370
[  409.392184]  do_huge_pmd_anonymous_page+0xc7d/0x11e0
[  409.392195]  ? save_trace+0x290/0x290
[  409.392207]  ? prep_transhuge_page+0xa0/0xa0
[  409.392215]  ? pud_val+0x6c/0xd0
[  409.392224]  ? pmd_val+0xd0/0xd0
[  409.392233]  ? trace_hardirqs_on+0x10/0x10
[  409.392244]  __handle_mm_fault+0x23ac/0x3280
[  409.392255]  ? copy_page_range+0x1d70/0x1d70
[  409.392266]  ? find_held_lock+0x2d/0x110
[  409.392287]  handle_mm_fault+0x288/0x7a0
[  409.392298]  __do_page_fault+0x4bc/0xb40
[  409.392310]  ? vmalloc_fault+0xdf0/0xdf0
[  409.392319]  ? do_page_fault+0x60/0x4f2
[  409.392331]  page_fault+0x25/0x50
[  409.392339] RIP: 0010:__put_user_4+0x1c/0x30
[  409.392345] RSP: 0018:ffff888084ef7af8 EFLAGS: 00010297
[  409.392353] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  409.392358] RDX: 000000000002647a RSI: ffffffff833de403 RDI: 0000000000000286
[  409.392364] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  409.392369] R10: ffff88804fa6ab88 R11: ffff88804fa6a300 R12: 00000000200001c0
[  409.392374] R13: ffff8880a78e6040 R14: ffffffff881e1f10 R15: ffff8880a78e610d
[  409.392391]  ? vt_do_diacrit+0x3e3/0x8b0
[  409.392403]  vt_do_diacrit+0x3ee/0x8b0
[  409.392415]  vt_ioctl+0x376/0x1f20
[  409.392426]  ? complete_change_console+0x350/0x350
[  409.392434]  ? avc_ss_reset+0x100/0x100
[  409.392446]  ? get_pid_task+0x91/0x130
[  409.392458]  ? __lock_acquire+0x5f7/0x4620
[  409.392468]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  409.392475]  ? complete_change_console+0x350/0x350
[  409.392485]  tty_ioctl+0x6c5/0x1220
[  409.392496]  ? tty_vhangup+0x30/0x30
[  409.392508]  ? trace_hardirqs_on+0x10/0x10
[  409.392528]  ? tty_vhangup+0x30/0x30
[  409.392540]  do_vfs_ioctl+0x75a/0xfe0
[  409.392550]  ? selinux_file_mprotect+0x5c0/0x5c0
[  409.392561]  ? ioctl_preallocate+0x1a0/0x1a0
[  409.392580]  ? security_file_ioctl+0x76/0xb0
[  409.392589]  ? security_file_ioctl+0x83/0xb0
[  409.392600]  SyS_ioctl+0x7f/0xb0
[  409.392608]  ? do_vfs_ioctl+0xfe0/0xfe0
[  409.392620]  do_syscall_64+0x1d5/0x640
[  409.392656]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  409.392664] RIP: 0033:0x45c829
[  409.392669] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.392679] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
[  409.392684] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  409.392690] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  409.392695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  409.392701] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
[  409.460884] FAULT_INJECTION: forcing a failure.
[  409.460884] name failslab, interval 1, probability 0, space 0, times 0
[  409.914854] CPU: 0 PID: 20320 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  409.922771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  409.932130] Call Trace:
[  409.934728]  dump_stack+0x13e/0x194
[  409.938374]  should_fail.cold+0x10a/0x14b
[  409.943151]  should_failslab+0xd6/0x130
[  409.947143]  kmem_cache_alloc+0x2b5/0x770
[  409.951307]  ? anon_vma_interval_tree_insert+0x211/0x3e0
[  409.956774]  __khugepaged_enter+0x32/0x330
[  409.961030]  do_huge_pmd_anonymous_page+0xd16/0x11e0
[  409.966154]  ? prep_transhuge_page+0xa0/0xa0
[  409.970576]  ? pud_val+0x6c/0xd0
[  409.973958]  ? pmd_val+0xd0/0xd0
[  409.977594]  ? trace_hardirqs_on+0x10/0x10
[  409.981842]  __handle_mm_fault+0x23ac/0x3280
[  409.987046]  ? copy_page_range+0x1d70/0x1d70
[  409.991564]  ? find_held_lock+0x2d/0x110
[  409.995651]  handle_mm_fault+0x288/0x7a0
[  409.999730]  __do_page_fault+0x4bc/0xb40
[  410.003894]  ? vmalloc_fault+0xdf0/0xdf0
[  410.007968]  ? do_page_fault+0x60/0x4f2
[  410.011956]  page_fault+0x25/0x50
[  410.015417] RIP: 0010:__put_user_4+0x1c/0x30
[  410.019821] RSP: 0018:ffff8880a11dfaf8 EFLAGS: 00010297
[  410.025196] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  410.032473] RDX: 000000000002646a RSI: ffffffff833de403 RDI: 0000000000000286
[  410.039750] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  410.047031] R10: ffff8880535f2c88 R11: ffff8880535f2400 R12: 00000000200001c0
[  410.054307] R13: ffff888088ae0000 R14: ffffffff881e1f10 R15: ffff888088ae00cd
[  410.061606]  ? vt_do_diacrit+0x3e3/0x8b0
[  410.065688]  vt_do_diacrit+0x3ee/0x8b0
[  410.069598]  vt_ioctl+0x376/0x1f20
[  410.073174]  ? complete_change_console+0x350/0x350
[  410.078116]  ? avc_ss_reset+0x100/0x100
[  410.082105]  ? get_pid_task+0x91/0x130
[  410.086014]  ? __lock_acquire+0x5f7/0x4620
[  410.090269]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  410.094604]  ? complete_change_console+0x350/0x350
[  410.099555]  tty_ioctl+0x6c5/0x1220
[  410.103197]  ? tty_vhangup+0x30/0x30
[  410.106926]  ? trace_hardirqs_on+0x10/0x10
[  410.111181]  ? tty_vhangup+0x30/0x30
[  410.114909]  do_vfs_ioctl+0x75a/0xfe0
[  410.118804]  ? selinux_file_mprotect+0x5c0/0x5c0
[  410.123577]  ? ioctl_preallocate+0x1a0/0x1a0
[  410.128004]  ? security_file_ioctl+0x76/0xb0
[  410.132485]  ? security_file_ioctl+0x83/0xb0
[  410.136950]  SyS_ioctl+0x7f/0xb0
[  410.140327]  ? do_vfs_ioctl+0xfe0/0xfe0
[  410.144331]  do_syscall_64+0x1d5/0x640
[  410.148240]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  410.153464] RIP: 0033:0x45c829
[  410.156661] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x10, 0x5, 0x63, &(0x7f0000000480)})

02:43:02 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$SOUND_MIXER_INFO(r4, 0x805c4d65, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:43:02 executing program 2 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  410.164383] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
[  410.171661] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  410.178942] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  410.186221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  410.193501] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
02:43:02 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x42902, 0x0)

02:43:02 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x10, 0x5, 0x63, &(0x7f0000000480)})

[  410.293602] FAULT_INJECTION: forcing a failure.
[  410.293602] name fail_page_alloc, interval 1, probability 0, space 0, times 0
02:43:02 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
ptrace(0x4208, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x11c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1743a3a0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4001}, 0x4880)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3cc, 0x13, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x2, 0x3, 0x20, {0x4e22, 0x4e20, [0x7, 0x7f, 0x6, 0x2], [0x4, 0x3f, 0x0, 0x6], 0x0, [0x977e, 0x20]}, 0x8, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xed, 0x1, "0a4e6945357509f5591c17f11e589e56e0520fec1ba1835f5ccc39133e2d56ae395424869bc0e34a6ffbd4ab758c7ac16255443f9cccc414a6103d65a630e1581270cebac0f1fc56fbe586547794afc75839608a44ad78528ed8a4cb9df791d82c78f5d661caf8b90e9bf072629989541065e4f37ce13eab17a5de344a66bac98f1aade9ac5c8b8c4629ec39e0c24494649303b8bcb8603a883e85b000459396b770dfe53d715a115532750376cf839a1ff997ada6984757cdfaebb08aab7248c4110aeed8bd9525a6d399c254ba90ee0bbbc11850dfce63888373e1eb0522f75e7f5db118e7de90c5"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "c3672b8b4d0c6543e918aae79c862ed9e4c59e97e02efed4723f"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "f23d53139480ce89"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "6caaac08f1576f2f19c209082221771937e604abc9dc980c7a6c55272bc09f522071e69986c2bcaa5e43a4a08727eb8052bb6d1537195c83efac58128110671a0584f236c2a6c77ac36dc36396b585fed34db64086641d18d6698804e25527ff3e8ab67524747b27d46a25fc3c8d55fad4603be0da781a43503b88fe768ee9ec282ffac85e7bed34b0d7d6e682dfd61119fc6a8edb712c83b40370a0c82caa6247c82be54eb33d7ffbd2554baaac1c154a5a74"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "f67d1ab5ed749a497c7d1eb3034c0acc5125443cf73ba4f2598e970c607312fdab95fc56e95ab1edefd2bf2164b49b8296a282f80e6024f1b7929d28fb101f3bfe4d1d57f3b274c925ad9b78f903a6f755481cb1c5b4b5e5c616e64faf"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "3e4042b85b1e15c81db510e5b0ecc4289ea70e3830cd81ec9c492142e8c81dbb0544d8c20a3bc6bc7e7c4ed28de405752a732fc0b95b654546aec169fd22c9909ca9f3b35581860b640c00ddfb20d984d98dcbb479ffed0bb9631047ece910363aa13386db2d73abae94390b3fa6366e85cb057e9bef873329e8bf9bac0366ae8a4d7ccea3f228e283b1d3f77c6d110c913a8e43ec9bd990"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "eafa2adef783cf14ea8ea8430455c3ea3ca606efce36dfdee111216cbf056a06da64caecf881378911fe76f29de46c0f00c7715a5f2a35880fcc56cf0b4ce2d9639d6da9980c96397ca3a816d3cdb561a520b61a486c04b831695d914ae2755bdecb9093b1bad7dc24964301c7af222142cfe5790821d21e8541546bc275299a056f103b2d3d12159320837c7720165b0843c14c2530cafd791ad013fd1d5b2e437db77a269c"}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000740))
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x100}})
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r7)

[  410.334319] CPU: 0 PID: 20334 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  410.342245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  410.351694] Call Trace:
[  410.354307]  dump_stack+0x13e/0x194
[  410.357949]  should_fail.cold+0x10a/0x14b
[  410.362134]  __alloc_pages_nodemask+0x1bf/0x700
[  410.362147]  ? find_held_lock+0x2d/0x110
[  410.362157]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  410.362169]  ? lock_downgrade+0x6e0/0x6e0
02:43:02 executing program 2 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  410.362180]  ? anon_vma_interval_tree_insert+0x211/0x3e0
[  410.362193]  alloc_pages_vma+0x310/0x4a0
[  410.362209]  do_huge_pmd_anonymous_page+0x386/0x11e0
[  410.362223]  ? prep_transhuge_page+0xa0/0xa0
[  410.362232]  ? pud_val+0x6c/0xd0
[  410.362241]  ? pmd_val+0xd0/0xd0
[  410.362250]  ? trace_hardirqs_on+0x10/0x10
[  410.362260]  __handle_mm_fault+0x23ac/0x3280
[  410.362272]  ? copy_page_range+0x1d70/0x1d70
[  410.362281]  ? find_held_lock+0x2d/0x110
[  410.362301]  handle_mm_fault+0x288/0x7a0
[  410.362313]  __do_page_fault+0x4bc/0xb40
[  410.362326]  ? vmalloc_fault+0xdf0/0xdf0
[  410.362335]  ? do_page_fault+0x60/0x4f2
[  410.362349]  page_fault+0x25/0x50
[  410.362358] RIP: 0010:__put_user_4+0x1c/0x30
[  410.362364] RSP: 0018:ffff88805431faf8 EFLAGS: 00010297
[  410.362373] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  410.362379] RDX: 000000000002648e RSI: ffffffff833de403 RDI: 0000000000000286
[  410.362384] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  410.362389] R10: ffff88809a470988 R11: ffff88809a470100 R12: 00000000200001c0
[  410.362394] R13: ffff88809bb6a000 R14: ffffffff881e1f10 R15: ffff88809bb6a0cd
[  410.362411]  ? vt_do_diacrit+0x3e3/0x8b0
[  410.362422]  vt_do_diacrit+0x3ee/0x8b0
[  410.362434]  vt_ioctl+0x376/0x1f20
[  410.362444]  ? complete_change_console+0x350/0x350
[  410.362454]  ? avc_ss_reset+0x100/0x100
[  410.362467]  ? get_pid_task+0x91/0x130
[  410.362480]  ? __lock_acquire+0x5f7/0x4620
[  410.362500]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  410.362509]  ? complete_change_console+0x350/0x350
[  410.362520]  tty_ioctl+0x6c5/0x1220
[  410.362531]  ? tty_vhangup+0x30/0x30
[  410.362543]  ? trace_hardirqs_on+0x10/0x10
[  410.362564]  ? tty_vhangup+0x30/0x30
[  410.362576]  do_vfs_ioctl+0x75a/0xfe0
[  410.362585]  ? selinux_file_mprotect+0x5c0/0x5c0
[  410.362596]  ? ioctl_preallocate+0x1a0/0x1a0
[  410.362616]  ? security_file_ioctl+0x76/0xb0
[  410.362625]  ? security_file_ioctl+0x83/0xb0
[  410.362637]  SyS_ioctl+0x7f/0xb0
[  410.362645]  ? do_vfs_ioctl+0xfe0/0xfe0
[  410.362657]  do_syscall_64+0x1d5/0x640
[  410.362673]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  410.362680] RIP: 0033:0x45c829
[  410.362684] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  410.362693] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
[  410.362698] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  410.362703] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  410.362708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  410.362713] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
[  410.532060] FAULT_INJECTION: forcing a failure.
[  410.532060] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  410.532072] CPU: 0 PID: 20351 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  410.532078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  410.532082] Call Trace:
[  410.532100]  dump_stack+0x13e/0x194
[  410.532117]  should_fail.cold+0x10a/0x14b
[  410.532130]  __alloc_pages_nodemask+0x1bf/0x700
[  410.532142]  ? refill_stock+0x270/0x270
[  410.532152]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[  410.532163]  ? lock_downgrade+0x6e0/0x6e0
[  410.532179]  ? get_mem_cgroup_from_mm+0x157/0x460
[  410.532192]  alloc_pages_current+0xe7/0x1e0
[  410.532201]  ? mem_cgroup_try_charge+0x3ca/0x670
[  410.532212]  pte_alloc_one+0x15/0x100
[  410.532224]  do_huge_pmd_anonymous_page+0x561/0x11e0
[  410.532239]  ? prep_transhuge_page+0xa0/0xa0
[  410.532248]  ? pud_val+0x6c/0xd0
[  410.532258]  ? pmd_val+0xd0/0xd0
[  410.532267]  ? trace_hardirqs_on+0x10/0x10
[  410.532279]  __handle_mm_fault+0x23ac/0x3280
[  410.532290]  ? copy_page_range+0x1d70/0x1d70
[  410.532302]  ? find_held_lock+0x2d/0x110
[  410.532324]  handle_mm_fault+0x288/0x7a0
[  410.532335]  __do_page_fault+0x4bc/0xb40
[  410.532348]  ? vmalloc_fault+0xdf0/0xdf0
[  410.532357]  ? do_page_fault+0x60/0x4f2
[  410.532370]  page_fault+0x25/0x50
[  410.532379] RIP: 0010:__put_user_4+0x1c/0x30
[  410.532385] RSP: 0018:ffff888059667af8 EFLAGS: 00010297
[  410.532394] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  410.532399] RDX: 000000000002646a RSI: ffffffff833de403 RDI: 0000000000000286
[  410.532405] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  410.532410] R10: ffff88804d238e48 R11: ffff88804d2385c0 R12: 00000000200001c0
[  410.532416] R13: ffff88809b76ad80 R14: ffffffff881e1f10 R15: ffff88809b76ae4d
[  410.532433]  ? vt_do_diacrit+0x3e3/0x8b0
[  410.532446]  vt_do_diacrit+0x3ee/0x8b0
[  410.532459]  vt_ioctl+0x376/0x1f20
[  410.532469]  ? complete_change_console+0x350/0x350
[  410.532488]  ? avc_ss_reset+0x100/0x100
[  410.532503]  ? get_pid_task+0x91/0x130
[  410.532517]  ? __lock_acquire+0x5f7/0x4620
[  410.532527]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  410.532535]  ? complete_change_console+0x350/0x350
[  410.532548]  tty_ioctl+0x6c5/0x1220
[  410.532559]  ? tty_vhangup+0x30/0x30
[  410.532572]  ? trace_hardirqs_on+0x10/0x10
[  410.532592]  ? tty_vhangup+0x30/0x30
[  410.532604]  do_vfs_ioctl+0x75a/0xfe0
[  410.532613]  ? selinux_file_mprotect+0x5c0/0x5c0
[  410.532623]  ? ioctl_preallocate+0x1a0/0x1a0
[  410.532641]  ? security_file_ioctl+0x76/0xb0
[  410.532648]  ? security_file_ioctl+0x83/0xb0
[  410.532657]  SyS_ioctl+0x7f/0xb0
[  410.532666]  ? do_vfs_ioctl+0xfe0/0xfe0
[  410.532680]  do_syscall_64+0x1d5/0x640
[  410.532696]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  410.532703] RIP: 0033:0x45c829
[  410.532708] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  410.532719] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
[  410.532732] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  410.532737] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  410.532743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  410.532750] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
02:43:04 executing program 0:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)='\n', 0x300}], 0x1)
r3 = epoll_create(0x2000007)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40080, 0x0)
statx(r5, &(0x7f0000000100)='./file0\x00', 0x6000, 0x8, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040))

02:43:04 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)="5f05dd3e4b61763ca0dda2bdd28ce76415bc130b085a17d6bd959694f0002fa0ef94cbf6b420e365f8c770ccec3693c376742e5aa44aa9a3874372c91f82754959b3112aec5d25c180b9389474200368d549333592c88a992714db328f054b7324fbab6b04c8a92cb2a4babdfbace029a1a623304d1c81", 0x77, r4}, 0x68)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
dup(r3)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffff9, 0x501280)
sendfile(r7, r1, 0x0, 0x10002)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x6)
sendfile(r1, r0, 0x0, 0x10002)
mknod$loop(&(0x7f0000000040)='.\x00', 0x8000, 0x1)

02:43:04 executing program 2 (fault-call:1 fault-nth:6):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:43:04 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7, @remote, 0x8}, @in6={0xa, 0x4e21, 0x3, @local, 0x7}], 0x38)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000003090104000000000000000003000200f300000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44081}, 0x4000006)

02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x5, 0x63, &(0x7f0000000480)})

02:43:04 executing program 1:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/16)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/vmstat\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000010c0)={0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
tee(r2, r3, 0x19, 0x8)
sendfile(r1, r0, 0x0, 0x10002)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FIOCLEX(r4, 0x5451)
ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000000)={0x1000, &(0x7f0000000080)="afdff5d859127378f88520d036fcb7ac44e236c2c0fee2e159129ffc6cf30545418c5137fcf9e4200e48faec0989e99dc425dd39197414eed8847b3733404012bc0ad6f99091e3cb7e7d6275b4f7839a4f44c8c13f655550c26f35f788ddaa765ec3aedf75b42cb70706f5e52cc360c290ac29eb92363c516572b1cb20fd6d9a7e3c19e6232bb1496ef8c7ff6754b6468b2b6d5a15ea2d0662f10866085451a19c3911208b4636c3267f056ecebfca166125614c544722c64aadddf4e85ca82859de22e95dda345e45cb126232b1cd5dd536b84c1b4f1f93df99abc49ca63f13adac4bcae6355f8c368559b8f07585f8b3005bfc774a0266f57a822d0217b65b0958c80d7ce0dbefd1c661b170189cc5ffc17c0fe538ea2bc9697b190fa9a6b4a8d6d43f2e174351b73dd0ce13332790a5bfc01bdc1f57852a496291ee98683e0561cb09b3fd558c66106af1918d247ad719a937f81fdbf7a8df6a1f937c0d9ca5d097696f5f92174fe4bf7cf351902bbebf61cada8fcaa60951ad5e4833334644abe8101da8d0767c3d8ef88c42f350c8fff3d6adb08f67777f3f018d647e256bfa6fe9cc5a2aad6c90a28f094a47dd7fd7babe40f134cb7bb21b7f6a8323afcaa9d87a58c7d679196604ead4b713e738c9fa55d9634ff059bb8e11ababf972ee0f8b64f97475a735f4122f35e0c1ea695c2fe59d9de5fc32d9ad87a08d15d7184b104731bdf20ebf7e8f20806f534a4a1508954635fbe64aa4a9a100aedf4cf2f15a54ea9a98dc93d1292892b28c42cebc287da93431433e43c73721464bac3a319b55035aae6061c8ceb26aff6cf342fdd49ffc0cb9291e753411b5decbd45acdf1034a6b98d37dc9b0a01b4b28527fdc9258675240ec2aefe12b6ff897d1b810f75ec4beb0d9ef033db7e732d1f86c21e501853297a9faf875c239cc54af5a9ef88368917c0ee4d9f4f3f911ffce6a33bcaf4e22abed1ca1882a6cb4c1a6a12db62f736da93cd171984842cb45b35bf3956ab095193bebcb3224e74252922352b01e808badbde820baf56661f2849e5b69a14f277ad8983e5a1b8486815d247a7dbb2bd4610b7c37477c466aa476fc7a97648e54843dbc9c73777c2997ac296dfe666f7b9441b25d06db52ce0cb482ab3e76a30a2e78763f95c6ced2c63aef19860fb309c167c897fcb7ada63ffeac952e13a005c0a3dae4f5d1c9205b754b0a0a5080d8fb8aef7f27a42a52a4ca95d6dcd63b3596613df9e3bf4ac2ffd128531cc06faba4f729fbbdf45f96893d91792cd37e1c43da2351952b4f5070d65a372b98ffdabffdba65e9074f5d472cc804d6f0a3438925ee4ef9887007ada59e019c2c0ee13afad1dc1d7b7cfddf806502f891bf3e13b28d7ecfe07b76118a5f4403b213810b96797ac3be66da931a9117285dce10f3243c2822475ae4875d7f0e4536fb79d5e7683ace6466cb630135de39bead609fdcbe98b7b2006a196e20d5f4ef2c65ce9ea4c086482f9010d07524c2d8c9bf6cedfc406fb1874c41fac30e0f37ea19b1636d896ecaa68fbd2f971fff23ac9805f340761f9c45c27e574abddd60d193147f226a0576401c6aa68a53a051867bbe462e99202853099e97bcf02bc771d4122a3267217672d605ce8d51d1c5f4a0efe23bf132df3aab42c36e2cce2f2e2c7ca5a2f204ff2bbc43b3d42ed727a4b904dd73ee769fe51b31a1f9ba07215c3b1706ee9eef14d3985a2c81305a047f4fcd64eab3088d7313cf97905c60bd506f1802b6ca35b6124c6f7dab444689e5aa2a058eef3cfc8abb8aeeb98a9b91ee4b1ed7fe311c1c585ab2f1903cbe9358a666f188f1653b182872052fec0eac2c569c704e56e0fa7d461e7562b53fa58445a0ba69d6e56e8b8123332226424363777c550eb636d51379d1e0562daf5e5f64f249a2c7a5f25128ede1aa15da2af80ea4822b88f26606e9387ad1e1216bb455d0d01b95e2819fd8c8941389b910cd1abd71a4347473f65fbd2042fa66cfd19f4c886ac82df0493911f4e8146085ceb608b87a37a8df867aa9ef589c406f35eed0578a98c3ce2086318ebedf7f57ffa043f45c9a93a0f18ae6c777d6914356f39d54ffd25e39d7d36983809df1c9b02347f75fa8a76724fd506011bc30deda944a3c544bf685068323c9b5d7dd4664a4a8e46a77f68c5ad1e853f2907b3ed478700c26f8b98c2306ff51f32d69cd7592a138cea66ce138f8a8d807277dceeb3f082aef1d365b708fd07dba6668532790db19352c944c491e9cb54b4b831153569cb97d30fe90ba9ad751ee9b63abd8344c5b84712b0bbeb52a22c0e3d3878a97eb621ae23af2d020585850c6d14ed183f37491a2dd1112afa93eb8d56183cf3908b9b113e5fcbf385a812f513250e88303b911d893d47f0669a813e7380d1dd4aa482e99d4eea104d1f3ac36fd1102496ef2c28f0f04ea8a2dbce25e3105d3bee7718d7dc2e6aa8f21a3b7a29e0217681ecfbb2148d110dca1f7d45262e66aa00683e89287e21267c0bf8ddfec5e0b5739ed2e594b21414a36f8f78dff81ff68821bd3e116dca78c73e20df9b1d77aeb7e5fab160d8d247d3380824d32e81c42f68bebd634e0f40890393568e5cd3d0342bef524d448a8e00d7cc200ef4dfe52956a0871291f08d30c563fe6dc725c722e9bea994c56ea6d8c678dad2fbb513f26d54ce9ac443330ba590ece90ffdd270839b8fadcb838ee95ba0d906c5693713d5c4a7711689335e3cb64fa19c5fb4b8f1670e7e9f9759119b0aedeb091b5dacca581b7cbe4fd6de813beed11301bc257d5d121ffdad8da7fa3d5cea2b167d21a8a87a411afdcb31f41459c6efe20902f8ca602f0b94567b0649d1e7170a164f18898e811910b21d0890b34d8319c725880ba91710d5cbc56195ccd4f214ddbafc386f2276ba873d8f4d877e5ff22425cdeb5668207668e53eab89e3c08cb173f7e310a4fe4608e00b41d7317e30b643a5633933e58dd4568a1f66547bf62883f970aebaadbcbcca9c3539f4653f2a63700e1fefe84f1f026fee6ba24b0eacd7f5593a425705deabe8095f67aa44df377f47bb8cae53cdc08c2818c9c7b3fe551f756ef564d48096c4f2175e394e66f8b7289dec35a8630ea2f16e80c6c1b97040c476e78a3934ce2074c128988c501355117adc28a9a2790a8f692749bc8062571b70c14d0fa3032cf6aa61c73345a46ab2d64b5235f86f2d717a6203e38284ae1a08cfeb0f2a0e9dfb6d06e5af3a41e03612bbd919774cae3704342f50646bb87198e7f13112eb0034f59df516abccd715395f611f6d62fbb52097db8bd09b4e95b784d2c9788310b8d57a15471e9e7fba07adb60c00186d5068059828311e723e8bb7551bf9e04f680e2c453179b766ef0550deb2502c5a150522146bb74c10ae2f8daa61064d234f898929e9c692d2b6ba0314aee906a40cdc7de97e7447f63cab098bfedcc153d2b665ada7f82a4461c2a37ff2d56852f4f10c3e1e67cd994e4b3fecc2d93862a15f35b68df4a32efa694c463101fb46fb57bcddbc7ebd6823bc3f1f6bb54809f77869252c3d03fdd6c93c54cbf8feb405fd6fdb0e472b791223ecd4959435157d2306b1b8ac73ebac9898574410b5098bd66622435bf4a9fba2d0fbaff7f8789d182735db85e1b8da8196957ed91d186d1f10a4623844655156445d3c515177457c1089d49ed955beb4c32939447edcf29ffc742b862727fe4b10be682918b9109deb2f5f5db92a2b45ac8d20d15b760c3cf03112ec65ffd6017c1b65ffef69d18355143891853777164004134644f8bd235a05db6dce75f35bb8491d9ef4488b3e5aaeafb219ab2f608087604566d0ba37326bc63be19ae32c60603cbd619d9ce9664b6871d7cbb93e237efbc54926de539a445365ea0c593cc04224ecf9f4a662f1f1bce3fdf523a06a92dd2c317012b1402d13814c896cdc2e10d562bdf0cb6426ae31f70e4416fe69854794472683fde9c87b38ed48628422d19c023139caa47ef27256b11624d7db7a9e18f287e1b461e3c64ddcfd399bcea638820603b2ced643fa16a3073b9cb88a459b7ed2e1b770040c694cf35e7eafd24337e27a39f985abae7d766d3aaa143a35b4c75fcd54bd4b93cb063ac31346eda00be1807b9a3216ecefc38b2925729b78d8eb949a695ee0f4d3e02aff0be9197ca6670dde2748912479dd787d9111b45935fc44b090c672efce345836d6c59c814094ceeed67c63e58da2d0a0440b22b0590786a2cf0dd202b49275fb36e8948538f888a0678d840af63890b65c416f2b2b90f6d1244c607604ea3aa03d3c596fae801426885ef8154dc5be4c105c20e64db5a2f1d7a24515ff904c9f46eb2c6e7006e875b9a477cd2e57d7a1aeda63d387593c8187722b713fced4c253e7372fe622e9f04ad99e10ca4bb3c675e09a9f37361bf12299d49b158fb53b28714e1e7ab0fc05e87938a08044e98bf6d5e3e2f8316e40901bc8f7a32772000ba5b4223e2d6467e49a98d17573d0bc59a8b5c6bd244eaf9c4e944f314514d17d82befcda403110aae3338fde299eefb225125dfb7359adca9b64274b91cbc39e5f89dd61ff0ce2abc025c098e85f9de363e67ddcc6910bef179f404b7d78d22c5f7112afc2e909f7d3366387ec198c3b4afbdada31b5bbfa7d68e1d97c2bfc7ea56f0e1f741c352bc2fc128fb009ab30b49caed67f3a5b58f4252406d8b8eabc7088ee47db529c68230ac6edcb497ac2c5d6f1a796e54c1ffe07dda72ab11461e0ff40dd8bff9f73793f1f7f34f2752ce6c4636166459b3077fd1f5d43a88ff486c60d5d38017027d0dbdba969a6b394adb8d2559144e9ffb0e4619dc8a77dbec861f624320c02bf929e2fa8b94c49eb8643dd14b60f18d9c850d6ae72bd7c8b0fe137ccc0e71d75d048aaf24880b199f7c84a7bbd31e890beff9cccc1881d8f84784a4065ad53236649e1adb8dc65d7c8853ea4b1bc51aff763e0d6c3ab62d4c113f26f6d323b3df6047f03d6a6ae54b7d84a0e345d4268e8d80a43a2eb257554b79231d80fecf49b91d2bf51f9cd0e230ea4fa6424bd0baea2ba56d7e6e060dd35ed33956e10c7ccd9a2c6d7890cf5ef30e1e5de8e119a3a25cf6963b68053575b1ffa20474cd9a408fe1647e11d65d11c2ad1c46d13ebd3ef33f9a9e52fb1865662e3858cddfa288d3ad51b9fc8dc156d03b30029e9227ce6cb7be5f8fd9ec10c28e94e070e9e777e12b9656a564812abf94f50b38384eb03ddfe7d8ba03122b629fffeb659e267d91b226239235d259f287de8b209b75a7b6e3aa773a922d806330b67c31a61c95f7fe1a65d7ee36377708baeb64d7eec5ded191fc8e81b8bfab35c092990fc38c8e964b780051b9a87d116ae1cce89c24545c418a8242103a4b29a3f4508359c68b633e292ad5a87b2b3159b85da8868c2ed748b15881c87f060940746d08d316f4ba2a675ca54575b12a3d4a14d38670d25203fb9a55c6701d0a4dee885e4d09dadab82eff1cb5f322551bfec41ba3285d27a42345fb2c4ef3b9efe0998e6d7f67ee4034515e44e252ce22dd0e5c21f5c94139df65c3964f3b4ef059c820c2d33c496b560cbc375b2b3cfce9a270ca655253d7a89dc37375379854ef0270cb40a7312e0e2a896f58617804599e6d1df77366edae23daa1322fc508f58e9ea833614c7d15b0856dbba6bd44041c2db562aed3899141c475559aba287a175d01d1c06965559a46e5f690f796b1203694d1f775c12241b04fcd25491fdbb9"})

[  412.243441]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
[  412.255850] loop0: p1 start 2564762831 is beyond EOD, truncated
[  412.265041] FAULT_INJECTION: forcing a failure.
[  412.265041] name failslab, interval 1, probability 0, space 0, times 0
[  412.273306] loop0: p2 start 2494347297 is beyond EOD, truncated
[  412.292273] [U] 
[  412.294534] loop0: p3 start 1915790064 is beyond EOD, truncated
[  412.301021] CPU: 1 PID: 20362 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  412.303666] [U] 
[  412.309005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  412.309010] Call Trace:
[  412.309029]  dump_stack+0x13e/0x194
[  412.315302] loop0: p4 start 983213520 is beyond EOD, 
[  412.320481]  should_fail.cold+0x10a/0x14b
[  412.320496]  should_failslab+0xd6/0x130
[  412.320504]  kmem_cache_alloc+0x2b5/0x770
[  412.320516]  ? get_mem_cgroup_from_mm+0x157/0x460
[  412.320528]  ptlock_alloc+0x1d/0x70
[  412.320538]  pte_alloc_one+0x57/0x100
[  412.320551]  do_huge_pmd_anonymous_page+0x561/0x11e0
[  412.320564]  ? prep_transhuge_page+0xa0/0xa0
[  412.320575]  ? pud_val+0x6c/0xd0
[  412.323189] truncated
[  412.326752]  ? pmd_val+0xd0/0xd0
[  412.326763]  ? trace_hardirqs_on+0x10/0x10
[  412.326773]  __handle_mm_fault+0x23ac/0x3280
[  412.326785]  ? copy_page_range+0x1d70/0x1d70
02:43:04 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x5, 0x63, &(0x7f0000000480)})

[  412.338032] loop0: p5 start 676962771 is beyond EOD, 
[  412.341182]  ? find_held_lock+0x2d/0x110
[  412.341203]  handle_mm_fault+0x288/0x7a0
[  412.341215]  __do_page_fault+0x4bc/0xb40
[  412.341227]  ? vmalloc_fault+0xdf0/0xdf0
[  412.341235]  ? do_page_fault+0x60/0x4f2
[  412.341247]  page_fault+0x25/0x50
[  412.341256] RIP: 0010:__put_user_4+0x1c/0x30
[  412.341261] RSP: 0018:ffff888053817af8 EFLAGS: 00010297
[  412.341271] RAX: 0000000000000044 RBX: 00007fffffffeffd RCX: 00000000200001c0
[  412.348754] truncated
[  412.350227] RDX: 000000000002646a RSI: ffffffff833de403 RDI: 0000000000000286
[  412.350233] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[  412.350239] R10: ffff88804f08c908 R11: ffff88804f08c080 R12: 00000000200001c0
[  412.350245] R13: ffff8880a7a6c940 R14: ffffffff881e1f10 R15: ffff8880a7a6ca0d
[  412.350265]  ? vt_do_diacrit+0x3e3/0x8b0
[  412.350278]  vt_do_diacrit+0x3ee/0x8b0
[  412.350290]  vt_ioctl+0x376/0x1f20
[  412.350299]  ? complete_change_console+0x350/0x350
[  412.350308]  ? avc_ss_reset+0x100/0x100
[  412.350327]  ? get_pid_task+0x91/0x130
02:43:04 executing program 2 (fault-call:1 fault-nth:7):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:43:04 executing program 0:
r0 = epoll_create(0x2000007)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r5, r4, 0x0, 0x10002)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000100)={0x3, 0x5, 0x4, 0x20, 0x40, {}, {0x1, 0x2, 0xff, 0x6, 0x72, 0x8, "0ee94361"}, 0xe3e, 0x3, @userptr=0xfffffffffffffffe, 0x80000000})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x4)

02:43:04 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCSBRK(r1, 0x5427)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  412.350340]  ? __lock_acquire+0x5f7/0x4620
[  412.358690] loop0: p6 start 3159018777 is beyond EOD, 
[  412.362856]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  412.362865]  ? complete_change_console+0x350/0x350
[  412.362876]  tty_ioctl+0x6c5/0x1220
[  412.362885]  ? tty_vhangup+0x30/0x30
[  412.362900]  ? trace_hardirqs_on+0x10/0x10
[  412.362918]  ? tty_vhangup+0x30/0x30
[  412.362929]  do_vfs_ioctl+0x75a/0xfe0
[  412.362941]  ? selinux_file_mprotect+0x5c0/0x5c0
[  412.362951]  ? ioctl_preallocate+0x1a0/0x1a0
[  412.371234] truncated
[  412.373123]  ? security_file_ioctl+0x76/0xb0
[  412.373133]  ? security_file_ioctl+0x83/0xb0
[  412.376527] loop0: p7 start 745035705 is beyond EOD, 
[  412.380747]  SyS_ioctl+0x7f/0xb0
[  412.380757]  ? do_vfs_ioctl+0xfe0/0xfe0
[  412.380769]  do_syscall_64+0x1d5/0x640
[  412.380785]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  412.380792] RIP: 0033:0x45c829
[  412.380797] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  412.380806] RAX: ffffffffffffffda RBX: 00000000004e6a20 RCX: 000000000045c829
02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x5, 0x63, &(0x7f0000000480)})

02:43:05 executing program 2:
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001040)=0x2, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/4074)

[  412.380811] RDX: 00000000200001c0 RSI: 0000000000004b4a RDI: 0000000000000003
[  412.380815] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  412.380823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  412.389791] truncated
[  412.394799] R13: 0000000000000379 R14: 00000000004c5eb8 R15: 00007f626a83e6d4
[  412.402594] [U] 
[  412.405786] loop0: p8 start 3542136138 is beyond EOD, 
[  412.413439] [U] 
[  412.419609] truncated
02:43:05 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/16)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socket$packet(0x11, 0x3, 0x300)
sendfile(r4, r3, 0x0, 0x10002)
setsockopt$inet_dccp_int(r3, 0x21, 0x5, &(0x7f0000000100)=0xffffffc1, 0x4)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x0, 0x63, &(0x7f0000000480)})

02:43:05 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x440a80, 0x0)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x5)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0xfffffffc)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0x8001, 0x8, 0x12954546, 0xff, "66fcca9dca1afdc350e925260d7ab0fd6dee72", 0x3ff, 0x200})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1)

02:43:05 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r3 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffffffffff6e)
sendfile(r2, r1, 0x0, 0x10002)
getsockopt$inet6_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000001200)=""/102400, &(0x7f0000000040)=0x19000)
r4 = accept$netrom(r3, &(0x7f0000000100)={{}, [@remote, @remote, @bcast, @default, @netrom, @netrom, @default, @rose]}, &(0x7f0000000180)=0x48)
ioctl$sock_ifreq(r4, 0x8990, &(0x7f00000011c0)={'netdevsim0\x00', @ifru_map={0xffffffffffffff80, 0x3, 0x6, 0x2, 0x1}})

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x0, 0x63, &(0x7f0000000480)})

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x0, 0x63, &(0x7f0000000480)})

02:43:05 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80a00, 0x0)
ioctl$TIOCNOTTY(r0, 0x5422)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001140)=[@in6={0xa, 0x4e24, 0xe80c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9}, @in6={0xa, 0x4e22, 0x8, @remote}, @in6={0xa, 0x4e23, 0x7fffffff, @remote, 0x9}], 0x54)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001040)='/dev/sequencer\x00', 0x2400, 0x0)

02:43:05 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$can_bcm(0x1d, 0x2, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000900000008000500", @ANYRES32=r4, @ANYBLOB="4df224d8aeab6f072150ec246f7d3b4fcd96d8479f3a5d8087126108c85d71580d41af027368c9cc9aedfd6126befe87035cdc56b12ebe0e"], 0x60}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001780)={'veth1_to_hsr\x00', <r11=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002100)={&(0x7f00000017c0)={0x92c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8e}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xa0000000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xe0000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xdae}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1277fae4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x45}, 0x48800)
sendfile(r1, r0, 0x0, 0x10002)

02:43:05 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/16)

02:43:05 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r1, 0x4b63, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TCSETX(r2, 0x5433, &(0x7f0000000040)={0x7, 0x8, [0x1f, 0x4, 0xff, 0x6, 0xb91], 0x7f})
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x6)
chown(&(0x7f00000001c0)='./file0\x00', r7, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000900)={0xff, 0x0, {r5}, {<r8=>r7}, 0x401, 0x9})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r10=>0x0}, &(0x7f00000001c0)=0x9)
setgid(r10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000000780)=[{&(0x7f0000000800)={0xf0, 0x3d, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x4, 0x5c}, @nested={0x4, 0x10}, @generic="ccadb23ec668dc6d1a34b3846aa3403854ead061f792f8e582b299848782798bd5f3dce29319d32b92fd4e214ccc5685c1de08bd3a8b6d01b4ac8a29e18f71b421b9263544377e5fe4bc5dc89bc3ce55c320a933fe29f4c1d5ca99f41f7446517189b719b358d015e9ccc0473fbf93e8d5306f26ff31676825c0c2e1b70029d3d6fddc5459229ec4721b4f8f6d0fff6599dddf1699aa48f980799817fca3349b179ee16997ed5fc41c47a19c62f14ba2f8ed74cacece9565a0c670612dd00a242a6d002a083131316143ee80fe1e0d0562c71d9ca3019b"]}, 0xf0}, {&(0x7f0000000240)={0x118, 0x15, 0x10, 0x70bd28, 0x25dfdbff, "", [@generic="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", @typed={0x8, 0x37, 0x0, 0x0, @ipv4=@multicast1}]}, 0x118}, {&(0x7f0000000380)={0xd0, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x14, 0x92, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @generic="6cdbc5adf9297fccaccfe0fe227d93445d571d354b7aa8b73bf4fb1aff338dac89bf5ae9e3994ef542211b794deea18c0f6446859a90c76f9c39006df44c84d7d7e575baa2329e0f068afa91a47ef94b864b809a75efbbe2b06d879249071eb06e48e9c5248c4a3ae5d08566be170ac682fe6d80d59690f91eeb0e6fcf39ea145a57a9a89e75f7a16af6160191f48beb844a093e1ff87693f745795d84d913d4e5b587877fbc522e755bceac"]}, 0xd0}, {&(0x7f0000000480)={0x10, 0x31, 0x300, 0x70bd26, 0x25dfdbfd}, 0x10}, {&(0x7f00000004c0)={0x2bc, 0x25, 0x2, 0x70bd26, 0x25dfdbfe, "", [@nested={0x2ab, 0x50, 0x0, 0x1, [@typed={0x4, 0x4e}, @generic="dc34311c3440daca56d11ccc22920cff05a207438bab413911ad1673189bbaf50186244d5f84f53827737a59049efafb14f0664a53621f49419a654d0d3145d03ecb79d17010e886c53a192ecd6b8eece20787308e5b3b3e7d8e1090df0cc0e1b40cd0c0135993ff4f8b87c993592d86dc031c8ae6778d145cda5efdabdce0bd6d346b92484a66d662a6f656713bfdc15b6f57dd6484a3f72d142bd6e0fdf2cecea30db6ad3245c6f7df28", @generic="2dd748b86b29117c4054c0b04c3ae3cc041b46faf397f4f69b9afccbe7ebce989bc5344961e497383174694df6444c769e2cf684c912a466a602c7278b10bf17c9dd2f7aaf17e61f419bb306d10d27d4a92c322db54c0165d571bd24153772928b3efb7756994f2f978637cf75f3db04e5804343c86cb849d97b5b4dd0dca676837e67fbebb2bb2b86affd69fce6147888e37dde34b0b712f4b9ab24c89e4653b94cdd22b9f59d01ad8c323115dfdc", @generic="b98ed7682fb1d8ce83dae62dc5", @generic="99ef01cbdb138c21abd84be1b276f37c7c1f25380333662fa06b3ea483466ca82d096d6bff3c96eaad398b6b10136d9cd062fa516e09029d43b35fac7155edadb07e109548f639637766271249803c78122e88f18fd0934a1a43afbabbb863941464e60106c43086", @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x95, 0x0, 0x0, @uid}, @generic="65d0fcd38b5dd3840df337042b88389690700f43273dfb1764b717ecf87bc09a53eac45f08d12473c20e1dbb365172161edb5f2e99a0db07bcda71556c7a1482819be71ae2ac6b04278d75c392c9433fd49c6e0704b3675600ff96810e3fed3577cb045e4efd3871e8c69ab0c1d2621370eae97c9a4dfec9802088efbd3d6050d04cb49426314f7fad72086ce26a789b237ca7c906b94bd6c816ab73a6dbde7ce8c25b24c76759d79e004fa3589388acaa47802b53433eb83137a1ba813f24eedcf588ef"]}]}, 0x2bc}], 0x5, &(0x7f0000000940)=[@rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r10}}}], 0x58, 0x20000}, 0x41)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x0, &(0x7f0000000480)})

02:43:05 executing program 0:
r0 = epoll_create(0x2000007)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10002)
r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x46, 0x4, 0x204, 0x3, 0x62ea, 0x3, 0xffffffff, 0x40, r3}, &(0x7f00000001c0)=0x20)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r7, r6, 0x0, 0x10002)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000100))
r8 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x200000000000005, 0x21a01)
sendfile(r8, r5, 0x0, 0x10002)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x10002002})

02:43:05 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x610000, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4066)

[  413.078825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x0, &(0x7f0000000480)})

02:43:05 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r3, r2, 0x0, 0x10002)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x100, 0xf789, 0x200f, 0x4, 0xc, 0x4, 0x2, 0x1}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r6, r5, 0x0, 0x10002)
ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000100))
r7 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x10002)

02:43:05 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
ioctl$USBDEVFS_GET_SPEED(r1, 0x551f)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'ipvlan0\x00', {}, 0x7f})

02:43:05 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none, 0x7fff, 0x2}, 0xe)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r4, r3, 0x0, 0x10002)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0x1000, 0x4000, 0x1000, 0x4000], 0x2, 0x46, 0xa2})
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000001c0)=""/4096)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x0, &(0x7f0000000480)})

02:43:05 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r1, r0, 0x0, 0x10002)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
fcntl$setown(r0, 0x8, r2)
ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x6000, 0x100000, 0xcf98, 0x3, 0xffff})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0xfa})
r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7, 0x8}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1}, 0x8)
ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)=""/16)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, 0x0})

02:43:05 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000040)={0x3, 0x7b, "0b776085a1a2eaff2ca9a3c336f1a0d866be3e0d7a89b84dae0dc8fefd1dd27d5498b8bcd1e358a143978fdf284a9423fe27d275e35777ef2e5c9aa61bda6a90a8132d6090f7fddce681fdf3cf9e73555b5b6dfc8be260f9da326f43da701c5801abc3e07604f14fcff3115fb260c013df39f7d70c07d3fd5e5bea"})
ioctl$TIOCSIG(r1, 0x40045436, 0x1e)

[  413.466934]  loop0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8
02:43:05 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x4)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0xa00, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x400042, 0x0)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000001c0)=""/4096)

[  413.490092] loop0: p1 start 2564762831 is beyond EOD, truncated
[  413.496307] loop0: p2 start 2494347297 is beyond EOD, truncated
[  413.506685] loop0: p3 start 1915790064 is beyond EOD, truncated
[  413.513634] loop0: p4 start 983213520 is beyond EOD, truncated
[  413.519632] loop0: p5 start 676962771 is beyond EOD, truncated
02:43:05 executing program 3:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x511480)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800)
ioctl$KDSKBMETA(r0, 0x4b63, 0x0)

02:43:05 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, 0x0})

02:43:05 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
sendfile(r2, r1, 0x0, 0x10002)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x10040, 0x0)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000100)={0x7, 0x2, 0x7fff, 0x9, 0x2, "4195251d3275f3bd55eb79ad3c6b828af47c0c", 0x2d, 0x7})
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4)
ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x21a01)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1229)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
sendfile(r6, r8, 0x0, 0x10002)

[  413.540784] loop0: p6 start 3159018777 is beyond EOD, truncated
[  413.547624] loop0: p7 start 745035705 is beyond EOD, truncated
[  413.558616] loop0: p8 start 3542136138 is beyond EOD, truncated
02:43:05 executing program 2:
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/4129)

02:43:06 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000000)={0x3, 0xffffffff, 0x10, 0x5, 0x63, 0x0})

02:43:06 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}})
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000400)={0x1ed, 0x1a})
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000011c0)=""/4109)

[  413.743821] ==================================================================
[  413.743862] BUG: KASAN: global-out-of-bounds in fbcon_get_font+0x262/0x530
[  413.743870] Read of size 32 at addr ffffffff86e697a0 by task syz-executor.2/20494
[  413.743873] 
[  413.743884] CPU: 1 PID: 20494 Comm: syz-executor.2 Not tainted 4.14.180-syzkaller #0
[  413.743890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  413.743894] Call Trace:
[  413.743908]  dump_stack+0x13e/0x194
[  413.743919]  ? fbcon_get_font+0x262/0x530
[  413.743933]  print_address_description.cold+0x5/0x1e2
[  413.743944]  ? fbcon_get_font+0x262/0x530
[  413.743953]  kasan_report.cold+0xa9/0x2ae
[  413.743966]  memcpy+0x20/0x50
[  413.743976]  fbcon_get_font+0x262/0x530
[  413.743989]  ? display_to_var+0x7b0/0x7b0
[  413.744000]  con_font_op+0x1c6/0xf70
[  413.744014]  ? con_write+0xc0/0xc0
[  413.744032]  ? __might_fault+0x177/0x1b0
[  413.744045]  vt_ioctl+0x16d2/0x1f20
[  413.744056]  ? complete_change_console+0x350/0x350
[  413.744073]  ? avc_ss_reset+0x100/0x100
[  413.744085]  ? __lock_acquire+0x5f7/0x4620
[  413.744103]  ? __lock_acquire+0x5f7/0x4620
[  413.744114]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  413.744122]  ? complete_change_console+0x350/0x350
[  413.744133]  tty_ioctl+0x6c5/0x1220
[  413.744142]  ? tty_vhangup+0x30/0x30
[  413.744156]  ? trace_hardirqs_on+0x10/0x10
[  413.744173]  ? tty_vhangup+0x30/0x30
[  413.744185]  do_vfs_ioctl+0x75a/0xfe0
[  413.744194]  ? selinux_file_mprotect+0x5c0/0x5c0
[  413.744206]  ? ioctl_preallocate+0x1a0/0x1a0
[  413.744226]  ? security_file_ioctl+0x76/0xb0
[  413.744234]  ? security_file_ioctl+0x83/0xb0
[  413.744244]  SyS_ioctl+0x7f/0xb0
[  413.744251]  ? do_vfs_ioctl+0xfe0/0xfe0
[  413.744262]  do_syscall_64+0x1d5/0x640
[  413.744276]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  413.744284] RIP: 0033:0x45c829
[  413.744288] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.744298] RAX: ffffffffffffffda RBX: 00000000004e57e0 RCX: 000000000045c829
[  413.744303] RDX: 0000000020000400 RSI: 0000000000004b6b RDI: 0000000000000004
[  413.744308] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  413.744313] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  413.744318] R13: 0000000000000330 R14: 00000000004c5955 R15: 00007f626a83e6d4
[  413.744332] 
[  413.744335] The buggy address belongs to the variable:
[  413.744430]  fontdata_8x16+0x1000/0x1120
[  413.744432] 
[  413.744434] Memory state around the buggy address:
[  413.744442]  ffffffff86e69680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  413.744449]  ffffffff86e69700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  413.744456] >ffffffff86e69780: 00 00 00 00 fa fa fa fa 06 fa fa fa fa fa fa fa
[  413.744460]                                ^
[  413.744467]  ffffffff86e69800: 05 fa fa fa fa fa fa fa 06 fa fa fa fa fa fa fa
[  413.744474]  ffffffff86e69880: 00 00 03 fa fa fa fa fa 00 00 00 00 00 00 00 00
[  413.744477] ==================================================================
[  413.744480] Disabling lock debugging due to kernel taint
[  413.744485] Kernel panic - not syncing: panic_on_warn set ...
[  413.744485] 
[  413.744494] CPU: 1 PID: 20494 Comm: syz-executor.2 Tainted: G    B           4.14.180-syzkaller #0
[  413.744498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  413.744500] Call Trace:
[  413.744510]  dump_stack+0x13e/0x194
[  413.744546]  panic+0x1f9/0x42d
[  413.744555]  ? add_taint.cold+0x16/0x16
[  413.744566]  ? lock_downgrade+0x6e0/0x6e0
[  413.744572]  ? add_taint.cold+0x5/0x16
[  413.744582]  ? fbcon_get_font+0x262/0x530
[  413.744590]  kasan_end_report+0x43/0x49
[  413.744597]  kasan_report.cold+0x12f/0x2ae
[  413.744605]  memcpy+0x20/0x50
[  413.744613]  fbcon_get_font+0x262/0x530
[  413.744621]  ? display_to_var+0x7b0/0x7b0
[  413.744629]  con_font_op+0x1c6/0xf70
[  413.744639]  ? con_write+0xc0/0xc0
[  413.744651]  ? __might_fault+0x177/0x1b0
[  413.744659]  vt_ioctl+0x16d2/0x1f20
[  413.744668]  ? complete_change_console+0x350/0x350
[  413.744674]  ? avc_ss_reset+0x100/0x100
[  413.744681]  ? __lock_acquire+0x5f7/0x4620
[  413.744692]  ? __lock_acquire+0x5f7/0x4620
[  413.744699]  ? tty_jobctrl_ioctl+0x3b/0xbf0
[  413.744706]  ? complete_change_console+0x350/0x350
[  413.744714]  tty_ioctl+0x6c5/0x1220
[  413.744722]  ? tty_vhangup+0x30/0x30
[  413.744731]  ? trace_hardirqs_on+0x10/0x10
[  413.744743]  ? tty_vhangup+0x30/0x30
[  413.744752]  do_vfs_ioctl+0x75a/0xfe0
[  413.744760]  ? selinux_file_mprotect+0x5c0/0x5c0
[  413.744769]  ? ioctl_preallocate+0x1a0/0x1a0
[  413.744782]  ? security_file_ioctl+0x76/0xb0
[  413.744789]  ? security_file_ioctl+0x83/0xb0
[  413.744797]  SyS_ioctl+0x7f/0xb0
[  413.744804]  ? do_vfs_ioctl+0xfe0/0xfe0
[  413.744813]  do_syscall_64+0x1d5/0x640
[  413.744823]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  413.744828] RIP: 0033:0x45c829
[  413.744832] RSP: 002b:00007f626a83dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  413.744841] RAX: ffffffffffffffda RBX: 00000000004e57e0 RCX: 000000000045c829
[  413.744846] RDX: 0000000020000400 RSI: 0000000000004b6b RDI: 0000000000000004
[  413.744850] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000
[  413.744854] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  413.744858] R13: 0000000000000330 R14: 00000000004c5955 R15: 00007f626a83e6d4
[  413.746247] Kernel Offset: disabled
[  414.262971] Rebooting in 86400 seconds..