143e94552c8a84c382440b68e229eb82d5740a59b1e65522277d6b9eb5a9b8b6ee11b5d0adf1f7915a5486b1c99f42ec376760a9f5db56583f389722fef8d7e3a3fef682e01f0fe899ae7f7e8c4af4070b89caf57404e057c8e40d47700d3a8645562eda1b5f49236b4ba7d84619e7e7f2bca1d57b34c99910682ee3d07cd3086d04980a7f060ab8aed110e132d8c910b38c74b13172676c7b3906c7bfd94a6789fee7eb2142a9fbd2a6365beb7857c086e")

11:42:20 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571b03, 0x0)

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xeffb)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x700, 0x7, 0xfff, {{0x6, 0x4, 0x1, 0xa, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@end]}}}}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000580)="e530")

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
read$qrtrtun(r0, &(0x7f0000000080)=""/4096, 0x1000)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/4096, 0x1000)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x0, 0x700, 0x7, 0xfff, {{0x6, 0x4, 0x1, 0xa, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@end]}}}}}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000580)="e530")

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="6094494dd755a6cb1f8f9d79cde7")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x7, "722e2178e8ed000ecf05e156f2e484a6b73ed6dd149b4c0ca29b1fa3ab2310df8e4e7117f976e673852000df8690bcf5ea2b26772b87f5c51305d87de5e8f1337ee7d20b4b3f235da90a167939dd06c35a59fdf20700e76088138208bae093a31ed93b3cedc7293787756e8aae7cf084827ba25d75c2015660a9d2f4e90b3e338a6fae63be03aabb8ab19a607a93314b1acf4963f910161c1cfce647acac5d657f45de7e2ad851d0a46c9a80d5062c1d14b4f2bced2f43f54a80450f524fa5043ead3e330415b4480ba41bdf9acf69a5ba3b1e3dbd50e4c72c3f1b1b065be8ef71e9fdb4956725bdde4b1eb38e7f41a8390c11818a8552b7b57d5302b13cf80d9859fb557f640ca2980340bd944e4be453b339c27bdbe580f95ae53188dd6a37184c0322837253edeb840a388b85dcb5d0826d8c646d5678462a2e8daa08a808e8d76df54740cc50fbbb7aa29558ea9c477daccb3188d49f761565fc86afcaa552e46bd5240adb73526f41d01b80b79a81e28b02215897fefedc6e4ad2397af81672ee22b07e79a52b5918ff000e1940813c4e06fc145af47a782e66d9e224255ead30f792662ddf0fc753bd306a88f99de7232d5f0a2712ed1eb115cdd4b9b9e1caef3089f5c086baa4ba064aad64c357a76ea0498dc7d133635054068616e35f1c41fa0c986bb960f6c5a808098fb25c4900d8e80a108d4416f9b6157f1416"})

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r1=>0x0, 0x10, 0x8000, 0x0, 0x4, {{0x14, 0x4, 0x0, 0x3e, 0x50, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x9, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@remote, 0x8b7}, {@local, 0x3f}, {@loopback, 0x7fff}]}]}}}}})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@restrict={0xf, 0x0, 0x0, 0xb, 0x40}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x49}, {0x1, 0x200}]}, @const={0x9}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/150, 0x55, 0x96}, 0x20)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xff, 0x0, 0x100, 0xffffffffffffffff, 0x17, '\x00', 0x0, r0, 0x4, 0x4, 0x2, 0xa}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x3, 0x6, 0x3, 0x5, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x6d}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000100)=""/91, 0x41000, 0x18, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, r0, 0xffffffffffffffff]}, 0x80)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))

11:42:20 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x10008811)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x7, 0xa, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x6a7, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0xbeba, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xfff9, 0x0, 0xffff})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="6094494dd755a6cb1f8f9d79cde7") (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x7, "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"})

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r1=>0x0, 0x10, 0x8000, 0x0, 0x4, {{0x14, 0x4, 0x0, 0x3e, 0x50, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x9, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@remote, 0x8b7}, {@local, 0x3f}, {@loopback, 0x7fff}]}]}}}}}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@restrict={0xf, 0x0, 0x0, 0xb, 0x40}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x49}, {0x1, 0x200}]}, @const={0x9}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/150, 0x55, 0x96}, 0x20) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xff, 0x0, 0x100, 0xffffffffffffffff, 0x17, '\x00', 0x0, r0, 0x4, 0x4, 0x2, 0xa}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x3, 0x6, 0x3, 0x5, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x6d}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000100)=""/91, 0x41000, 0x18, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, r0, 0xffffffffffffffff]}, 0x80) (async)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/4096, 0x1000) (async)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r1=>0x0, 0x10, 0x8000, 0x0, 0x4, {{0x14, 0x4, 0x0, 0x3e, 0x50, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x9, [{@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@remote, 0x8b7}, {@local, 0x3f}, {@loopback, 0x7fff}]}]}}}}}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@restrict={0xf, 0x0, 0x0, 0xb, 0x40}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x10, 0x49}, {0x1, 0x200}]}, @const={0x9}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/150, 0x55, 0x96}, 0x20) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xff, 0x0, 0x100, 0xffffffffffffffff, 0x17, '\x00', 0x0, r0, 0x4, 0x4, 0x2, 0xa}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x3, 0x6, 0x3, 0x5, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0x6d}], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x5b, &(0x7f0000000100)=""/91, 0x41000, 0x18, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xc, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, r0, 0xffffffffffffffff]}, 0x80)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="6094494dd755a6cb1f8f9d79cde7") (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0x7, "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"})

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', <r1=>0x0, 0x8000, 0x8000, 0x3, 0xffff, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x65, 0x0, 0x7b, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x2d, 0x0, 0x4, [0x4, 0xff, 0x800]}, @ssrr={0x89, 0x17, 0x85, [@private=0xa010101, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @empty]}, @noop, @cipso={0x86, 0xffffff64, 0x2, [{0x2, 0x11, "dcb801b5645a1b46174be6f964c2eb"}, {0x7, 0x2, "0030b82f3b"}, {0x1, 0xd, "3b0c772ba1071a9e49a9a5"}, {0x5, 0xb, "9a179fa59778ac139b"}, {0x7, 0x2}, {0x2, 0x12, "c957c9f3a948ce0ffdab282cf3c54c6e"}]}]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f00000002c0)=0x8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', <r1=>0x0, 0x8000, 0x8000, 0x3, 0xffff, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x65, 0x0, 0x7b, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x2d, 0x0, 0x4, [0x4, 0xff, 0x800]}, @ssrr={0x89, 0x17, 0x85, [@private=0xa010101, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @empty]}, @noop, @cipso={0x86, 0xffffff64, 0x2, [{0x2, 0x11, "dcb801b5645a1b46174be6f964c2eb"}, {0x7, 0x2, "0030b82f3b"}, {0x1, 0xd, "3b0c772ba1071a9e49a9a5"}, {0x5, 0xb, "9a179fa59778ac139b"}, {0x7, 0x2}, {0x2, 0x12, "c957c9f3a948ce0ffdab282cf3c54c6e"}]}]}}}}}) (rerun: 64)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f00000002c0)=0x8, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)

11:42:20 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x10008811) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x7, 0xa, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x6a7, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0xbeba, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xfff9, 0x0, 0xffff}) (async)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) (async)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$TIOCEXCL(r0, 0x540c)

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10)

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) (async)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:20 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', <r1=>0x0, 0x8000, 0x8000, 0x3, 0xffff, {{0x22, 0x4, 0x0, 0x7, 0x88, 0x65, 0x0, 0x7b, 0x29, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x10, 0x2d, 0x0, 0x4, [0x4, 0xff, 0x800]}, @ssrr={0x89, 0x17, 0x85, [@private=0xa010101, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @empty]}, @noop, @cipso={0x86, 0xffffff64, 0x2, [{0x2, 0x11, "dcb801b5645a1b46174be6f964c2eb"}, {0x7, 0x2, "0030b82f3b"}, {0x1, 0xd, "3b0c772ba1071a9e49a9a5"}, {0x5, 0xb, "9a179fa59778ac139b"}, {0x7, 0x2}, {0x2, 0x12, "c957c9f3a948ce0ffdab282cf3c54c6e"}]}]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f00000002c0)=0x8, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$TIOCEXCL(r0, 0x540c)

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) (rerun: 64)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/145)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}}}, 0x3a)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x369081, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x81, 0xffc0, 0x4, 0x1d8, 0x2, "3c09f7d6c0315431"})
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000)="e0fbbabc42762c72fb")

11:42:20 executing program 2:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x9, 0xff, 0xca, 0x1ff})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$KDSKBLED(r0, 0x4b65, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8d00, 0x0)

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) (async)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="235a08ff6b1377737a6aa40230634e2268766f353e000095c34cafb58b15f408867d7e80910cfdd666212df1981b18297375cfc16270370292ff3ddcde8d7c741a873a6d36c0942e697f82c6ddf2047c64a5a48acf13a52e1b03223badca6f575e8d8351d46a0467fd065915d3add155b98a725673a660a05c17bba9f6a3d43a35a6440b218fe5734ead7649aac8b6c5f0caa8ca3edb58de14a842fa0a3d974568e866420ce19befe8ff226992ac9484e2ec4457")

11:42:20 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x10008811)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x7, 0xa, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x6a7, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0xbeba, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xfff9, 0x0, 0xffff})
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x10008811) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x8, 0x7, 0xa, 0xffffffffffffffc0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x6a7, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0xbeba, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0xfff9, 0x0, 0xffff}) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) (async)
pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80010) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)

11:42:20 executing program 2:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x9, 0xff, 0xca, 0x1ff})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$KDSKBLED(r0, 0x4b65, 0x2) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8d00, 0x0)

11:42:20 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
ioctl$TIOCEXCL(r0, 0x540c)

11:42:20 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/145)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}}}, 0x3a) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x369081, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x81, 0xffc0, 0x4, 0x1d8, 0x2, "3c09f7d6c0315431"}) (async)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000)="e0fbbabc42762c72fb")

11:42:20 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10)

11:42:20 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="235a08ff6b1377737a6aa40230634e2268766f353e000095c34cafb58b15f408867d7e80910cfdd666212df1981b18297375cfc16270370292ff3ddcde8d7c741a873a6d36c0942e697f82c6ddf2047c64a5a48acf13a52e1b03223badca6f575e8d8351d46a0467fd065915d3add155b98a725673a660a05c17bba9f6a3d43a35a6440b218fe5734ead7649aac8b6c5f0caa8ca3edb58de14a842fa0a3d974568e866420ce19befe8ff226992ac9484e2ec4457")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/145)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}}}, 0x3a) (async)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7c}}}, 0x3a)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x369081, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000100)={0x81, 0xffc0, 0x4, 0x1d8, 0x2, "3c09f7d6c0315431"})
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000)="e0fbbabc42762c72fb") (async)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000)="e0fbbabc42762c72fb")

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84002, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="235a08ff6b1377737a6aa40230634e2268766f353e000095c34cafb58b15f408867d7e80910cfdd666212df1981b18297375cfc16270370292ff3ddcde8d7c741a873a6d36c0942e697f82c6ddf2047c64a5a48acf13a52e1b03223badca6f575e8d8351d46a0467fd065915d3add155b98a725673a660a05c17bba9f6a3d43a35a6440b218fe5734ead7649aac8b6c5f0caa8ca3edb58de14a842fa0a3d974568e866420ce19befe8ff226992ac9484e2ec4457")

11:42:21 executing program 2:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0x9, 0xff, 0xca, 0x1ff})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$KDSKBLED(r0, 0x4b65, 0x2) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8d00, 0x0)

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000000)=""/43, 0x2b}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6745, <r2=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0xffffffffffffffde)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x401}, 0x8)
alarm(0x100008005)

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)="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")

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000000)=""/43, 0x2b}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6745}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6745, <r2=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0xffffffffffffffde)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x401}, 0x8)
alarm(0x100008005)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84002, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 2:
select(0x40, &(0x7f00000000c0)={0x3, 0x7, 0x80000001, 0x7fffffff, 0x95, 0x8, 0x4, 0x3ff}, &(0x7f0000000100)={0x200, 0x7f, 0x9aba, 0x24, 0x1ec, 0x8, 0xfff, 0x5}, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffe0, 0x9, 0x3e0000000000000, 0x7c, 0x6, 0xff}, &(0x7f00000001c0))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xff, 0x741, 0x200, 0x4, 0x0, 0x9})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7afaf581, 0x400000)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x5, 0x302281)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x6, 0x8, 0x9, 0x9a, 0x81, 0x9})

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)="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")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000000)=""/43, 0x2b}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6745, <r2=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0xffffffffffffffde)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x401}, 0x8)
alarm(0x100008005)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000080)=""/149, 0x95, 0x0, &(0x7f0000000000)=""/43, 0x2b}}, 0x10) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x6745}, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r2, 0xffffffffffffffde) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x401}, 0x8) (async)
alarm(0x100008005) (async)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x84002, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 2:
select(0x40, &(0x7f00000000c0)={0x3, 0x7, 0x80000001, 0x7fffffff, 0x95, 0x8, 0x4, 0x3ff}, &(0x7f0000000100)={0x200, 0x7f, 0x9aba, 0x24, 0x1ec, 0x8, 0xfff, 0x5}, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffe0, 0x9, 0x3e0000000000000, 0x7c, 0x6, 0xff}, &(0x7f00000001c0))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xff, 0x741, 0x200, 0x4, 0x0, 0x9})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7afaf581, 0x400000) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x5, 0x302281)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x6, 0x8, 0x9, 0x9a, 0x81, 0x9})

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)="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") (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)="0205000000000000000200010000ba4d0c0000000000000000000000ee5df929edb2971f02d5475dbf2c1300007486d9817b72cc698d9d77f486cec0d51b46b6b605000d0e23b9dfd1d46893080534f403c9b5935b07f54995102cc0070d160edf825d664316baf4baeb74ed05c882b945f18e644b5b838b10742561932c63dab2ff31f590a96a448717b0f7894e660b6cb3bd5c915c71da8b3a9b7cb55fd654a8fc6778585cf42678fce9b8eacbf6e70b839a147f662c21d6a1ba8d38830c5430ccb127c9c741caebc50f11b845431c473e5b22d8a7343203647e351d9b2f600d693e5b44644c97a351b52d25397996a3d7f610830d7109456c2bf468a056fb4251064ae46f808fd501ace44d380d389315479931e5b8b696b4bfb8ed6eba4358e28012477f63c059ea67c510a5fe5f5b3cdef05351d91614b3077d415528406428ce67b11dde64942752832e789c008c3be63c54df99c4b44f2f26aab443e9ce1d56c0507c2c864445acc57a7395ae9c8c16a5c25b912527649ef9788aaeb025b9fdacfcaefb7d2f425625d693bcbd631fa3da637ed5a4604e65372c272e55bf8e8c0650717e92e49096aeeb5241704e130000000000000000000000016cb689873e5d0a539e2b36c4918624a52c440eb649517638524400a0d1268fd712fe30676f6e429afb30e9b22632b8ebd76469b920d0ff132b565264c2e085b7e6819179755d35390f05027fe2d38949f6aec129af419c4f3481e773cc8d9a5d173d82cf33a967823907b68694d9d75f73e635be59621fba67b48ba88d4b022a44871adfd468be2b011e74f826ebc281e234803eb0")

11:42:21 executing program 2:
select(0x40, &(0x7f00000000c0)={0x3, 0x7, 0x80000001, 0x7fffffff, 0x95, 0x8, 0x4, 0x3ff}, &(0x7f0000000100)={0x200, 0x7f, 0x9aba, 0x24, 0x1ec, 0x8, 0xfff, 0x5}, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffe0, 0x9, 0x3e0000000000000, 0x7c, 0x6, 0xff}, &(0x7f00000001c0))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xff, 0x741, 0x200, 0x4, 0x0, 0x9}) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0xff, 0x741, 0x200, 0x4, 0x0, 0x9})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x7afaf581, 0x400000)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x5, 0x302281)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x6, 0x8, 0x9, 0x9a, 0x81, 0x9})

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x800) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x28, 0x1f, 0x1})

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0xffffffff)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 0:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/147)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (rerun: 64)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r2=>0x0, @ANYBLOB="800078000000000700000002463400580067000001049078e00000020a010100941101512b0559a1b1202e0b1cc895147694040000070c4435b774806323e5d732008212d12aa4c6992c38ff3e9efa496639aeaf4410e7da64d05607d18114d1671e4a3a"]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x1012, r1, 0x280000, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x4}, 0x48)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="52babd4c2b510e8bd2f83d3edca144603698d0a324a397c4ea5cf0ab5b126f82bb71fba0eef95cdbe95d37d724814c55f07575843ec1caf8f24132f13e5ff08f4c015b0df7be607f5349904be6b3583c74f1eed1f361684c87b62e545e1c2b24c2fff4e43baa3a412b9cf57570ee9a755eecda7fe49a452a5f80065290e4c9dfda4426d6f10cefb0d65f1d142c3aa25572b360a8829a9c9e40572c88aff6d727d2096d65d1aa8b3170f74a9d9284f103dc27ad865207fc7a26f7430d015fd1a3", &(0x7f0000000380)=@tcp=r4, 0x2}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x700, 0x0, 0x4, 0x8000000, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @empty, {[@end, @lsrr={0x83, 0xb, 0x6e, [@remote, @private=0xa010102]}, @rr={0x7, 0x7, 0xac, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x9, [{@loopback, 0xffff}]}, @rr={0x7, 0x1b, 0x18, [@local, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0x6]}, @noop]}}}}})

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x28, 0x1f, 0x1})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x28, 0x1f, 0x1}) (async)

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0xffffffff) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 0:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/147)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r2=>0x0, @ANYBLOB="800078000000000700000002463400580067000001049078e00000020a010100941101512b0559a1b1202e0b1cc895147694040000070c4435b774806323e5d732008212d12aa4c6992c38ff3e9efa496639aeaf4410e7da64d05607d18114d1671e4a3a"]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x1012, r1, 0x280000, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x4}, 0x48)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="52babd4c2b510e8bd2f83d3edca144603698d0a324a397c4ea5cf0ab5b126f82bb71fba0eef95cdbe95d37d724814c55f07575843ec1caf8f24132f13e5ff08f4c015b0df7be607f5349904be6b3583c74f1eed1f361684c87b62e545e1c2b24c2fff4e43baa3a412b9cf57570ee9a755eecda7fe49a452a5f80065290e4c9dfda4426d6f10cefb0d65f1d142c3aa25572b360a8829a9c9e40572c88aff6d727d2096d65d1aa8b3170f74a9d9284f103dc27ad865207fc7a26f7430d015fd1a3", &(0x7f0000000380)=@tcp=r4, 0x2}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x700, 0x0, 0x4, 0x8000000, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @empty, {[@end, @lsrr={0x83, 0xb, 0x6e, [@remote, @private=0xa010102]}, @rr={0x7, 0x7, 0xac, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x9, [{@loopback, 0xffff}]}, @rr={0x7, 0x1b, 0x18, [@local, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0x6]}, @noop]}}}}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800078000000000700000002463400580067000001049078e00000020a010100941101512b0559a1b1202e0b1cc895147694040000070c4435b774806323e5d732008212d12aa4c6992c38ff3e9efa496639aeaf4410e7da64d05607d18114d1671e4a3a"]}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x1012, r1, 0x280000, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x4}, 0x48) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="52babd4c2b510e8bd2f83d3edca144603698d0a324a397c4ea5cf0ab5b126f82bb71fba0eef95cdbe95d37d724814c55f07575843ec1caf8f24132f13e5ff08f4c015b0df7be607f5349904be6b3583c74f1eed1f361684c87b62e545e1c2b24c2fff4e43baa3a412b9cf57570ee9a755eecda7fe49a452a5f80065290e4c9dfda4426d6f10cefb0d65f1d142c3aa25572b360a8829a9c9e40572c88aff6d727d2096d65d1aa8b3170f74a9d9284f103dc27ad865207fc7a26f7430d015fd1a3", &(0x7f0000000380)=@tcp=r4, 0x2}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x700, 0x0, 0x4, 0x8000000, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @empty, {[@end, @lsrr={0x83, 0xb, 0x6e, [@remote, @private=0xa010102]}, @rr={0x7, 0x7, 0xac, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x9, [{@loopback, 0xffff}]}, @rr={0x7, 0x1b, 0x18, [@local, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0x6]}, @noop]}}}}}) (async)

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x28, 0x1f, 0x1})

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TCSBRK(r0, 0x5409, 0xffffffff) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:21 executing program 0:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000080)=""/147)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) (async)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r2=>0x0, @ANYBLOB="800078000000000700000002463400580067000001049078e00000020a010100941101512b0559a1b1202e0b1cc895147694040000070c4435b774806323e5d732008212d12aa4c6992c38ff3e9efa496639aeaf4410e7da64d05607d18114d1671e4a3a"]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x1012, r1, 0x280000, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x4}, 0x48)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="52babd4c2b510e8bd2f83d3edca144603698d0a324a397c4ea5cf0ab5b126f82bb71fba0eef95cdbe95d37d724814c55f07575843ec1caf8f24132f13e5ff08f4c015b0df7be607f5349904be6b3583c74f1eed1f361684c87b62e545e1c2b24c2fff4e43baa3a412b9cf57570ee9a755eecda7fe49a452a5f80065290e4c9dfda4426d6f10cefb0d65f1d142c3aa25572b360a8829a9c9e40572c88aff6d727d2096d65d1aa8b3170f74a9d9284f103dc27ad865207fc7a26f7430d015fd1a3", &(0x7f0000000380)=@tcp=r4, 0x2}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x700, 0x0, 0x4, 0x8000000, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @empty, {[@end, @lsrr={0x83, 0xb, 0x6e, [@remote, @private=0xa010102]}, @rr={0x7, 0x7, 0xac, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x9, [{@loopback, 0xffff}]}, @rr={0x7, 0x1b, 0x18, [@local, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0x6]}, @noop]}}}}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl1\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800078000000000700000002463400580067000001049078e00000020a010100941101512b0559a1b1202e0b1cc895147694040000070c4435b774806323e5d732008212d12aa4c6992c38ff3e9efa496639aeaf4410e7da64d05607d18114d1671e4a3a"]}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x6, 0x3, 0x2, 0x1012, r1, 0x280000, '\x00', 0x0, r0, 0x2, 0x5, 0x0, 0x4}, 0x48) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="52babd4c2b510e8bd2f83d3edca144603698d0a324a397c4ea5cf0ab5b126f82bb71fba0eef95cdbe95d37d724814c55f07575843ec1caf8f24132f13e5ff08f4c015b0df7be607f5349904be6b3583c74f1eed1f361684c87b62e545e1c2b24c2fff4e43baa3a412b9cf57570ee9a755eecda7fe49a452a5f80065290e4c9dfda4426d6f10cefb0d65f1d142c3aa25572b360a8829a9c9e40572c88aff6d727d2096d65d1aa8b3170f74a9d9284f103dc27ad865207fc7a26f7430d015fd1a3", &(0x7f0000000380)=@tcp=r4, 0x2}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', r2, 0x700, 0x0, 0x4, 0x8000000, {{0x15, 0x4, 0x2, 0x3e, 0x54, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @empty, {[@end, @lsrr={0x83, 0xb, 0x6e, [@remote, @private=0xa010102]}, @rr={0x7, 0x7, 0xac, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x9, [{@loopback, 0xffff}]}, @rr={0x7, 0x1b, 0x18, [@local, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010102, @private=0x6]}, @noop]}}}}}) (async)

11:42:21 executing program 4:
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60020000000000001000000950000000000000018200000", @ANYRES32=r2, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r3]}, 0x80)
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000))

11:42:21 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x440000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="2314cf2f34")
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="cd4ddb4fe8aa29a2089e9129f402a2004c7996cc0644aa934b62b576a66a2c4c35616e034add464266d42900d4df7f102ea2fe6d958e65c443e84e0003ca59465ff9fa15f77c1a6f95aa9ed05579b6d2ae0dae143380ef44588177192ca8fd0f3d39c7d499c41c935d4034877152a1ad13a4b548dfbd0fa8e8ba4f8ea05a7fdb57932de1f4a684ea4d64abeb6ac5145d65d599825c20a5409c5f3a907640db009aec0332559ea3cdfaa889aafb", &(0x7f0000000180)=@buf="f7828545a3fe02ea99b18d331bc90941062553bbb729f6cf33753db3d972ce828e41f5becc3e4dc177ed36315614173e0450232f969da9e5bdf9d401a82010d37eccbd39c0e8fe2109d3a97f0e8308e975770721e130308751012e68d5102f60f239e180867cb92d67930b90d1b3c990248b94fd6db418d5e65ee55f58905e052039d36c04fe16417aff7f5338a26096e68880ff0f03"}, 0x20)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80000000, 0x55b, 0x7ff, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x3, 0x5, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x9, 0x40}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x69, 0xe, 0x4, 0x2, 0x9}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="9c3cf56e726c788fe446d4d424ceeff843ffee7641877ac0b9ed5a2ef1120f204f8a0ad2162a331f92a511d971388d2412e8c18dcc37c49b31f460b2cefee02cdee3a3ed189dda42bdc002e7e43d684f74c1f28eee295190b4e3a0d082d96a2a51a69025799849ee428e51ca5c7f23e4fcb4910d926d6908dc281b713564f3bb1a456ca34162160a8c4502b9d6e47ad8ca12f55ba3")

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400fe0295321b049a5bfcae0c54524f901542727e7edbd95386eb07f1c2e99a23c6a9979976a8f11a4951efb9447db122e9baad2a18b32ed48c6d017a513f67e1b024ac18ecea09db81b2dfb3a20dfb89beebcce0b949ee38d8a2405fd852fee5f9f5e7f7075f7b816e4d7804dc546ec32eecb645e773be7c92bc53f9665192153e98021f6d201895905cd4f62db5237dc9625b8a48b60b0a3eae01217157ebdd5ee782d756", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c000780080001000000000004000580"], 0x24}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "27011d1480244a975a56af3789e18a57bf0366dc3c42a2d082986570"}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6bd251}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010044}, 0x8800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=<r3=>0x0, @ANYBLOB="7800780000000002000065664b42006c006600000004907864010101e0000001940401008313b57f000001ac1e0101ac1414aae00000024414360000000005800000010000040100000009440cde43ac1414aa000000c3861f00000002070a333c0640b0158487050f8f7e8d192dc3f5bac038dead100000"]})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x6, 0x0, 0x9, 0x50, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x1c, r0, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0xc0, 0x400}, 0x10, 0x2167e, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0xa, 0x3, 0x0, 0x10}, @jmp={0x5, 0x0, 0x5, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x3, 0x0, 0xb, 0x1, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000440)=""/11, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x4, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80)

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x103082, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:21 executing program 4:
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60020000000000001000000950000000000000018200000", @ANYRES32=r2, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r3]}, 0x80) (async)
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000))

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

11:42:21 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x440000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="2314cf2f34")
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="cd4ddb4fe8aa29a2089e9129f402a2004c7996cc0644aa934b62b576a66a2c4c35616e034add464266d42900d4df7f102ea2fe6d958e65c443e84e0003ca59465ff9fa15f77c1a6f95aa9ed05579b6d2ae0dae143380ef44588177192ca8fd0f3d39c7d499c41c935d4034877152a1ad13a4b548dfbd0fa8e8ba4f8ea05a7fdb57932de1f4a684ea4d64abeb6ac5145d65d599825c20a5409c5f3a907640db009aec0332559ea3cdfaa889aafb", &(0x7f0000000180)=@buf="f7828545a3fe02ea99b18d331bc90941062553bbb729f6cf33753db3d972ce828e41f5becc3e4dc177ed36315614173e0450232f969da9e5bdf9d401a82010d37eccbd39c0e8fe2109d3a97f0e8308e975770721e130308751012e68d5102f60f239e180867cb92d67930b90d1b3c990248b94fd6db418d5e65ee55f58905e052039d36c04fe16417aff7f5338a26096e68880ff0f03"}, 0x20)
syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x440000) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="2314cf2f34") (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="cd4ddb4fe8aa29a2089e9129f402a2004c7996cc0644aa934b62b576a66a2c4c35616e034add464266d42900d4df7f102ea2fe6d958e65c443e84e0003ca59465ff9fa15f77c1a6f95aa9ed05579b6d2ae0dae143380ef44588177192ca8fd0f3d39c7d499c41c935d4034877152a1ad13a4b548dfbd0fa8e8ba4f8ea05a7fdb57932de1f4a684ea4d64abeb6ac5145d65d599825c20a5409c5f3a907640db009aec0332559ea3cdfaa889aafb", &(0x7f0000000180)=@buf="f7828545a3fe02ea99b18d331bc90941062553bbb729f6cf33753db3d972ce828e41f5becc3e4dc177ed36315614173e0450232f969da9e5bdf9d401a82010d37eccbd39c0e8fe2109d3a97f0e8308e975770721e130308751012e68d5102f60f239e180867cb92d67930b90d1b3c990248b94fd6db418d5e65ee55f58905e052039d36c04fe16417aff7f5338a26096e68880ff0f03"}, 0x20) (async)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400fe0295321b049a5bfcae0c54524f901542727e7edbd95386eb07f1c2e99a23c6a9979976a8f11a4951efb9447db122e9baad2a18b32ed48c6d017a513f67e1b024ac18ecea09db81b2dfb3a20dfb89beebcce0b949ee38d8a2405fd852fee5f9f5e7f7075f7b816e4d7804dc546ec32eecb645e773be7c92bc53f9665192153e98021f6d201895905cd4f62db5237dc9625b8a48b60b0a3eae01217157ebdd5ee782d756", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c000780080001000000000004000580"], 0x24}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "27011d1480244a975a56af3789e18a57bf0366dc3c42a2d082986570"}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6bd251}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010044}, 0x8800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=<r3=>0x0, @ANYBLOB="7800780000000002000065664b42006c006600000004907864010101e0000001940401008313b57f000001ac1e0101ac1414aae00000024414360000000005800000010000040100000009440cde43ac1414aa000000c3861f00000002070a333c0640b0158487050f8f7e8d192dc3f5bac038dead100000"]})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x6, 0x0, 0x9, 0x50, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x1c, r0, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0xc0, 0x400}, 0x10, 0x2167e, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0xa, 0x3, 0x0, 0x10}, @jmp={0x5, 0x0, 0x5, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x3, 0x0, 0xb, 0x1, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000440)=""/11, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x4, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400fe0295321b049a5bfcae0c54524f901542727e7edbd95386eb07f1c2e99a23c6a9979976a8f11a4951efb9447db122e9baad2a18b32ed48c6d017a513f67e1b024ac18ecea09db81b2dfb3a20dfb89beebcce0b949ee38d8a2405fd852fee5f9f5e7f7075f7b816e4d7804dc546ec32eecb645e773be7c92bc53f9665192153e98021f6d201895905cd4f62db5237dc9625b8a48b60b0a3eae01217157ebdd5ee782d756", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c000780080001000000000004000580"], 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "27011d1480244a975a56af3789e18a57bf0366dc3c42a2d082986570"}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6bd251}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010044}, 0x8800) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7800780000000002000065664b42006c006600000004907864010101e0000001940401008313b57f000001ac1e0101ac1414aae00000024414360000000005800000010000040100000009440cde43ac1414aa000000c3861f00000002070a333c0640b0158487050f8f7e8d192dc3f5bac038dead100000"]}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x6, 0x0, 0x9, 0x50, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x1c, r0, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0xc0, 0x400}, 0x10, 0x2167e, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0xa, 0x3, 0x0, 0x10}, @jmp={0x5, 0x0, 0x5, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x3, 0x0, 0xb, 0x1, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000440)=""/11, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x4, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80) (async)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80000000, 0x55b, 0x7ff, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x3, 0x5, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x9, 0x40}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x69, 0xe, 0x4, 0x2, 0x9}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="9c3cf56e726c788fe446d4d424ceeff843ffee7641877ac0b9ed5a2ef1120f204f8a0ad2162a331f92a511d971388d2412e8c18dcc37c49b31f460b2cefee02cdee3a3ed189dda42bdc002e7e43d684f74c1f28eee295190b4e3a0d082d96a2a51a69025799849ee428e51ca5c7f23e4fcb4910d926d6908dc281b713564f3bb1a456ca34162160a8c4502b9d6e47ad8ca12f55ba3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80000000, 0x55b, 0x7ff, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x3, 0x5, 0x2}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x9, 0x40}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x69, 0xe, 0x4, 0x2, 0x9}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="9c3cf56e726c788fe446d4d424ceeff843ffee7641877ac0b9ed5a2ef1120f204f8a0ad2162a331f92a511d971388d2412e8c18dcc37c49b31f460b2cefee02cdee3a3ed189dda42bdc002e7e43d684f74c1f28eee295190b4e3a0d082d96a2a51a69025799849ee428e51ca5c7f23e4fcb4910d926d6908dc281b713564f3bb1a456ca34162160a8c4502b9d6e47ad8ca12f55ba3") (async)

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x103082, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:21 executing program 4:
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fcdbdf251100000094000280080001000000f807080002000700000008000200001000004400038008000200ff030000080002000000010008000100050000000800010090cf000008000100ac640000080002003e000000080002000100000008000200070000000400040008000100fcffffff04000380080002000400000014000380080002003bb30000080001000600000008000100e80500001c00038008000100020000000800020005000000080002000180000014000980080001000000010008000100010001004800048014000780080004000300000008000100180000000c00078008000300080000002400078008000400018000000800010009000000080002004000000008000100150000002c000380080001000700000008000100401b000008000200080000000800020005000000080001000100008038000680080006000800000008000600040000000800060004000000080006000700000008000600020000000800010002000000040005002c000680040005000800060003000000080001000700000008000600040000000800010001800000040005007c000680230003001e0f11585f465dbc8c61e821796bbfaf02429447250d1299db2b95987f30ad0008000600010001000400020008000600fffbffff3200030037266c88ba912f186335321689fadda30742e8a9c6d61319330d2305a4922c67a470f18c44d867102eb99179afc00000080001004f1f0000040002000800028004000400"], 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60020000000000001000000950000000000000018200000", @ANYRES32=r2, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff, r3]}, 0x80) (async)
ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000))

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400fe0295321b049a5bfcae0c54524f901542727e7edbd95386eb07f1c2e99a23c6a9979976a8f11a4951efb9447db122e9baad2a18b32ed48c6d017a513f67e1b024ac18ecea09db81b2dfb3a20dfb89beebcce0b949ee38d8a2405fd852fee5f9f5e7f7075f7b816e4d7804dc546ec32eecb645e773be7c92bc53f9665192153e98021f6d201895905cd4f62db5237dc9625b8a48b60b0a3eae01217157ebdd5ee782d756", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c000780080001000000000004000580"], 0x24}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "27011d1480244a975a56af3789e18a57bf0366dc3c42a2d082986570"}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6bd251}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010044}, 0x8800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=<r3=>0x0, @ANYBLOB="7800780000000002000065664b42006c006600000004907864010101e0000001940401008313b57f000001ac1e0101ac1414aae00000024414360000000005800000010000040100000009440cde43ac1414aa000000c3861f00000002070a333c0640b0158487050f8f7e8d192dc3f5bac038dead100000"]})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x6, 0x0, 0x9, 0x50, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x1c, r0, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0xc0, 0x400}, 0x10, 0x2167e, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0xa, 0x3, 0x0, 0x10}, @jmp={0x5, 0x0, 0x5, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x3, 0x0, 0xb, 0x1, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000440)=""/11, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x4, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400fe0295321b049a5bfcae0c54524f901542727e7edbd95386eb07f1c2e99a23c6a9979976a8f11a4951efb9447db122e9baad2a18b32ed48c6d017a513f67e1b024ac18ecea09db81b2dfb3a20dfb89beebcce0b949ee38d8a2405fd852fee5f9f5e7f7075f7b816e4d7804dc546ec32eecb645e773be7c92bc53f9665192153e98021f6d201895905cd4f62db5237dc9625b8a48b60b0a3eae01217157ebdd5ee782d756", @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c000780080001000000000004000580"], 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "27011d1480244a975a56af3789e18a57bf0366dc3c42a2d082986570"}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c6bd251}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x20}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xcf}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan1\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x60}, 0x1, 0x0, 0x0, 0x20010044}, 0x8800) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="677265300000000000000000000000008a43428f47ca8887616097a53e4917c09909664fea0c94b679cba5e7e7f7f94f596b8c976f69f1e8f0492c09a9d6cc7d287f5c7f2bc04e6b04d02385a10e8a213e332015e48c75f9b3766cecb18a985bd7f0cb025c0f5409fa55597b3e7304e59cd3b23adbb0977359aabffa23cab4ca4d71bdebbab88a3ceb8b5ac042cde91ad747ea9ea8243cdc4c151800082d97f7c8a14f91eca19d5110372eedc150eaf36a406044ab3108123595fbec0b870e705f5c07d7396e7ea22533f973fb89efac1e157f849066119630f9e6f4e4e4c1c8bc632f62010e7d73e5c536b4d44c10e6cdea4330babf4506b5fcae2e9c58a364b3a21a6c7f079a1c54e97f0be4a5409934604ffdcb88525a7a83c9c2e8af92340479e2", @ANYRES32=0x0, @ANYBLOB="7800780000000002000065664b42006c006600000004907864010101e0000001940401008313b57f000001ac1e0101ac1414aae00000024414360000000005800000010000040100000009440cde43ac1414aa000000c3861f00000002070a333c0640b0158487050f8f7e8d192dc3f5bac038dead100000"]}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x6, 0x0, 0x9, 0x50, 0x10}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', r3, 0x1c, r0, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x1, 0xc0, 0x400}, 0x10, 0x2167e, r0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r4]}, 0x80) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x8, 0x0, 0x5, 0xffffffffffffffe0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0xa, 0x3, 0x0, 0x10}, @jmp={0x5, 0x0, 0x5, 0x5, 0x5, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x3, 0x0, 0xb, 0x1, 0x4}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x8, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0xb, &(0x7f0000000440)=""/11, 0x41100, 0x12, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x4, 0x7, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)}, 0x80) (async)

11:42:21 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x440000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="2314cf2f34") (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="cd4ddb4fe8aa29a2089e9129f402a2004c7996cc0644aa934b62b576a66a2c4c35616e034add464266d42900d4df7f102ea2fe6d958e65c443e84e0003ca59465ff9fa15f77c1a6f95aa9ed05579b6d2ae0dae143380ef44588177192ca8fd0f3d39c7d499c41c935d4034877152a1ad13a4b548dfbd0fa8e8ba4f8ea05a7fdb57932de1f4a684ea4d64abeb6ac5145d65d599825c20a5409c5f3a907640db009aec0332559ea3cdfaa889aafb", &(0x7f0000000180)=@buf="f7828545a3fe02ea99b18d331bc90941062553bbb729f6cf33753db3d972ce828e41f5becc3e4dc177ed36315614173e0450232f969da9e5bdf9d401a82010d37eccbd39c0e8fe2109d3a97f0e8308e975770721e130308751012e68d5102f60f239e180867cb92d67930b90d1b3c990248b94fd6db418d5e65ee55f58905e052039d36c04fe16417aff7f5338a26096e68880ff0f03"}, 0x20)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x80000000, 0x55b, 0x7ff, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1, 0x3, 0x5, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x6, 0x9, 0x40}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x69, 0xe, 0x4, 0x2, 0x9}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x0, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)="9c3cf56e726c788fe446d4d424ceeff843ffee7641877ac0b9ed5a2ef1120f204f8a0ad2162a331f92a511d971388d2412e8c18dcc37c49b31f460b2cefee02cdee3a3ed189dda42bdc002e7e43d684f74c1f28eee295190b4e3a0d082d96a2a51a69025799849ee428e51ca5c7f23e4fcb4910d926d6908dc281b713564f3bb1a456ca34162160a8c4502b9d6e47ad8ca12f55ba3")

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x103082, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = getpgid(0x0)
syz_open_procfs$namespace(r0, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)

11:42:21 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x752)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d6000000000000000100000018270000", @ANYRES32=r1, @ANYBLOB="00007501f0fffdffffff7f308080000000009500002000"/32], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0f91f86c52cd437af2d1b01d96814261b193b1e6bfac936903c7b58780ea0b096554357aaa3ad662ead61a2ed17e75045580c1b2ddca8c362")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendto$llc(r1, &(0x7f0000000040)="dda410d3f1dfe95a7d8c9beb19d079", 0xf, 0x58, &(0x7f0000000080)={0x1a, 0x320, 0x7, 0xff, 0x7, 0x5b}, 0x10)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) (async)

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffff5c4e741b6b79ac700000000e0000002000000000000000000000000ac1414bb0000000000000000000000007f000001000000000000000000000000ac1414aa000000000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414000000000000000000000000003b31aaa6b33ea8dfa15e48f71cc5d123841e5ea0cc926e4b"]})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffff000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x26001000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="3f595a4d9de4a5858372115dbe000cbc1f6415910eb681eeaf0b711fc6062f4c4adca682aa474d88f4ee87558833059d0ddabc70776b72021602d34bd404966c753da21ebd02cf9b65fb6288e9828ac2c87864a2f5eb8c02dcc2fa687c31e695eff035c3019e3b0a062f20c2f73756480af435e19a801c9a0e43d78f6451417e0127e19081aeec05a03180e36981b5d06d838c")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000d6000000000000000100001095200000b245d18bbf4a14f654dc6f731aa932b84b2f5795209e3277f5aca78d91cde7951072c8eb771edfde82da9a25cbc7b4839cc0da4ec2a29795c064aebef4d60096141110c51f27628720f02e8bae70d44c1f4669b5af24d062014dd7fafda11583683dbf2c745dd781fe72cb0000000000000000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="a030")

11:42:21 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)

11:42:21 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x752)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d6000000000000000100000018270000", @ANYRES32=r1, @ANYBLOB="00007501f0fffdffffff7f308080000000009500002000"/32], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0f91f86c52cd437af2d1b01d96814261b193b1e6bfac936903c7b58780ea0b096554357aaa3ad662ead61a2ed17e75045580c1b2ddca8c362")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000d6000000000000000100001095200000b245d18bbf4a14f654dc6f731aa932b84b2f5795209e3277f5aca78d91cde7951072c8eb771edfde82da9a25cbc7b4839cc0da4ec2a29795c064aebef4d60096141110c51f27628720f02e8bae70d44c1f4669b5af24d062014dd7fafda11583683dbf2c745dd781fe72cb0000000000000000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (rerun: 64)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="a030")

11:42:21 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendto$llc(r1, &(0x7f0000000040)="dda410d3f1dfe95a7d8c9beb19d079", 0xf, 0x58, &(0x7f0000000080)={0x1a, 0x320, 0x7, 0xff, 0x7, 0x5b}, 0x10)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffff5c4e741b6b79ac700000000e0000002000000000000000000000000ac1414bb0000000000000000000000007f000001000000000000000000000000ac1414aa000000000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414000000000000000000000000003b31aaa6b33ea8dfa15e48f71cc5d123841e5ea0cc926e4b"]})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffff000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x26001000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="3f595a4d9de4a5858372115dbe000cbc1f6415910eb681eeaf0b711fc6062f4c4adca682aa474d88f4ee87558833059d0ddabc70776b72021602d34bd404966c753da21ebd02cf9b65fb6288e9828ac2c87864a2f5eb8c02dcc2fa687c31e695eff035c3019e3b0a062f20c2f73756480af435e19a801c9a0e43d78f6451417e0127e19081aeec05a03180e36981b5d06d838c")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffff5c4e741b6b79ac700000000e0000002000000000000000000000000ac1414bb0000000000000000000000007f000001000000000000000000000000ac1414aa000000000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414000000000000000000000000003b31aaa6b33ea8dfa15e48f71cc5d123841e5ea0cc926e4b"]}) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffff000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x26001000) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) (async)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="3f595a4d9de4a5858372115dbe000cbc1f6415910eb681eeaf0b711fc6062f4c4adca682aa474d88f4ee87558833059d0ddabc70776b72021602d34bd404966c753da21ebd02cf9b65fb6288e9828ac2c87864a2f5eb8c02dcc2fa687c31e695eff035c3019e3b0a062f20c2f73756480af435e19a801c9a0e43d78f6451417e0127e19081aeec05a03180e36981b5d06d838c") (async)

11:42:21 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x752) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d6000000000000000100000018270000", @ANYRES32=r1, @ANYBLOB="00007501f0fffdffffff7f308080000000009500002000"/32], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0f91f86c52cd437af2d1b01d96814261b193b1e6bfac936903c7b58780ea0b096554357aaa3ad662ead61a2ed17e75045580c1b2ddca8c362")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000d6000000000000000100001095200000b245d18bbf4a14f654dc6f731aa932b84b2f5795209e3277f5aca78d91cde7951072c8eb771edfde82da9a25cbc7b4839cc0da4ec2a29795c064aebef4d60096141110c51f27628720f02e8bae70d44c1f4669b5af24d062014dd7fafda11583683dbf2c745dd781fe72cb0000000000000000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="a030")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000d6000000000000000100001095200000b245d18bbf4a14f654dc6f731aa932b84b2f5795209e3277f5aca78d91cde7951072c8eb771edfde82da9a25cbc7b4839cc0da4ec2a29795c064aebef4d60096141110c51f27628720f02e8bae70d44c1f4669b5af24d062014dd7fafda11583683dbf2c745dd781fe72cb0000000000000000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="a030") (async)

11:42:21 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x124, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e2e88700bfb6041798c306756c3a8710158ed74761e21a4ac17dd1f350"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe05}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "44ed09562782d5c1d9a61268dbfb4738c523eca180"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
sendto$llc(r1, &(0x7f0000000040)="dda410d3f1dfe95a7d8c9beb19d079", 0xf, 0x58, &(0x7f0000000080)={0x1a, 0x320, 0x7, 0xff, 0x7, 0x5b}, 0x10)

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'none'}, 0xa) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffff5c4e741b6b79ac700000000e0000002000000000000000000000000ac1414bb0000000000000000000000007f000001000000000000000000000000ac1414aa000000000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000e0000002000000000000000000000000ac1414000000000000000000000000003b31aaa6b33ea8dfa15e48f71cc5d123841e5ea0cc926e4b"]}) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffff000}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x26001000) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) (async)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="3f595a4d9de4a5858372115dbe000cbc1f6415910eb681eeaf0b711fc6062f4c4adca682aa474d88f4ee87558833059d0ddabc70776b72021602d34bd404966c753da21ebd02cf9b65fb6288e9828ac2c87864a2f5eb8c02dcc2fa687c31e695eff035c3019e3b0a062f20c2f73756480af435e19a801c9a0e43d78f6451417e0127e19081aeec05a03180e36981b5d06d838c")

11:42:21 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 2:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x141300, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0x20, &(0x7f0000000080)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d60000000000000001007fec53527ac30000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x3, 0x8})
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x124, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e2e88700bfb6041798c306756c3a8710158ed74761e21a4ac17dd1f350"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe05}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "44ed09562782d5c1d9a61268dbfb4738c523eca180"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'gretap0\x00'}}, 0x1e)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:21 executing program 5:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a01, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:21 executing program 2:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x141300, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0x20, &(0x7f0000000080)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d60000000000000001007fec53527ac30000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x3, 0x8})
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'gretap0\x00'}}, 0x1e) (async)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'gretap0\x00'}}, 0x1e)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:21 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x124, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e2e88700bfb6041798c306756c3a8710158ed74761e21a4ac17dd1f350"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe05}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "44ed09562782d5c1d9a61268dbfb4738c523eca180"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:21 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dd841, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="71ff000e604451f2fca62d08a5eb4f56e0daafd213fe26f551ce5b8706af725804557c62b6237f2d937fb659bd181026849dd841940883ab4b1886d70afe40e45eb379acdded54114766fb9060a2c9ade01b2a27828e29e505bc710aa8")

11:42:21 executing program 2:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x141300, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0x20, &(0x7f0000000080)={&(0x7f00000009c0)=""/4096, 0x1000, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000d60000000000000001007fec53527ac30000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) (async)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x3, 0x8}) (async)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'gretap0\x00'}}, 0x1e) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="0f3ce3")
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0x4b, 0x81800)

11:42:21 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dd841, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="71ff000e604451f2fca62d08a5eb4f56e0daafd213fe26f551ce5b8706af725804557c62b6237f2d937fb659bd181026849dd841940883ab4b1886d70afe40e45eb379acdded54114766fb9060a2c9ade01b2a27828e29e505bc710aa8")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dd841, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="71ff000e604451f2fca62d08a5eb4f56e0daafd213fe26f551ce5b8706af725804557c62b6237f2d937fb659bd181026849dd841940883ab4b1886d70afe40e45eb379acdded54114766fb9060a2c9ade01b2a27828e29e505bc710aa8") (async)

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d600000000000000c910b78c00d61294ae45aa14ccca0967bf47cfd3cbd225eb195035ecd96c25b07b58778182cc43126f0094e9a05deff3d88291e787d20f7502ca8ce286e429de2b740958616d368eca2b2605508263726d107b5e3cf5dc6ab6cd5c66ac9103db9261abdaced466ff22505e8f45fdadec98598d74b2d3e96cd246fffcdc48817fc62402be0408eca0a426d5e100"/166, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="739b1642d629372e44da6d090b")

11:42:21 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a01, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="da9c5e9dfb6d0000000000")

11:42:21 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5dd841, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="71ff000e604451f2fca62d08a5eb4f56e0daafd213fe26f551ce5b8706af725804557c62b6237f2d937fb659bd181026849dd841940883ab4b1886d70afe40e45eb379acdded54114766fb9060a2c9ade01b2a27828e29e505bc710aa8")

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="0f3ce3") (async)
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0x4b, 0x81800)

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60008000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000))

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d600000000000000c910b78c00d61294ae45aa14ccca0967bf47cfd3cbd225eb195035ecd96c25b07b58778182cc43126f0094e9a05deff3d88291e787d20f7502ca8ce286e429de2b740958616d368eca2b2605508263726d107b5e3cf5dc6ab6cd5c66ac9103db9261abdaced466ff22505e8f45fdadec98598d74b2d3e96cd246fffcdc48817fc62402be0408eca0a426d5e100"/166, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="739b1642d629372e44da6d090b")

11:42:21 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60008000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (rerun: 64)

11:42:21 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc5aa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa6, 0x3, "92713ba0da003e710c2582db3a48860ba8ecc8ba87315a6539f4c1f395ba9bea83cfdb7c205ce7a8e5e9815868261806a6374ac032f16b8ff6636201c8ec8f37c589d4f659f1e42d879384ed11be4f1dd7f089d78ac126d92c30cf1983725f8505361e484de41aea03094772f107e8e70fe6cc8adfbcaa4cfe4865dfea8eb8d7cb62719b9011d0b03ba67c856d486581b579bee07a0cbe732c258a01721af3e0edf8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5d, 0x3, "be1cca402034151a288056ba2f8a6e5caa776f02fa0ce8e6226e7b72fea4110c121d67d50818968185baeda5dc9a400aa9fbb646ab3e198975b3da15ba58776d2a0e894b8ac4149e8257a2bf3bcf0b02d7fc66d63fc2b71f79"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x284}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000040)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040041)

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="0f3ce3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="0f3ce3")
accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0x4b, 0x81800)

11:42:21 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="da9c5e9dfb6d0000000000")

11:42:21 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d600000000000000c910b78c00d61294ae45aa14ccca0967bf47cfd3cbd225eb195035ecd96c25b07b58778182cc43126f0094e9a05deff3d88291e787d20f7502ca8ce286e429de2b740958616d368eca2b2605508263726d107b5e3cf5dc6ab6cd5c66ac9103db9261abdaced466ff22505e8f45fdadec98598d74b2d3e96cd246fffcdc48817fc62402be0408eca0a426d5e100"/166, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="739b1642d629372e44da6d090b")

11:42:21 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0acaab098e34e9813f98d9e648994191d9446f9d4b1cd5a82132106c5d66b00418148db89881d7bed88ca61819bbcd41a42c1f3")
socketpair(0x26, 0x6, 0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a01, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc5aa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa6, 0x3, "92713ba0da003e710c2582db3a48860ba8ecc8ba87315a6539f4c1f395ba9bea83cfdb7c205ce7a8e5e9815868261806a6374ac032f16b8ff6636201c8ec8f37c589d4f659f1e42d879384ed11be4f1dd7f089d78ac126d92c30cf1983725f8505361e484de41aea03094772f107e8e70fe6cc8adfbcaa4cfe4865dfea8eb8d7cb62719b9011d0b03ba67c856d486581b579bee07a0cbe732c258a01721af3e0edf8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5d, 0x3, "be1cca402034151a288056ba2f8a6e5caa776f02fa0ce8e6226e7b72fea4110c121d67d50818968185baeda5dc9a400aa9fbb646ab3e198975b3da15ba58776d2a0e894b8ac4149e8257a2bf3bcf0b02d7fc66d63fc2b71f79"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x284}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000040) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040041)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="da9c5e9dfb6d0000000000")

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60008000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) (rerun: 64)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0acaab098e34e9813f98d9e648994191d9446f9d4b1cd5a82132106c5d66b00418148db89881d7bed88ca61819bbcd41a42c1f3") (async)
socketpair(0x26, 0x6, 0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x545b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44f83bdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdde842e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'perf_event'}]}, 0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)={'team0\x00'})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d0, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc5aa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa6, 0x3, "92713ba0da003e710c2582db3a48860ba8ecc8ba87315a6539f4c1f395ba9bea83cfdb7c205ce7a8e5e9815868261806a6374ac032f16b8ff6636201c8ec8f37c589d4f659f1e42d879384ed11be4f1dd7f089d78ac126d92c30cf1983725f8505361e484de41aea03094772f107e8e70fe6cc8adfbcaa4cfe4865dfea8eb8d7cb62719b9011d0b03ba67c856d486581b579bee07a0cbe732c258a01721af3e0edf8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5d, 0x3, "be1cca402034151a288056ba2f8a6e5caa776f02fa0ce8e6226e7b72fea4110c121d67d50818968185baeda5dc9a400aa9fbb646ab3e198975b3da15ba58776d2a0e894b8ac4149e8257a2bf3bcf0b02d7fc66d63fc2b71f79"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x284}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000040) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040041)

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x545b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44f83bdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdde842e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) (async)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'perf_event'}]}, 0xc) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)={'team0\x00'}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbb, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3c18}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x70a, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x150}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x944c}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11791f93}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000050}, 0x22040817)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="d8d0acaab098e34e9813f98d9e648994191d9446f9d4b1cd5a82132106c5d66b00418148db89881d7bed88ca61819bbcd41a42c1f3") (async)
socketpair(0x26, 0x6, 0x1, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24000006)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x8}, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbb, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3c18}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x70a, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x150}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x944c}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11791f93}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000050}, 0x22040817)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbb, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3c18}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x70a, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x150}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x944c}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11791f93}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000050}, 0x22040817) (async)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x545b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44f83bdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdde842e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'perf_event'}]}, 0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)={'team0\x00'})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x545b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44f83bdf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdde842e6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) (async)
pipe2$watch_queue(&(0x7f0000000280), 0x80) (async)
write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'perf_event'}]}, 0xc) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)={'team0\x00'}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x638081, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x638081, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x8}, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x8}, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x410800, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1d8, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xbb, @empty, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3c18}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x70a, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x150}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff5a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x944c}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11791f93}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000050}, 0x22040817)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x8}, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x8}, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x638081, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 0:
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24000006) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x5c}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001680)=ANY=[@ANYBLOB="70130000", @ANYRES16=r3, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x4850}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x20, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0xb4, 0x3ff}})
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xae}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 0:
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080)) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x5c}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001680)=ANY=[@ANYBLOB="70130000", @ANYRES16=r3, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x4850}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x20, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0xb4, 0x3ff}})
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xae}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x5c}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001680)=ANY=[@ANYBLOB="70130000", @ANYRES16=r3, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x20, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0xb4, 0x3ff}}) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xae}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 0:
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000080))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x210042, 0x0)

11:42:22 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24000006) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x5c}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001680)=ANY=[@ANYBLOB="70130000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fedbdf250a000000400001801400028008000300000200000800030003000000140002800800010018000000080003000100000008000300060000000c00028008000400ff0f00001811068008000600000000004c00040067636d2861657329000000000000000000000000000000000000000000000000240000005c39a5be98b822f2b831ef622269d7dbaad96e4e62d6eb4ca6f82730b50f18200c0dde11570003006b7600e5d8e4496fe9f3e8e2898ef2baff3a70ec4b6c9ac763ffb185b9c6700fd9892572663ebd9477cb9442e1440dc76b1116bf8cc62a230b06b68679e9d93d7ca6c7f873fc6a901e1917ee1e064321e12ddd0004100300089d6686438a56640d5b7afddec51210df9e8fb9df3f1c5e7c352287d3df05c29923e198eb71674ce59d64014ade94756db523136948d5b3029c717af3579af0844fd460d0a27c9c7d623177fa5024c33eb53b71367e189bd6b62b3c61def3737324c8c067e390f457a632c4cf0475c0156a2516ec44f1cd89d3701ded9af9190fb695ce485fcc78865fbcce7a53b4e163ae15e24a157f7c68da97b25ee5e440bc94667f4ac635e000bdeb81ba54f4cfe02fc957cca6d42ae4702016b8183baadbe4179f43be43ccffcf85cd7b4c4f3c24aecae90499dacdb2cbc85c112c5b7644ba9d5b85d3f8c5a633a9c76cbfea5482af9efa79aa9b60d168c20766f96e36ee47ad4231262247ef2e6d6272a140077cc6616a70999f824c336ae60e1dfdb9e74a427a5221fb62cb297dad923b411f691fca254ddb59bce3ed540057c7832126b7e23338555995d771d0086e1576d56e28aefe113d4c024ce589c8f94291c0cb90ce770490eb7f21ae81126dd852c2e1a0cb9a767d5afc59eb414aaf1d88e272171d7e85b672221feff7e4e79ee967337410383727fe528a661731f152ea736cee492f4a2a1ec2c973675aea0cc6ec623020970f15f482537cf9a07ff41a1944cc7c27f5f47e477fc0ce0a4c9624051aaae3a7edc59d838ab548a31a482ab5f20ed4dcd1bca236883cf01ba2a407eb9baad91aa6e9027efa287ab54ccad47a9dfb1bb4e5fe40cc151261b640a750d6e2623090cbc018dc47299e5aaddf3b086a7b77e7233609af5cd659dc4d4dda9130b3de855b962fc3cddd3f3d395866642b70d6509e37b496388ab44c745331143f40ced0513e987b77044e4f9ad5b3889077c5148555c8a267594004c6d708a3d1ab2e5e31e4cf07dd9de3a39a41b857857bc4ad3262eec1483f89a54cf9fb1d58e0cd4091eefe48d5228b695fdbf58457b8c3e49907ca7aee08c849a9eba30f37aaa384a080a8365da02a92964bebba5fd555e95876f88476aa222c644ef990d95a37a13ee138701408933e2739311d1f29617975352469fb10140471959bdf9656bce9bf1bd121b3f11787ce0189eb2b573e409af0af375efbe66537061ec94a7e2ae40bb1a515f6f98281cdf9c08b81bd4647300f7e5ca846f92327292b8a458e2a42d128cfe47c0fa121395f793508756e7be0e06927887411e904a61850b8ae1f744a17e150f709f27753db4ca05bed8200f7738587a9e466c0f0dbdc304ff2e136ae25d714d6d1404f21c491efed132581802d469b315b4a76dfdb6121774fa111898c1ed2ae9c3fe06dcf1a22d43b130595eb84d5b9a62bf97fd5b064ad05b6d522e50a166078d1c28b3aac6f9f0622a8158c00cae4deb3976be90ecc5a2b6fcb67b2735270b7f4d149ec316ba8f7d9bd57b003585f0ced7bdc11a165912f6298a07487afcf134205575b0908cddf850614dddd9b951a4c019495eeeb1c4cef4d558e7202b3589c665a51206396c6a51fd989f925d5c504cf18f1feda366465340dcd920811f0e9146c52df1e981a6bfbfe735e58216c2b44c6414a14dfe1901465e25e645002295db3d921b64bd46205738be4f66259c0331fa4b12e028b7d4ec01050ccb0483e149f2be446acc6da056cb8d433eb2fae8d9dfb56c2a3cc988117aff01479709883cf45408c924da03f483e23575d63e9b4339fe35962a30b64432e67fbda08f5c5cf335e41db731a3c2aea88716fa17c989993dd7d1ace65538de594dd67c8824dd9234193481ed9a22d5673bc91f95d41ca45098a4b75376aac56f9d97beb754d56d296f91d5514fba06aef76b8985cebf1fa6b40b271642687bd133b3cbfade34d7f4f4dc1713548c44d13e8add68400b553e2fabecd67e40111f90d2e69032c094a0f1d0498dddb6932378d1925f55aa90731757455042a17d095114a38f4f9464f2c756c1e212a041519bd5f36686064d2a26b3475b86db719a0daf0e4db8d2cdf3032ec49d3ad5d3e6cf913aa6b663dcbb629d5d608ac2d3c9c50428d51e7ec17315e371148786181d679888a5a9d2ae795f93bb2c2ea572a8e1b6150da3c8f7f3f3f47e5a303d8c9b510e040c9e5a1ab63ad349d5c2b83cb90404fe580d381c538b13e62293a45b8e3e930622e4c282259d1daca10e567dec55e7acd56302bb380a6e5f422073643ffd42a37e1ab804fee8a5ae7269e6a0a46d41a79b28787f81aef5718cc5b4caa79313d9cfb38a0839fa2a7ceede6bf8af1978abf94056a591a1be4e03dabb0a04d67317e4ff1e207a05c2b4db6b210ff55fa5c1808f56c2a2c963a888f343b49c15c6c76b97617cd15fc9cc3b285353831da9591f7b03e76a0f4b4f47f2bba6697517de17bef477de9fdbed7b81cea4f4441d207208b94bdbd6dd21728362b1140c726ad5bc0e5267cb2e70e764b9de1cd9db736763b20f0742183fae140ae41cbc4336413289666591e55691185f20f740fc215813535eb8df03d8e99b3ed269729c2679571e8fa36d1350ea769c7d705832979a051a3868542860d69f43fca82d0c3bdfbbd2c06bb766cb427814911b619105521691cf0f06a23f47a031b84d9ab28a75f4665efc19c3c303c0def94c952d36bf26ff4327dfce37213f7700bff280236158edfe6448f683bb2d3a4cdf66263d2e93f679aa0fd481d4721f3c371ba21e4d61b30a8ead9798707df82fcbaf7a530c4cc5ec5a399fd5117957ff30699be96a3f1bd6ce0a321bd3e8e49beff752ce613b37d60a3df5868dfea925fa4486ce9d8b59ddef5b267186755ac982f62f12ac2757d455de4124ce018b6d157860b6e4f171611d54faeb0d911739a8a9f7291a27f21a910c5859334c7afc8e57cbbf0511d857878dfd829a5ca112438e0a123e96bea7084906e60f53d630289c86e81a32f6c04d6607f158da83486af26d49b86b1ce0c46845b0d608b2e7ecf5fe2715621c75fa0e108801ffdcfacc52991a97be00c9ea100fe656b81c5d37ef9b502b71b914e0457c7f4577ad6356a79f6586741415f8c29848b42e916a3a22199447d6a8e5525fbe46ebbb22c39978b34d36c5e144b9741f246e35389fb2df894a0686550fe674b68ea37d61f708a9058539c0e4ad788c4845e69ee2f962630f47cd7f5ba1dbdce2c0f1bf0e9e85a016174de44e0c9752f3af74da29e6ef59bd9aaa0da429342f9a8c5d11551e8abec18031e8d8db60689432edb93770aeb0780ed80eafd0ba7ce9d3db01f16f309b784db7ce6da43e54af70160d1db52eb5e8dfce4ce9266226b9fe4ab921e30a041fee4bcc41fe1255a5a60563cea004ae38ae7c41c17282a9ced6d93529aa38d927464a78b0c5550dd6fa1330c2467d58790261b63da426fd70ea6cf3259cb56a87356545aa117908a6531e8964458062d37f1169347fcd5f8deac0d8cfbccbdb376bbad9a5a7fbf48ef5f72d73705e5c033931ad14ed6e8d4722e54d3e8524e0163860f5d97cdfb4abd7be2a8e11f988dc76ee17bf48f67f10037320dbc25f88902ddbb3f905a1a05ec74310eb35ba27be538900fedcaa3efb742d6cf9e59659acc9e77ff9fe62d3f4abf5a500957816a83bcf4dcfa6d5a274781bc2452778018ee93a1fd4aa0ebff367d28427ebb3c76a15c911ac4cff54d635e570d690bb4dd8850716214ef4b35b87ffd626475b7abaf4efcd3d5f430d40a3471c9d6759fbd742d67e6c628edaf2f2234431a801f4982c6812d0385352907146b45315c4777ab799205d45ed3dd3703e33335e394c5291785c15e7778109ff3da1d1df37fdac9bea2e59f8e8131063e383c0aca2ca025cddc75f9fa60c8c90f5c4183fc2f7669af73266fefd6e63addb01aa6674c03031ba2a1ab9b25c23e15f5b9de4c998ee52eaf22da81b9ec7d422048b15f4791cd7f474a94b655ff73a7265d484be6d64e5196a55b850c96359a965fcbcc52f93b3503c7fd0731952a82957ac093e8dabd1fcb3fb48232de85b070ebbb78a77495c6895b1b076f170e526d122bd8bc9deb80a071e43aff3044b100f57b5fa68d88292bb4f556e9f3fb89954f4a0f62d0aecedc898adb7e7302e6c8e9d4c27c20abf41765f16df68aeddf414a372437a325ffac5b70e9d02c2a68e547971cbbd4739048246cf6ca72c2e2960264d52493aae6dba5a284d2d271f52fc41d67d70ac28edaba0dca2a6f9e9990d2df975da004cc58e9cb4ad8cf69fc1c81a85984bf9c84124d69dfc6e58d0a1009e5fd10bf59587643b83c258af327ac3a12e479d180fcc2f71fb07a97998ace1b156e12bd4c7b1aa1c954fe2d0b1a6a6923e47b43597fc4896e7fb21acdb6804a939a95f852ef100c2b779a5920af489e9bbfce1c733215b7be2d10b401aa51500519b6360d5b8c4060206dce53a2d57b908e3c8729b7731b819f4fe1fa732b0028cb9a229534b256d99ea6cb7ae68ca2abd6f7e402c5f5be0b1b6054db6bb44cf26205dc6d2d071622c005739bd900b619712b6637348a81754f524cfa4425e5f25c14b82c82f2bf44fa781b80d4e1a6bab09ad259dc07e2bf0639bd244b372a74a1e2fa7a5a91d2ddab52fee1e06785f95c6e0073dfe4d4414ddeefd030392f8ae7ac3dbdfde9713d45ed7ac23ad7df19d5bb304dc57dcd44c92e91bf438f23e26285a0e280d5d1c6d9e6410f388a29f0139c291cc855ba27025a92a374c9dd9093d4522a945c75a314e7ff1ed1d122ec3e36babb910406c509c334e806def8c175418709f07536006f8d5745cf2a809b99cf0c358003b29ea86b54a4a2f46c21eb13491d5f52097b4d6ba2db35a82fc725d2cbb7bfb748d09a328ea5370657e260592ac3887666aac69408c870313da70d6a75f47c7f74284e99c2108659a128fdab2b967ce58b77f1aef9da836d509ae8b3feac270b870f8f0adbeb2fa3bd30448c18465bc3d0cc93c9b6ddd0404f8f660ed985683ad31d14d08aa206df13e16a463e2c9d47c91bd96a99c444c08154f7dd76af7fe07f74a11a110d6c20b284bc598d03bebaad926131059b82d169def02cb00f801a65a4a57043e21304e312bb5e74f985c4713cd05bde5240f9dc2bf9729a38b79e6c7f8911f7bf772a4866a47b5c44afb8b140d7ee3d056903a0efe026bb1ea37b445115dd9f15924a443a64eece529366811001d5776e0f0b17519c2f6cc8e2e9c0892d6739585c803bca5c1e24bac8cce2c06bf3533eeed6a117b07ccc5dd9403493ba7b96b21ac136565e4377d180bce095951ced64e601ea2f6585d5e20997662ac7d3a86c0683961c340a49325f7de525b55a84c178d24e9427288fde3b1aceeb2de8a421911c32b195427b078c7e5c9323876b64a3bdf9850cd07d72b71fbd186e2564ddea29b2de68af0af9a23f2579ecbc9be6ef13da631e8fb26a0ba17ab3cc1f5650d3ac450ac1eaa70aa153f711f7a452234999fe4081bcd154dd5a05bf1abf0c8c86af83c3d8362f982129dbb26c04d4319657431d22d5c821c27dfd7b6e69ae80948ce5037481083bf374411d3757edd79fbc3b58d78e0b96a74e8e846a9479ec38ec9caa25ef590025578dd4702c850a2a7f6c7a0016d9b6bfce92ec849fdb591ce69717583785bdd20f40a32012c165dcb35cd0256a79f8d4335a8800e9c18f585223d542aea235341312b49669afde15354abbee00c209e9a74e7f574400bbc7d0b4aeed52ec1754a1c4957f35b01552cec4401c0a37f88600a6aa2ce598f1be44e5f6313766fa584297aec767ffe84b3ac49a92675b3105294eb483c7a8ca89040002004600040067636d28616573290000000000000000000000000000000000000000000000001e00000091223cac199a6f104474710be1824758025d7a6886c0e86f9ca776de29b300000400020008000600090000000800010004000000040005006400058008000100657468000c00028008000400080000001c0002800800030000040000080001000200000008000200010001000c00028008000200010000001400028008000300000800000800010014000000070001006962000008000100756470008800028024000380080001000002000008000200ffffffff080001000600000008000100090000002c00038008000200020000000800020007000000080002007f000000080002000700000008000200060000003400038008000200ff000000080002000400000008000200ff0100000800010002000000080002000000004008000200ffffffff240005800800010065746800080001007564700008000100756470000800010075647000a8000180380004001400010002004e24ac1414400000000000000000200002000a004e2100000000ff0200000000000000000000000000015a0e00003400028008000200050000000800010009000000080001000f0000000800020003000000080001001e000000080002000010000038000400200001000a004e2400000002fe800000000000000000000000000024910000001400020002004e207f00000100000000000000004c0004800900010073797a30000000003c00078008000400d16300000800030009000000080001001f00000008000400000001000800030000000000080003000008000008000300ff01000000000000000000002e6b4e0e7d58451375d6826671a35c4321e48fd2893dae3b3b5d7859b4f2ba50cab6de52cbfd55badab6b2e96cfaedf3e76da15cb8710f80812a8984b8dd428f9271134fc4aa314ca3466e1bd90f"], 0x1370}, 0x1, 0x0, 0x0, 0x4850}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x20, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0xb4, 0x3ff}})
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xae}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x5c}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001680)=ANY=[@ANYBLOB="70130000", @ANYRES16=r3, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x4850}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x20, 0x19, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0xb4, 0x3ff}}) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xae}, @L2TP_ATTR_DEBUG={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x1ff})
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000))
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xeea5, 0x20, 0xf34, 0x9, 0xc, "9bb531f7e0f140c5"})
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="95345128e7061cd7c95fcdba4a6c0788b602d3e0b9ec7760")

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x210042, 0x0)

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000040001000030008000000000c28533d9c8fadbc60ba9530a861ddb9500006bb6aca924dd64"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2, 0x1e3d, 0x1, 0x7, 0x11, "283bdc70f66ab880d2fc7dc5c7737202043430"})

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x210042, 0x0)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4858413e, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/160)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x2, 0x9, 0xef, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f00000000c0))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff7d7e")

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000040001000030008000000000c28533d9c8fadbc60ba9530a861ddb9500006bb6aca924dd64"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000040001000030008000000000c28533d9c8fadbc60ba9530a861ddb9500006bb6aca924dd64"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2, 0x1e3d, 0x1, 0x7, 0x11, "283bdc70f66ab880d2fc7dc5c7737202043430"})

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x1ff})
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000))
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xeea5, 0x20, 0xf34, 0x9, 0xc, "9bb531f7e0f140c5"})
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="95345128e7061cd7c95fcdba4a6c0788b602d3e0b9ec7760")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x1ff}) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async)
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xeea5, 0x20, 0xf34, 0x9, 0xc, "9bb531f7e0f140c5"}) (async)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd) (async)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="95345128e7061cd7c95fcdba4a6c0788b602d3e0b9ec7760") (async)

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x1, 0x1ff})
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async)
ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xeea5, 0x20, 0xf34, 0x9, 0xc, "9bb531f7e0f140c5"}) (async)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffd)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000140)="95345128e7061cd7c95fcdba4a6c0788b602d3e0b9ec7760")

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4858413e, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/160)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x2, 0x9, 0xef, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10)
ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f00000000c0))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x4858413e, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/160) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x2, 0x9, 0xef, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) (async)
ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f00000000c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x22080)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x12c00, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="bb5bd5defd54223f3e2b620277b13d1ff792b5a347d2210d3a43081b3cabf32fd300601734ae7d3cdc28856eb446d93394e0e45258a699176f3b5eb8d78244ed466d1d832ee48304d169de398135da06bcb495951c4c7ca1ffb9b8a4a66716f4192088d1ecb3f59c08e360191a7c5306d24831032d7d2b6488037c85578fea4ac42a8c2c5a29")
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="00000000040001000030008000000000c28533d9c8fadbc60ba9530a861ddb9500006bb6aca924dd64"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2, 0x1e3d, 0x1, 0x7, 0x11, "283bdc70f66ab880d2fc7dc5c7737202043430"})

11:42:22 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff7d7e")

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 5:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = getpid()
ptrace$pokeuser(0x6, r1, 0x10000, 0x7fff)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)

11:42:22 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff7d7e")

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x400400, 0x0) (async)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4858413e, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/160) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r3, &(0x7f0000000000)={0x1a, 0x304, 0x2, 0x9, 0xef, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) (async, rerun: 32)
ioctl$EVIOCSCLOCKID(r1, 0x80084504, &(0x7f00000000c0)) (async, rerun: 32)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x22080)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x12c00, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="bb5bd5defd54223f3e2b620277b13d1ff792b5a347d2210d3a43081b3cabf32fd300601734ae7d3cdc28856eb446d93394e0e45258a699176f3b5eb8d78244ed466d1d832ee48304d169de398135da06bcb495951c4c7ca1ffb9b8a4a66716f4192088d1ecb3f59c08e360191a7c5306d24831032d7d2b6488037c85578fea4ac42a8c2c5a29") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'vcan0\x00'})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100))

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x22080) (rerun: 32)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x12c00, 0x0)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="bb5bd5defd54223f3e2b620277b13d1ff792b5a347d2210d3a43081b3cabf32fd300601734ae7d3cdc28856eb446d93394e0e45258a699176f3b5eb8d78244ed466d1d832ee48304d169de398135da06bcb495951c4c7ca1ffb9b8a4a66716f4192088d1ecb3f59c08e360191a7c5306d24831032d7d2b6488037c85578fea4ac42a8c2c5a29")
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x303f80, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 5:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64)
r1 = getpid() (rerun: 64)
ptrace$pokeuser(0x6, r1, 0x10000, 0x7fff) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4402, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x4) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) (async)

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xfffe, 0xffff}]})

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x303f80, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x303f80, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)

11:42:22 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:22 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xfffe, 0xffff}]})

11:42:22 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x303f80, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:22 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x4) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)

11:42:23 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'vcan0\x00'})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100))

11:42:23 executing program 5:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = getpid()
ptrace$pokeuser(0x6, r1, 0x10000, 0x7fff) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080))
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0))
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
write$vga_arbiter(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

11:42:23 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xfffe, 0xffff}]})

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x280fc0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:23 executing program 0:
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="09547151ccfdcce2b270304b7f68ef0b26aaadcb59c431ac779ef25fa5b8461ae821b517bd2c3840f52db24bb55f5d7aafdc4e7d92913556c83dbc24c97daccf2903c14b2521581869e716b1b12b78a73e1c02c45848eb4a802e92cabe918ab3ac5878b2718505cd4bf36affe176efd4b9b1fd6aa6a6348a3ef52cd299ce378f643ef0fbbbb8be643c0c9a2324a4ae1d814060b27d8fb00cc8d968d07738dd913837efbb0d5b45adc6bbc1b8babdd01c1577a1f197678ca1062a16ebb694e11c905eda437b842dc68e22e453aa8a0b327fa4d882c8c0abfa690a3a5ecdc959133cf62de06b76a6e5076f0ba72628b48943bb9b9006")
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9f, 0x400902)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x10001, 0xf4cb, 0x40004, 0x5, 0xdbf4, 0xff})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x280fc0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:23 executing program 0:
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="09547151ccfdcce2b270304b7f68ef0b26aaadcb59c431ac779ef25fa5b8461ae821b517bd2c3840f52db24bb55f5d7aafdc4e7d92913556c83dbc24c97daccf2903c14b2521581869e716b1b12b78a73e1c02c45848eb4a802e92cabe918ab3ac5878b2718505cd4bf36affe176efd4b9b1fd6aa6a6348a3ef52cd299ce378f643ef0fbbbb8be643c0c9a2324a4ae1d814060b27d8fb00cc8d968d07738dd913837efbb0d5b45adc6bbc1b8babdd01c1577a1f197678ca1062a16ebb694e11c905eda437b842dc68e22e453aa8a0b327fa4d882c8c0abfa690a3a5ecdc959133cf62de06b76a6e5076f0ba72628b48943bb9b9006")
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) (async)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
write$vga_arbiter(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

11:42:23 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080))
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0)) (async)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000000c0))
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
write$vga_arbiter(r2, 0x0, 0x0) (async)
write$vga_arbiter(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40088)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

11:42:23 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'vcan0\x00'}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100))

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9f, 0x400902)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x10001, 0xf4cb, 0x40004, 0x5, 0xdbf4, 0xff})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$TIOCNXCL(r0, 0x540d) (async)
ioctl$TIOCNXCL(r0, 0x540d)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x280fc0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:23 executing program 0:
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="09547151ccfdcce2b270304b7f68ef0b26aaadcb59c431ac779ef25fa5b8461ae821b517bd2c3840f52db24bb55f5d7aafdc4e7d92913556c83dbc24c97daccf2903c14b2521581869e716b1b12b78a73e1c02c45848eb4a802e92cabe918ab3ac5878b2718505cd4bf36affe176efd4b9b1fd6aa6a6348a3ef52cd299ce378f643ef0fbbbb8be643c0c9a2324a4ae1d814060b27d8fb00cc8d968d07738dd913837efbb0d5b45adc6bbc1b8babdd01c1577a1f197678ca1062a16ebb694e11c905eda437b842dc68e22e453aa8a0b327fa4d882c8c0abfa690a3a5ecdc959133cf62de06b76a6e5076f0ba72628b48943bb9b9006")
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="09547151ccfdcce2b270304b7f68ef0b26aaadcb59c431ac779ef25fa5b8461ae821b517bd2c3840f52db24bb55f5d7aafdc4e7d92913556c83dbc24c97daccf2903c14b2521581869e716b1b12b78a73e1c02c45848eb4a802e92cabe918ab3ac5878b2718505cd4bf36affe176efd4b9b1fd6aa6a6348a3ef52cd299ce378f643ef0fbbbb8be643c0c9a2324a4ae1d814060b27d8fb00cc8d968d07738dd913837efbb0d5b45adc6bbc1b8babdd01c1577a1f197678ca1062a16ebb694e11c905eda437b842dc68e22e453aa8a0b327fa4d882c8c0abfa690a3a5ecdc959133cf62de06b76a6e5076f0ba72628b48943bb9b9006") (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8}, {0x7, 0x1000}, {0x6, 0x81}, {0x7fff, 0x80}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x400, 0x9, 0x10000, 0x6, 0x3, 0x7a})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 4:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$TIOCNXCL(r0, 0x540d) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10)

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9f, 0x400902)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x10001, 0xf4cb, 0x40004, 0x5, 0xdbf4, 0xff})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
syz_open_dev$evdev(&(0x7f0000000000), 0x9f, 0x400902) (async)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x10001, 0xf4cb, 0x40004, 0x5, 0xdbf4, 0xff}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8}, {0x7, 0x1000}, {0x6, 0x81}, {0x7fff, 0x80}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8}, {0x7, 0x1000}, {0x6, 0x81}, {0x7fff, 0x80}]}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)

11:42:23 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x18a00)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/202, 0xca, 0x0, &(0x7f0000000240)=""/215, 0xd7}}, 0x10)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2b726c696d6974202b72646d61202b637075202d72646d61202b64657669636573202b72646d61202d696f202b68756765746c62202b724288d58576614d7709120d646d6120"], 0x3b)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x244800, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x80)
ioctl$TCSBRK(r0, 0x5409, 0x100000002)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x400, 0x9, 0x10000, 0x6, 0x3, 0x7a}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000018200500"/21, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))

11:42:23 executing program 5:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xfffffffb, 0x20, 0x91, 0x1, 0x1a, "74b1fe52a74e6f6c28a0daaa6ee3f8ab036234"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8}, {0x7, 0x1000}, {0x6, 0x81}, {0x7fff, 0x80}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="235a08ff6b7e")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x731ac1, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="97944fa3be074d259cd534b8bdb3eb4a66c85e50663b35cdbba5abcfbbd43858ca9a35685b1cb1f69d640ec2b8c87b21f76f463d12870573cf55ba9803635d37f30c0292fc71f7bccd3815f33e7bf21e4dc1b231b36bb4194d24d5f9f44681f4d59f031cfa016f4081fa546fbfe6d1d700092dc39da40ebb7628ba720a79e79ea84481378820bc1d763221c4086a9190fef33529dc196d322949b453e887bac78945dcd8900ded69254990187bdacfeafb2ba3e1c8")

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000018200500"/21, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000018200500"/21, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)

11:42:23 executing program 5:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xfffffffb, 0x20, 0x91, 0x1, 0x1a, "74b1fe52a74e6f6c28a0daaa6ee3f8ab036234"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x400, 0x9, 0x10000, 0x6, 0x3, 0x7a})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x400, 0x9, 0x10000, 0x6, 0x3, 0x7a}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:23 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x18a00)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/202, 0xca, 0x0, &(0x7f0000000240)=""/215, 0xd7}}, 0x10)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2b726c696d6974202b72646d61202b637075202d72646d61202b64657669636573202b72646d61202d696f202b68756765746c62202b724288d58576614d7709120d646d6120"], 0x3b)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x244800, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x80)
ioctl$TCSBRK(r0, 0x5409, 0x100000002)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async)
syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x18a00) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/202, 0xca, 0x0, &(0x7f0000000240)=""/215, 0xd7}}, 0x10) (async)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2b726c696d6974202b72646d61202b637075202d72646d61202b64657669636573202b72646d61202d696f202b68756765746c62202b724288d58576614d7709120d646d6120"], 0x3b) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x244800, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x80) (async)
ioctl$TCSBRK(r0, 0x5409, 0x100000002) (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef) (async)

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000018200500"/21, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000018200500"/21, @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e51c")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x731ac1, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="97944fa3be074d259cd534b8bdb3eb4a66c85e50663b35cdbba5abcfbbd43858ca9a35685b1cb1f69d640ec2b8c87b21f76f463d12870573cf55ba9803635d37f30c0292fc71f7bccd3815f33e7bf21e4dc1b231b36bb4194d24d5f9f44681f4d59f031cfa016f4081fa546fbfe6d1d700092dc39da40ebb7628ba720a79e79ea84481378820bc1d763221c4086a9190fef33529dc196d322949b453e887bac78945dcd8900ded69254990187bdacfeafb2ba3e1c8")

11:42:23 executing program 5:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xfffffffb, 0x20, 0x91, 0x1, 0x1a, "74b1fe52a74e6f6c28a0daaa6ee3f8ab036234"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="d8d0f9")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x731ac1, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="97944fa3be074d259cd534b8bdb3eb4a66c85e50663b35cdbba5abcfbbd43858ca9a35685b1cb1f69d640ec2b8c87b21f76f463d12870573cf55ba9803635d37f30c0292fc71f7bccd3815f33e7bf21e4dc1b231b36bb4194d24d5f9f44681f4d59f031cfa016f4081fa546fbfe6d1d700092dc39da40ebb7628ba720a79e79ea84481378820bc1d763221c4086a9190fef33529dc196d322949b453e887bac78945dcd8900ded69254990187bdacfeafb2ba3e1c8")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x731ac1, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="97944fa3be074d259cd534b8bdb3eb4a66c85e50663b35cdbba5abcfbbd43858ca9a35685b1cb1f69d640ec2b8c87b21f76f463d12870573cf55ba9803635d37f30c0292fc71f7bccd3815f33e7bf21e4dc1b231b36bb4194d24d5f9f44681f4d59f031cfa016f4081fa546fbfe6d1d700092dc39da40ebb7628ba720a79e79ea84481378820bc1d763221c4086a9190fef33529dc196d322949b453e887bac78945dcd8900ded69254990187bdacfeafb2ba3e1c8") (async)

11:42:23 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000426bd7000fda2df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x24048800)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008805)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', <r5=>0x0, 0x8, 0x7, 0x0, 0x1, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xb6, [@empty, @multicast2, @empty]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x93, 0x2, 0x4, 0x36, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x7, 0x2, 0x1}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r3, 0xb3de736cc95ff2e, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe8}}, 0x8000)

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7a4, 0x2001)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="833c56e00000d2", @ANYRES16=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x24008800}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000000001000030008000000000950000000000000039d71f7fdb31562fb4640eb2dca65a238019d52715bfa9fd2565c0a43aaff9e83925b4567940a829e02270a861fd3f014d19e58befae126ac51dff154d583e3aad46c47ba3ffd5c03390e80b030f2abd"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/91, 0x5b, 0x0, &(0x7f0000000440)=""/224, 0xe0}}, 0x10)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000380)={0x6, 0x9, 0x2})

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e51c")

11:42:23 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000000063000000950000000000000018200000b0413077fe8a7c255c65da611cd9ff30513a60291181448c1bec9d7beeeb2f600abbc0b19d978cb5708a7bc5834e7a6dde2f8559a72ebdd3a79ed0fb00b383b3f6371576281af63a24130fbbffbe44e9d5c4bf6ad4c49304581146", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9a, 0x410200)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000040)="d8eff9809f1973ccbbf829136a062534841e36180500000097f1ddb8d5f2e5")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 3:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x18a00) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x18a00)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000140)=""/202, 0xca, 0x0, &(0x7f0000000240)=""/215, 0xd7}}, 0x10)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2b726c696d6974202b72646d61202b637075202d72646d61202b64657669636573202b72646d61202d696f202b68756765746c62202b724288d58576614d7709120d646d6120"], 0x3b) (async)
write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2b726c696d6974202b72646d61202b637075202d72646d61202b64657669636573202b72646d61202d696f202b68756765746c62202b724288d58576614d7709120d646d6120"], 0x3b)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x244800, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000440), 0x8000000000000001, 0x80)
ioctl$TCSBRK(r0, 0x5409, 0x100000002)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7a4, 0x2001) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="833c56e00000d2", @ANYRES16=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000000001000030008000000000950000000000000039d71f7fdb31562fb4640eb2dca65a238019d52715bfa9fd2565c0a43aaff9e83925b4567940a829e02270a861fd3f014d19e58befae126ac51dff154d583e3aad46c47ba3ffd5c03390e80b030f2abd"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/91, 0x5b, 0x0, &(0x7f0000000440)=""/224, 0xe0}}, 0x10) (async, rerun: 32)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000380)={0x6, 0x9, 0x2}) (rerun: 32)

11:42:23 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000426bd7000fda2df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x24048800)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008805)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', <r5=>0x0, 0x8, 0x7, 0x0, 0x1, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xb6, [@empty, @multicast2, @empty]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x93, 0x2, 0x4, 0x36, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x7, 0x2, 0x1}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r3, 0xb3de736cc95ff2e, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe8}}, 0x8000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000426bd7000fda2df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x24048800) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008805) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8, 0x7, 0x0, 0x1, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xb6, [@empty, @multicast2, @empty]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x2f, 0x93, 0x2, 0x4, 0x36, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x7, 0x2, 0x1}}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r3, 0xb3de736cc95ff2e, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe8}}, 0x8000) (async)

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e51c")

11:42:23 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000000063000000950000000000000018200000b0413077fe8a7c255c65da611cd9ff30513a60291181448c1bec9d7beeeb2f600abbc0b19d978cb5708a7bc5834e7a6dde2f8559a72ebdd3a79ed0fb00b383b3f6371576281af63a24130fbbffbe44e9d5c4bf6ad4c49304581146", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9a, 0x410200)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000040)="d8eff9809f1973ccbbf829136a062534841e36180500000097f1ddb8d5f2e5")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000000063000000950000000000000018200000b0413077fe8a7c255c65da611cd9ff30513a60291181448c1bec9d7beeeb2f600abbc0b19d978cb5708a7bc5834e7a6dde2f8559a72ebdd3a79ed0fb00b383b3f6371576281af63a24130fbbffbe44e9d5c4bf6ad4c49304581146", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9a, 0x410200)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000040)="d8eff9809f1973ccbbf829136a062534841e36180500000097f1ddb8d5f2e5")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000000063000000950000000000000018200000b0413077fe8a7c255c65da611cd9ff30513a60291181448c1bec9d7beeeb2f600abbc0b19d978cb5708a7bc5834e7a6dde2f8559a72ebdd3a79ed0fb00b383b3f6371576281af63a24130fbbffbe44e9d5c4bf6ad4c49304581146", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x9a, 0x410200) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000040)="d8eff9809f1973ccbbf829136a062534841e36180500000097f1ddb8d5f2e5") (async)

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x4, 0x6, 0x2, 0x3, 0x20, 0x2})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:23 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000426bd7000fda2df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x24048800) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async, rerun: 64)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008805) (rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', <r5=>0x0, 0x8, 0x7, 0x0, 0x1, {{0x9, 0x4, 0x1, 0x6, 0x24, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xb6, [@empty, @multicast2, @empty]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x93, 0x2, 0x4, 0x36, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x7, 0x2, 0x1}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r3, 0xb3de736cc95ff2e, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xe8}}, 0x8000)

11:42:23 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7a4, 0x2001)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="833c56e00000d2", @ANYRES16=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000000001000030008000000000950000000000000039d71f7fdb31562fb4640eb2dca65a238019d52715bfa9fd2565c0a43aaff9e83925b4567940a829e02270a861fd3f014d19e58befae126ac51dff154d583e3aad46c47ba3ffd5c03390e80b030f2abd"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r4, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/91, 0x5b, 0x0, &(0x7f0000000440)=""/224, 0xe0}}, 0x10) (async)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000380)={0x6, 0x9, 0x2})

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3)

11:42:23 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x4, 0x6, 0x2, 0x3, 0x20, 0x2}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:23 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4004004)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000))

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3)

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4301, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

11:42:23 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4301, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

11:42:23 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x4, 0x6, 0x2, 0x3, 0x20, 0x2}) (async)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x4, 0x6, 0x2, 0x3, 0x20, 0x2})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:23 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3)

11:42:23 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4004004) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000))

11:42:23 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4301, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

11:42:24 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="231995900b11c15476ac47e6f010ee93a2f36955d7497ea77390e7dc91413d5ebccb419f13bfd43c2a1cce4a861f7d4fa0fc4c63f84565f1717b5c8b561b9fb8ba87b81d7e30b3e1042687d558441cf0f49673fdc584cab99c85d72fc19f8dda57e0ae7f18b4463a10800cbebe9583d5391cf776a0b00063cc1a39")

11:42:24 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='\x00\x00\x00\x00\x009')

11:42:24 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc20c1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000780)=@raw=[@alu={0x4, 0x1, 0x0, 0x8, 0x8, 0xc, 0xffffffffffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x0, 0x80754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e5401f37124a591ab0b7fa232e8eecbb30")
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))

11:42:24 executing program 4:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c880}, 0x4004004)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='\x00\x00\x00\x00\x009')
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='\x00\x00\x00\x00\x009') (async)

11:42:24 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc20c1, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc20c1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000780)=@raw=[@alu={0x4, 0x1, 0x0, 0x8, 0x8, 0xc, 0xffffffffffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x0, 0x80754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e5401f37124a591ab0b7fa232e8eecbb30") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e5401f37124a591ab0b7fa232e8eecbb30")
syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="231995900b11c15476ac47e6f010ee93a2f36955d7497ea77390e7dc91413d5ebccb419f13bfd43c2a1cce4a861f7d4fa0fc4c63f84565f1717b5c8b561b9fb8ba87b81d7e30b3e1042687d558441cf0f49673fdc584cab99c85d72fc19f8dda57e0ae7f18b4463a10800cbebe9583d5391cf776a0b00063cc1a39")

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) (async)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4}) (async)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='\x00\x00\x00\x00\x009')

11:42:24 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xc20c1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1, &(0x7f0000000780)=@raw=[@alu={0x4, 0x1, 0x0, 0x8, 0x8, 0xc, 0xffffffffffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x0, 0x80754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="e5401f37124a591ab0b7fa232e8eecbb30") (async)
syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="231995900b11c15476ac47e6f010ee93a2f36955d7497ea77390e7dc91413d5ebccb419f13bfd43c2a1cce4a861f7d4fa0fc4c63f84565f1717b5c8b561b9fb8ba87b81d7e30b3e1042687d558441cf0f49673fdc584cab99c85d72fc19f8dda57e0ae7f18b4463a10800cbebe9583d5391cf776a0b00063cc1a39")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="231995900b11c15476ac47e6f010ee93a2f36955d7497ea77390e7dc91413d5ebccb419f13bfd43c2a1cce4a861f7d4fa0fc4c63f84565f1717b5c8b561b9fb8ba87b81d7e30b3e1042687d558441cf0f49673fdc584cab99c85d72fc19f8dda57e0ae7f18b4463a10800cbebe9583d5391cf776a0b00063cc1a39") (async)

11:42:24 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="be010000b59c671bded5cb2a73507034f1203d1ca57ede5d98bd2445fe288a5a559cb0d1100a9a8094f32504f9a65ec85261ed91c9eea7798dcbce339cb73b9a3e17932b91fbf0a7b4178ed64473c2738325ba57bcce5975123b4449e2fdc54545a38f27", @ANYRES16=r0, @ANYBLOB="080028bd7000fddbdf250900000004000280ec0005800c00028008000300696d00000c000280080001000a00000007000100696200002c00028008000200060000000800010019000000080003000800000008000400ff0000000800040002000000080001007564700054000280080001001c000000080002000400000008000200010000000800030080000000080001000500000008000200080000000800020009000000080004000300000008000200ffffffff080001000c00000008000100657468001c000280080004007f000000080001000d000000080003004e080000140002800800030003000000080001000c00000008000100657468000c00098008000200810000008c00048024000780080002000000000008000400380400000800010016000000080001001e00000014000780080001000a00000008000400020000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a3100000000040007800900010073797a31000000000c00078008000400d802000004000780"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x293b8a428d5404b0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x8, 0x0, @empty, @remote, 0x40, 0x40, 0xe94, 0x800}})
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(0x0, 0xd6, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)="008000390000")

11:42:24 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="be010000b59c671bded5cb2a73507034f1203d1ca57ede5d98bd2445fe288a5a559cb0d1100a9a8094f32504f9a65ec85261ed91c9eea7798dcbce339cb73b9a3e17932b91fbf0a7b4178ed64473c2738325ba57bcce5975123b4449e2fdc54545a38f27", @ANYRES16=r0, @ANYBLOB="080028bd7000fddbdf250900000004000280ec0005800c00028008000300696d00000c000280080001000a00000007000100696200002c00028008000200060000000800010019000000080003000800000008000400ff0000000800040002000000080001007564700054000280080001001c000000080002000400000008000200010000000800030080000000080001000500000008000200080000000800020009000000080004000300000008000200ffffffff080001000c00000008000100657468001c000280080004007f000000080001000d000000080003004e080000140002800800030003000000080001000c00000008000100657468000c00098008000200810000008c00048024000780080002000000000008000400380400000800010016000000080001001e00000014000780080001000a00000008000400020000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a3100000000040007800900010073797a31000000000c00078008000400d802000004000780"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x293b8a428d5404b0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x8, 0x0, @empty, @remote, 0x40, 0x40, 0xe94, 0x800}})
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)="008000390000")

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x769a})
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x0, {0xa, 0x4e20, 0xff, @remote, 0x5}}}, 0x32)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

11:42:24 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="be010000b59c671bded5cb2a73507034f1203d1ca57ede5d98bd2445fe288a5a559cb0d1100a9a8094f32504f9a65ec85261ed91c9eea7798dcbce339cb73b9a3e17932b91fbf0a7b4178ed64473c2738325ba57bcce5975123b4449e2fdc54545a38f27", @ANYRES16=r0, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0x293b8a428d5404b0) (async)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x0, 0x8, 0x0, @empty, @remote, 0x40, 0x40, 0xe94, 0x800}}) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(0x0, 0xd6, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)="008000390000")

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (async, rerun: 32)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) (rerun: 32)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x769a}) (async)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x0, {0xa, 0x4e20, 0xff, @remote, 0x5}}}, 0x32) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

11:42:24 executing program 4:
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x3, 0x7a, 0x8, 0x6c, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x0, 0x7}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000))
connect$llc(r1, &(0x7f0000000040)={0x1a, 0xfffe, 0xc, 0x42, 0x0, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10)

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x769a}) (async)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x0, {0xa, 0x4e20, 0xff, @remote, 0x5}}}, 0x32) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(0x0, 0xd6, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00000000000000000000170000000c000004000580"], 0x24}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x274, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "aab79d54d14311fd745cc1889e63a479f6755941aa8a8cb5a317685de324fd41"}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "0d7d50833da312f551c378598f7e3ba565dd7037e611f7c616b46bb70d6c0a3ae26008c1a832444c982e7662cbca41931535c0fcc1ebef48e602fee43636e364afd3dabf66d795677b608cdabc27e590c016ecd228c80979c73c753edf7278cb18531fef3d65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2932ef1f0a20e5ec16d8c1d0cd4e3c45c59e839033a093c89f9d37fd8afd83"}}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800000}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x400)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7564}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x48}}, 0x1)

11:42:24 executing program 4:
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x3, 0x7a, 0x8, 0x6c, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x0, 0x7}}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0xfffe, 0xc, 0x42, 0x0, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00000000000000000000170000000c000004000580"], 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) (async)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x274, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "aab79d54d14311fd745cc1889e63a479f6755941aa8a8cb5a317685de324fd41"}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "0d7d50833da312f551c378598f7e3ba565dd7037e611f7c616b46bb70d6c0a3ae26008c1a832444c982e7662cbca41931535c0fcc1ebef48e602fee43636e364afd3dabf66d795677b608cdabc27e590c016ecd228c80979c73c753edf7278cb18531fef3d65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2932ef1f0a20e5ec16d8c1d0cd4e3c45c59e839033a093c89f9d37fd8afd83"}}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800000}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x400)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7564}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x48}}, 0x1)

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)='+%')
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0xff, 0x2}, 0xe)

11:42:24 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="000431c6a310507b7c16f5f6eecbb3f25bb875f9ad67a5bba44c118529b4b265d632be68569175349392bd119801d70e72aabc4f1d1d845461f51bae90cd3b61322db870e5bd4a4b3b99debd3342d4fb1498a33956ca6132889e5fd8a25f1922bb81063af60e4407f6338e3ed2f721d00cf177d4021a67e7a5803b3a2bf0757c55bff2f9a5bf29a63a23630b1b88291b943a0100c1bc021cfe488a2ddb095a9544cdfc99920600bd7f96941382b33b76bc2edeb90ae4668b83e39613539d1f08b65b8af807b92b94dcb65b7ebee1741a17")
syz_open_dev$tty1(0xc, 0x4, 0x3)

11:42:24 executing program 4:
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x3, 0x7a, 0x8, 0x6c, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x0, 0x7}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000000)) (async)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0xfffe, 0xc, 0x42, 0x0, 0x40, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x10)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00000000000000000000170000000c000004000580"], 0x24}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x274, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "aab79d54d14311fd745cc1889e63a479f6755941aa8a8cb5a317685de324fd41"}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "0d7d50833da312f551c378598f7e3ba565dd7037e611f7c616b46bb70d6c0a3ae26008c1a832444c982e7662cbca41931535c0fcc1ebef48e602fee43636e364afd3dabf66d795677b608cdabc27e590c016ecd228c80979c73c753edf7278cb18531fef3d65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2932ef1f0a20e5ec16d8c1d0cd4e3c45c59e839033a093c89f9d37fd8afd83"}}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800000}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x400)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7564}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x48}}, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00000000000000000000170000000c000004000580"], 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x274, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "aab79d54d14311fd745cc1889e63a479f6755941aa8a8cb5a317685de324fd41"}}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "0d7d50833da312f551c378598f7e3ba565dd7037e611f7c616b46bb70d6c0a3ae26008c1a832444c982e7662cbca41931535c0fcc1ebef48e602fee43636e364afd3dabf66d795677b608cdabc27e590c016ecd228c80979c73c753edf7278cb18531fef3d65"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2932ef1f0a20e5ec16d8c1d0cd4e3c45c59e839033a093c89f9d37fd8afd83"}}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800000}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x400) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) (async)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4) (async)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7564}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x48}}, 0x1) (async)

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="000431c6a310507b7c16f5f6eecbb3f25bb875f9ad67a5bba44c118529b4b265d632be68569175349392bd119801d70e72aabc4f1d1d845461f51bae90cd3b61322db870e5bd4a4b3b99debd3342d4fb1498a33956ca6132889e5fd8a25f1922bb81063af60e4407f6338e3ed2f721d00cf177d4021a67e7a5803b3a2bf0757c55bff2f9a5bf29a63a23630b1b88291b943a0100c1bc021cfe488a2ddb095a9544cdfc99920600bd7f96941382b33b76bc2edeb90ae4668b83e39613539d1f08b65b8af807b92b94dcb65b7ebee1741a17")
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="000431c6a310507b7c16f5f6eecbb3f25bb875f9ad67a5bba44c118529b4b265d632be68569175349392bd119801d70e72aabc4f1d1d845461f51bae90cd3b61322db870e5bd4a4b3b99debd3342d4fb1498a33956ca6132889e5fd8a25f1922bb81063af60e4407f6338e3ed2f721d00cf177d4021a67e7a5803b3a2bf0757c55bff2f9a5bf29a63a23630b1b88291b943a0100c1bc021cfe488a2ddb095a9544cdfc99920600bd7f96941382b33b76bc2edeb90ae4668b83e39613539d1f08b65b8af807b92b94dcb65b7ebee1741a17") (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="0000d00000397bb8d2783dead10a8c85ee45a02441021cfc98187e961cffdf15b3ed6a17c4db69faa53edd97fa3086a9a5387d82d10437f66db7cd6be53e7164d58de06809be7c6b4f7308be2f404e000000001a4744f754b900921bcbd972b6d5c345e652503feaefaa0a08778ee61b5ff1c73172f5e3551fff")

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)='+%') (async)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0xff, 0x2}, 0xe)

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="000431c6a310507b7c16f5f6eecbb3f25bb875f9ad67a5bba44c118529b4b265d632be68569175349392bd119801d70e72aabc4f1d1d845461f51bae90cd3b61322db870e5bd4a4b3b99debd3342d4fb1498a33956ca6132889e5fd8a25f1922bb81063af60e4407f6338e3ed2f721d00cf177d4021a67e7a5803b3a2bf0757c55bff2f9a5bf29a63a23630b1b88291b943a0100c1bc021cfe488a2ddb095a9544cdfc99920600bd7f96941382b33b76bc2edeb90ae4668b83e39613539d1f08b65b8af807b92b94dcb65b7ebee1741a17")
syz_open_dev$tty1(0xc, 0x4, 0x3)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="000431c6a310507b7c16f5f6eecbb3f25bb875f9ad67a5bba44c118529b4b265d632be68569175349392bd119801d70e72aabc4f1d1d845461f51bae90cd3b61322db870e5bd4a4b3b99debd3342d4fb1498a33956ca6132889e5fd8a25f1922bb81063af60e4407f6338e3ed2f721d00cf177d4021a67e7a5803b3a2bf0757c55bff2f9a5bf29a63a23630b1b88291b943a0100c1bc021cfe488a2ddb095a9544cdfc99920600bd7f96941382b33b76bc2edeb90ae4668b83e39613539d1f08b65b8af807b92b94dcb65b7ebee1741a17") (async)
syz_open_dev$tty1(0xc, 0x4, 0x3) (async)

11:42:24 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x38000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="d8d0f927083ac860df72fa01a8dc0bbe7f61de549b838fb96364bddb227570ff70a091c75638b6f92b078b4f57e8e5f720aeba1e07e4fe7f5c00b5c50ff604b6fc6c0d2c55947f48e06912c9bcb87e6f78c62b115325aaa96381fc43ba7e8707f61380ca3e542a9758ed576e3300000000b080c5d6a325331e5d000000000000086e2a90f70939fb8db5b6982fa98a5c43f6db3e6266650000000000000000001642bb132e159c27010c4e8e80271fb6e7539f0f7e0549709c978ca03841669ea8737294b9e392c206e296ae083ff9940000000000000000")
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="f3ff26bd7019ff000000000000001400000000000000a6579c3dc0da9fc70ce00de8ecba17cc1de21bc1d8389144ac583a04261eb34460d1303b63ce3024ea786b9d5996f7342fa095e34eaadb804a5ae77b8fe51d44529d3284d2dd814ee1c76574674d4fa7eee5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010)

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)='+%')
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2, @any, 0xff, 0x2}, 0xe)

11:42:24 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="0000d00000397bb8d2783dead10a8c85ee45a02441021cfc98187e961cffdf15b3ed6a17c4db69faa53edd97fa3086a9a5387d82d10437f66db7cd6be53e7164d58de06809be7c6b4f7308be2f404e000000001a4744f754b900921bcbd972b6d5c345e652503feaefaa0a08778ee61b5ff1c73172f5e3551fff") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="0000d00000397bb8d2783dead10a8c85ee45a02441021cfc98187e961cffdf15b3ed6a17c4db69faa53edd97fa3086a9a5387d82d10437f66db7cd6be53e7164d58de06809be7c6b4f7308be2f404e000000001a4744f754b900921bcbd972b6d5c345e652503feaefaa0a08778ee61b5ff1c73172f5e3551fff")

11:42:24 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="0000d00000397bb8d2783dead10a8c85ee45a02441021cfc98187e961cffdf15b3ed6a17c4db69faa53edd97fa3086a9a5387d82d10437f66db7cd6be53e7164d58de06809be7c6b4f7308be2f404e000000001a4744f754b900921bcbd972b6d5c345e652503feaefaa0a08778ee61b5ff1c73172f5e3551fff")

11:42:24 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:24 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0a01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0202, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10002}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1]}, 0x80)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/167)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="89e7cc37118def316a0f9801058c249e74e38d558640dc2c3f9c552e8c29702e2a1dbea3fbb6f59b62cc07213981e698f2ae4fb411737fe8d4d7b2df79fbf799a2dc2c9f3ad73cc9e1e43fdf8f7294")
r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000002c0)={0x49, "e946dabaff40f735f54e97809d94659e3f4525967e603d9d47fc0578d7234a80252d88c63114b58876a388d1f11f7be0b4617b0dca93ed3cd32ac3d9f1175b6026ea0da4d6969ed00a1b5f04bbe86051e1284500185453ae6ae2eb742c62afbb6348e4f464b8daac7828b1804336356de1689dac890a561f6f3e92f9cce4a65829b16d327c91a6a6349d1d5157698af2ae69d7696ec082650151e3f0c04fc72b7fd88605085f5d99688b231ba8222e6e29b4e7b91f77bc20879730a3943b581e789a0304ed5a52d7c83ca7b2c6c9cd6630e143f5c245b1f5c913326b4a0bb996a2591c2a52ab4e1e75f3553de810cb7b75d558768d2ef98cb3d6af32c597ae5373d5a598b6aad95254226e3cd9cd2a4d439ef81ee7e78636adbfa0bbbe253e34fe82de1e25a1c9df397bbf0d05d395211e1d2ea73561425c6d07edd34ef7c7641a586d33b56d7f020cd7b5f10d725f7911955565deb5581f6cfa115ea9ada03376f2a659de6ec51b84ee9c49ec136112632c46ba4c02d2eb075ef537b7c945ec9fcfe02ef19f1f894341269e55f61ef9f924c1fb054a7f756724a5a69feb6924c35d0e02f7802047838e40c11fd7f21135ca46d8d7f238c36403d6245c3d4fac655a935c289bc339c97a4c254835478e9e201fb6b7b9e8bc6f768a68273bb51cf017ae7b064f35e25fd9ab3470d72f570a86e771b193877b5d114883c91281fa"})

11:42:24 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:24 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x38000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="d8d0f927083ac860df72fa01a8dc0bbe7f61de549b838fb96364bddb227570ff70a091c75638b6f92b078b4f57e8e5f720aeba1e07e4fe7f5c00b5c50ff604b6fc6c0d2c55947f48e06912c9bcb87e6f78c62b115325aaa96381fc43ba7e8707f61380ca3e542a9758ed576e3300000000b080c5d6a325331e5d000000000000086e2a90f70939fb8db5b6982fa98a5c43f6db3e6266650000000000000000001642bb132e159c27010c4e8e80271fb6e7539f0f7e0549709c978ca03841669ea8737294b9e392c206e296ae083ff9940000000000000000")
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="f3ff26bd7019ff000000000000001400000000000000a6579c3dc0da9fc70ce00de8ecba17cc1de21bc1d8389144ac583a04261eb34460d1303b63ce3024ea786b9d5996f7342fa095e34eaadb804a5ae77b8fe51d44529d3284d2dd814ee1c76574674d4fa7eee5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010)

11:42:25 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1f, 0x280)
write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e6c6f630600ba775fb8100000"], 0xfffffd49)

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:25 executing program 1:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(0xffffffffffffffff, &(0x7f0000000080)=""/111, 0x6f)

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0a01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0202, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x5) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10002}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1]}, 0x80)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/167) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="89e7cc37118def316a0f9801058c249e74e38d558640dc2c3f9c552e8c29702e2a1dbea3fbb6f59b62cc07213981e698f2ae4fb411737fe8d4d7b2df79fbf799a2dc2c9f3ad73cc9e1e43fdf8f7294")
r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000002c0)={0x49, "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"})

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x38000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="d8d0f927083ac860df72fa01a8dc0bbe7f61de549b838fb96364bddb227570ff70a091c75638b6f92b078b4f57e8e5f720aeba1e07e4fe7f5c00b5c50ff604b6fc6c0d2c55947f48e06912c9bcb87e6f78c62b115325aaa96381fc43ba7e8707f61380ca3e542a9758ed576e3300000000b080c5d6a325331e5d000000000000086e2a90f70939fb8db5b6982fa98a5c43f6db3e6266650000000000000000001642bb132e159c27010c4e8e80271fb6e7539f0f7e0549709c978ca03841669ea8737294b9e392c206e296ae083ff9940000000000000000") (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="f3ff26bd7019ff000000000000001400000000000000a6579c3dc0da9fc70ce00de8ecba17cc1de21bc1d8389144ac583a04261eb34460d1303b63ce3024ea786b9d5996f7342fa095e34eaadb804a5ae77b8fe51d44529d3284d2dd814ee1c76574674d4fa7eee5"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20084000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r2, &(0x7f00000003c0)=@other={'lock', ' ', 'none'}, 0xa)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
socketpair(0x9, 0xa, 0x2, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x9, 0x1, 0x399e, 0x24, @private1, @remote, 0x40, 0x8, 0x5, 0x83a0}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x9c}}, 0x20080010)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:25 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, 0x0, 0x0)

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x20, 0x6, 0x1f, 0x7})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/81})

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r2, &(0x7f00000003c0)=@other={'lock', ' ', 'none'}, 0xa)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
socketpair(0x9, 0xa, 0x2, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x1, 0x399e, 0x24, @private1, @remote, 0x40, 0x8, 0x5, 0x83a0}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x9, 0x1, 0x399e, 0x24, @private1, @remote, 0x40, 0x8, 0x5, 0x83a0}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x9c}}, 0x20080010) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x9c}}, 0x20080010)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0a01, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0202, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10002}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1]}, 0x80)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/167)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="89e7cc37118def316a0f9801058c249e74e38d558640dc2c3f9c552e8c29702e2a1dbea3fbb6f59b62cc07213981e698f2ae4fb411737fe8d4d7b2df79fbf799a2dc2c9f3ad73cc9e1e43fdf8f7294")
r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x4)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000002c0)={0x49, "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"})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0a01, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0202, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10002}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r1]}, 0x80) (async)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/167) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)="89e7cc37118def316a0f9801058c249e74e38d558640dc2c3f9c552e8c29702e2a1dbea3fbb6f59b62cc07213981e698f2ae4fb411737fe8d4d7b2df79fbf799a2dc2c9f3ad73cc9e1e43fdf8f7294") (async)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) (async)
ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000002c0)={0x49, "e946dabaff40f735f54e97809d94659e3f4525967e603d9d47fc0578d7234a80252d88c63114b58876a388d1f11f7be0b4617b0dca93ed3cd32ac3d9f1175b6026ea0da4d6969ed00a1b5f04bbe86051e1284500185453ae6ae2eb742c62afbb6348e4f464b8daac7828b1804336356de1689dac890a561f6f3e92f9cce4a65829b16d327c91a6a6349d1d5157698af2ae69d7696ec082650151e3f0c04fc72b7fd88605085f5d99688b231ba8222e6e29b4e7b91f77bc20879730a3943b581e789a0304ed5a52d7c83ca7b2c6c9cd6630e143f5c245b1f5c913326b4a0bb996a2591c2a52ab4e1e75f3553de810cb7b75d558768d2ef98cb3d6af32c597ae5373d5a598b6aad95254226e3cd9cd2a4d439ef81ee7e78636adbfa0bbbe253e34fe82de1e25a1c9df397bbf0d05d395211e1d2ea73561425c6d07edd34ef7c7641a586d33b56d7f020cd7b5f10d725f7911955565deb5581f6cfa115ea9ada03376f2a659de6ec51b84ee9c49ec136112632c46ba4c02d2eb075ef537b7c945ec9fcfe02ef19f1f894341269e55f61ef9f924c1fb054a7f756724a5a69feb6924c35d0e02f7802047838e40c11fd7f21135ca46d8d7f238c36403d6245c3d4fac655a935c289bc339c97a4c254835478e9e201fb6b7b9e8bc6f768a68273bb51cf017ae7b064f35e25fd9ab3470d72f570a86e771b193877b5d114883c91281fa"}) (async)

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="b545caa29d3ed89100448c3310d6f694e8fba6ff168fd2dd027b4348e1a3384726cce5f367ea398c9d5fb7e4e5fdf67c46a1cf51a21fc4555ee515cf686ac2f7e79050e1f815eba9a769a71a7f4770c991b954f3439bba03d9e415d89a73fc72cc9b009c867c418ae481b8933a6bbcf1a9fca9d01ec4df11581cb9e323c9c75897fd7eaad0645148ba7be145dd9e679ea3c487daa580e90632e38e2ffa1d34e888e2a06026679764656313387389c7e7c2b1627767e52b07d09320a8d453d24c27e5223d26d6b1dc4fb097bf4664c0e485c9a3e67a37862b8222c7a800d5012ed5d1d874e4489c9357d1d2")
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0)
write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb)

11:42:25 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1f, 0x280)
write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e6c6f630600ba775fb8100000"], 0xfffffd49)

11:42:25 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, 0x0, 0x0)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r2, &(0x7f00000003c0)=@other={'lock', ' ', 'none'}, 0xa) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
socketpair(0x9, 0xa, 0x2, &(0x7f0000000400)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x9, 0x1, 0x399e, 0x24, @private1, @remote, 0x40, 0x8, 0x5, 0x83a0}}) (rerun: 32)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x9c}}, 0x20080010) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=<r6=>0x0, &(0x7f00000002c0)=0x4)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x20, 0x6, 0x1f, 0x7}) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/81})

11:42:25 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1f, 0x280)
write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e6c6f630600ba775fb8100000"], 0xfffffd49)

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="b545caa29d3ed89100448c3310d6f694e8fba6ff168fd2dd027b4348e1a3384726cce5f367ea398c9d5fb7e4e5fdf67c46a1cf51a21fc4555ee515cf686ac2f7e79050e1f815eba9a769a71a7f4770c991b954f3439bba03d9e415d89a73fc72cc9b009c867c418ae481b8933a6bbcf1a9fca9d01ec4df11581cb9e323c9c75897fd7eaad0645148ba7be145dd9e679ea3c487daa580e90632e38e2ffa1d34e888e2a06026679764656313387389c7e7c2b1627767e52b07d09320a8d453d24c27e5223d26d6b1dc4fb097bf4664c0e485c9a3e67a37862b8222c7a800d5012ed5d1d874e4489c9357d1d2")
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0)
write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb)

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a01, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='eD')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x4000000)

11:42:25 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, 0x0, 0x0)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x5, 0xb, 0x7, 0x8000, 0x2, "1fc5b369ca20baa7"})

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a01, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='eD') (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='eD')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x4000000)

11:42:25 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="b545caa29d3ed89100448c3310d6f694e8fba6ff168fd2dd027b4348e1a3384726cce5f367ea398c9d5fb7e4e5fdf67c46a1cf51a21fc4555ee515cf686ac2f7e79050e1f815eba9a769a71a7f4770c991b954f3439bba03d9e415d89a73fc72cc9b009c867c418ae481b8933a6bbcf1a9fca9d01ec4df11581cb9e323c9c75897fd7eaad0645148ba7be145dd9e679ea3c487daa580e90632e38e2ffa1d34e888e2a06026679764656313387389c7e7c2b1627767e52b07d09320a8d453d24c27e5223d26d6b1dc4fb097bf4664c0e485c9a3e67a37862b8222c7a800d5012ed5d1d874e4489c9357d1d2")
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0)
write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000080)="b545caa29d3ed89100448c3310d6f694e8fba6ff168fd2dd027b4348e1a3384726cce5f367ea398c9d5fb7e4e5fdf67c46a1cf51a21fc4555ee515cf686ac2f7e79050e1f815eba9a769a71a7f4770c991b954f3439bba03d9e415d89a73fc72cc9b009c867c418ae481b8933a6bbcf1a9fca9d01ec4df11581cb9e323c9c75897fd7eaad0645148ba7be145dd9e679ea3c487daa580e90632e38e2ffa1d34e888e2a06026679764656313387389c7e7c2b1627767e52b07d09320a8d453d24c27e5223d26d6b1dc4fb097bf4664c0e485c9a3e67a37862b8222c7a800d5012ed5d1d874e4489c9357d1d2") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) (async)
write$vga_arbiter(r1, &(0x7f0000000180)=@unlock_all, 0xb) (async)

11:42:25 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x5, 0xb, 0x7, 0x8000, 0x2, "1fc5b369ca20baa7"})

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x10000)
ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x20, 0x6, 0x1f, 0x7})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/81})

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$VT_RELDISP(r0, 0x5605)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004080000000007c0000003f4224004800670000de2f907800000000e0000001830f2bac1414aae00000010a010101891ba8ac1e08000a01018b00000000e0000002ac141424e000000201880835730a48b04300eaf5b35b057bcdda097bb4d679d95ddd10df5e336c18b28e80c36cea40296df7cf61ace75b5579fb9340638626d14c33e5bf0faa2f0140be0387c63247198e02ef53a8c890ba681c6dc586052339ced16cf0c4f7452f6237452dc8b521cdfab7946322f1dfcbd4d086b920e29b3b85e0e5b68c6c093a6c8bcd7bcb94fb66d51792c2"]})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000)
openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a01, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)='eD')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x4000000)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009') (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x5, 0xb, 0x7, 0x8000, 0x2, "1fc5b369ca20baa7"})

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000))

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)="e530f80d661826e655f01771094878894a01745f47ba83050d245e7563cc0d7b2b59a5025791d111597b03887bfa8dbc980e2f3627adcb8be24a0813509c493fea4ead9a19aefb67471ccafdc87ce5fee83df61e94afc688221aa4c62e23e7ba7e2f860f05c2226654d5390702d6e74a065cbd46d467f80fb2ff900a27399e748eacf98964b531b5aa2370563cfe75d78015976c6cda8e2104d8edaa86f100"/170)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/85})
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x1f, 0x7d, 0x7fff})

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)="e530f80d661826e655f01771094878894a01745f47ba83050d245e7563cc0d7b2b59a5025791d111597b03887bfa8dbc980e2f3627adcb8be24a0813509c493fea4ead9a19aefb67471ccafdc87ce5fee83df61e94afc688221aa4c62e23e7ba7e2f860f05c2226654d5390702d6e74a065cbd46d467f80fb2ff900a27399e748eacf98964b531b5aa2370563cfe75d78015976c6cda8e2104d8edaa86f100"/170)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/85}) (async)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/85})
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x1f, 0x7d, 0x7fff})

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = getpgid(0x0)
ptrace$peekuser(0x3, r1, 0x100000001)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7a, 0x4)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x5e, 0xa4000)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/21)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x10001, 0x8, 0xc8c9, 0x0, 0x8, 0xfffffff9})

11:42:25 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)

11:42:25 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$VT_RELDISP(r0, 0x5605)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004080000000007c0000003f4224004800670000de2f907800000000e0000001830f2bac1414aae00000010a010101891ba8ac1e08000a01018b00000000e0000002ac141424e000000201880835730a48b04300eaf5b35b057bcdda097bb4d679d95ddd10df5e336c18b28e80c36cea40296df7cf61ace75b5579fb9340638626d14c33e5bf0faa2f0140be0387c63247198e02ef53a8c890ba681c6dc586052339ced16cf0c4f7452f6237452dc8b521cdfab7946322f1dfcbd4d086b920e29b3b85e0e5b68c6c093a6c8bcd7bcb94fb66d51792c2"]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) (async)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000)
openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

11:42:25 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000100)={0x9, 0x1f, 0x4})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getpeername$llc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000))

11:42:25 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = getpgid(0x0)
ptrace$peekuser(0x3, r1, 0x100000001)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7a, 0x4)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x5e, 0xa4000)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/21)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x10001, 0x8, 0xc8c9, 0x0, 0x8, 0xfffffff9}) (async)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x10001, 0x8, 0xc8c9, 0x0, 0x8, 0xfffffff9})

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)="e530f80d661826e655f01771094878894a01745f47ba83050d245e7563cc0d7b2b59a5025791d111597b03887bfa8dbc980e2f3627adcb8be24a0813509c493fea4ead9a19aefb67471ccafdc87ce5fee83df61e94afc688221aa4c62e23e7ba7e2f860f05c2226654d5390702d6e74a065cbd46d467f80fb2ff900a27399e748eacf98964b531b5aa2370563cfe75d78015976c6cda8e2104d8edaa86f100"/170) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/85}) (rerun: 32)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x1f, 0x7d, 0x7fff})

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))
ioctl$VT_RELDISP(r0, 0x5605)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004080000000007c0000003f4224004800670000de2f907800000000e0000001830f2bac1414aae00000010a010101891ba8ac1e08000a01018b00000000e0000002ac141424e000000201880835730a48b04300eaf5b35b057bcdda097bb4d679d95ddd10df5e336c18b28e80c36cea40296df7cf61ace75b5579fb9340638626d14c33e5bf0faa2f0140be0387c63247198e02ef53a8c890ba681c6dc586052339ced16cf0c4f7452f6237452dc8b521cdfab7946322f1dfcbd4d086b920e29b3b85e0e5b68c6c093a6c8bcd7bcb94fb66d51792c2"]})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000)
openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)) (async)
ioctl$VT_RELDISP(r0, 0x5605) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004080000000007c0000003f4224004800670000de2f907800000000e0000001830f2bac1414aae00000010a010101891ba8ac1e08000a01018b00000000e0000002ac141424e000000201880835730a48b04300eaf5b35b057bcdda097bb4d679d95ddd10df5e336c18b28e80c36cea40296df7cf61ace75b5579fb9340638626d14c33e5bf0faa2f0140be0387c63247198e02ef53a8c890ba681c6dc586052339ced16cf0c4f7452f6237452dc8b521cdfab7946322f1dfcbd4d086b920e29b3b85e0e5b68c6c093a6c8bcd7bcb94fb66d51792c2"]}) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) (async)
openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
r1 = getpgid(0x0)
ptrace$peekuser(0x3, r1, 0x100000001) (async)
ptrace$peekuser(0x3, r1, 0x100000001)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7a, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7a, 0x4)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x5e, 0xa4000)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/21)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x10001, 0x8, 0xc8c9, 0x0, 0x8, 0xfffffff9})

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000))

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'nr0\x00'}})

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000001c0)={0x2, 0x8000, 0x98, 0x8, 0x5f, 0x2})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)="ca6856197bf637c9a7b6f8937922557d41a41d4f6064c0cf439d193607a9b518562224f5d1800fd6e7919f1e2e5a3381dea9930569a646d81ca64fcc4a7c6ca08d2f0624308354b64dc7c8ab38799f8dfd6d5dc9caf06c97469dc26fd3e575b717cc929a22ecdb6b6da8a79e888e730b3ef73462d0110bb70a720d63ddbb9b799d3bef9e35d81d2234be269403a18211fd8ca380d623")

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4000)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080))

11:42:25 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)

11:42:25 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0xb9b4f060f27a024f, 0x200, 0x5, {{0x17, 0x4, 0x3, 0x4, 0x5c, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0xc, [{@empty, 0x9}]}, @lsrr={0x83, 0x7, 0x98, [@private=0xa010101]}, @generic={0x89, 0x8, "d47103a982af"}, @ssrr={0x89, 0x13, 0xf6, [@multicast2, @empty, @loopback, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x56, [@multicast1]}, @end, @generic={0x86, 0x10, "beb509a1cb22fdbb554bc3a39249"}]}}}}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async, rerun: 32)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'nr0\x00'}}) (rerun: 32)

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4000) (async, rerun: 32)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async, rerun: 64)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (rerun: 64)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080))

11:42:25 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)
pipe2$watch_queue(&(0x7f0000000080), 0x80)

11:42:25 executing program 1:
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x430a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:25 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async, rerun: 32)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'nr0\x00'}}) (rerun: 32)

11:42:25 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x4000) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080))

11:42:25 executing program 0:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)="e530")
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180))
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x86, 0x8, 0x6})
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x401}, {0x8, 0xffff}, {0xff81, 0x2}, {0x0, 0x5}, {0x22b8, 0x9}, {0xa357, 0x14a}, {0x100, 0x3}, {0xfffe, 0x6}]})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)

11:42:25 executing program 2:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x210c00)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x24040800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x4, 0x0, 0x1, 0x4}}, 0x2e)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9")
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x5, 0x7, 0x2, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8000, 0x7, 0x81, 0x81}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb0}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x20008010)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000440)='system_u:object_r:clock_device_t:s0\x00', 0x24)

11:42:25 executing program 0:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)="e530") (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180))
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x86, 0x8, 0x6}) (async)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x401}, {0x8, 0xffff}, {0xff81, 0x2}, {0x0, 0x5}, {0x22b8, 0x9}, {0xa357, 0x14a}, {0x100, 0x3}, {0xfffe, 0x6}]}) (async)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)

11:42:26 executing program 2:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x210c00)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x24040800)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x4, 0x0, 0x1, 0x4}}, 0x2e) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x5, 0x7, 0x2, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8000, 0x7, 0x81, 0x81}}) (rerun: 64)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb0}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x20008010) (async, rerun: 64)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000440)='system_u:object_r:clock_device_t:s0\x00', 0x24) (rerun: 64)

11:42:26 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = getpgid(0x0)
ptrace$setopts(0x4206, r1, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0)

11:42:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0xb9b4f060f27a024f, 0x200, 0x5, {{0x17, 0x4, 0x3, 0x4, 0x5c, 0x64, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xd2, 0x3, 0xc, [{@empty, 0x9}]}, @lsrr={0x83, 0x7, 0x98, [@private=0xa010101]}, @generic={0x89, 0x8, "d47103a982af"}, @ssrr={0x89, 0x13, 0xf6, [@multicast2, @empty, @loopback, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x56, [@multicast1]}, @end, @generic={0x86, 0x10, "beb509a1cb22fdbb554bc3a39249"}]}}}}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:26 executing program 0:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)="e530")
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180))
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x86, 0x8, 0x6})
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x401}, {0x8, 0xffff}, {0xff81, 0x2}, {0x0, 0x5}, {0x22b8, 0x9}, {0xa357, 0x14a}, {0x100, 0x3}, {0xfffe, 0x6}]})
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)="e530") (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000180)) (async)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x86, 0x8, 0x6}) (async)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x3, 0x401}, {0x8, 0xffff}, {0xff81, 0x2}, {0x0, 0x5}, {0x22b8, 0x9}, {0xa357, 0x14a}, {0x100, 0x3}, {0xfffe, 0x6}]}) (async)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async)

11:42:26 executing program 2:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x210c00) (async)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x24040800) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x4, 0x0, 0x1, 0x4}}, 0x2e) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="d8d0f9") (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x5, 0x7, 0x2, 0x40, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8000, 0x7, 0x81, 0x81}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb0}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x20008010) (async)
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000440)='system_u:object_r:clock_device_t:s0\x00', 0x24)

11:42:26 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)
pipe2$watch_queue(&(0x7f0000000080), 0x80)

11:42:26 executing program 1:
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x430a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:26 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', <r1=>0x0, 0x700, 0x7800, 0x3, 0x80000000, {{0x23, 0x4, 0x2, 0xc, 0x8c, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @lsrr={0x83, 0x1f, 0x14, [@rand_addr=0x64010100, @private=0xa010100, @private=0xa010101, @multicast1, @broadcast, @empty, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0xc, 0x40, 0x3, 0x3, [{@remote, 0xcc97}]}, @generic={0x0, 0xb, "9c93f3c5ec77f07a2a"}, @timestamp={0x44, 0x14, 0xdc, 0x0, 0x8, [0x10000, 0x2, 0xe7, 0x0]}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x6, "d3227b37"}, {0x5, 0xc, "57dedebb1ab9871b705a"}, {0x2, 0x4, "bd09"}, {0x2, 0x4, "018b"}, {0x5, 0x3, "f3"}, {0x6, 0x6, "e58b9af6"}]}]}}}}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0xa, 0xd, 0xb, 0x2, 0x4}, @generic={0x1, 0x6, 0xe, 0x3a, 0x3}, @ldst={0x2, 0xef01d56df4d6e3de, 0x3, 0x3, 0x0, 0xfffffffffffffff0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x82, &(0x7f0000000200)=""/130, 0x40f00, 0x6, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x7, 0x10001}, 0x10, 0x2bf28, r2, 0x0, &(0x7f0000000380)=[r3]}, 0x80)

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x137002, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/72, 0x48)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x1ff, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="e5305ed956d483b7e3e0eca39a579897907107341a61cdd7b57771264b2ba8c29eb02064d8014f26006319cebfd6ce837fefd4289391294bc30281141f")

11:42:26 executing program 0:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x137002, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x137002, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/72, 0x48)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x1ff, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="e5305ed956d483b7e3e0eca39a579897907107341a61cdd7b57771264b2ba8c29eb02064d8014f26006319cebfd6ce837fefd4289391294bc30281141f") (async)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="e5305ed956d483b7e3e0eca39a579897907107341a61cdd7b57771264b2ba8c29eb02064d8014f26006319cebfd6ce837fefd4289391294bc30281141f")

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x137002, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/72, 0x48) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 32)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x1ff, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_UNISCRNMAP(r3, 0x401c5820, &(0x7f0000000180)="e5305ed956d483b7e3e0eca39a579897907107341a61cdd7b57771264b2ba8c29eb02064d8014f26006319cebfd6ce837fefd4289391294bc30281141f")

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) (async)

11:42:26 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = getpgid(0x0)
ptrace$setopts(0x4206, r1, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
getpgid(0x0) (async)
ptrace$setopts(0x4206, r1, 0x5, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0) (async)

11:42:26 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = getpgid(0x0)
ptrace$setopts(0x4206, r1, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0)

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) (async)

11:42:26 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = getpgid(0x0)
ptrace$setopts(0x4206, r1, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
getpgid(0x0) (async)
ptrace$setopts(0x4206, r1, 0x5, 0x0) (async)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0) (async)

11:42:26 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)
pipe2$watch_queue(&(0x7f0000000080), 0x80)

11:42:26 executing program 1:
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x430a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:26 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', <r1=>0x0, 0x700, 0x7800, 0x3, 0x80000000, {{0x23, 0x4, 0x2, 0xc, 0x8c, 0x67, 0x0, 0xff, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @lsrr={0x83, 0x1f, 0x14, [@rand_addr=0x64010100, @private=0xa010100, @private=0xa010101, @multicast1, @broadcast, @empty, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0xc, 0x40, 0x3, 0x3, [{@remote, 0xcc97}]}, @generic={0x0, 0xb, "9c93f3c5ec77f07a2a"}, @timestamp={0x44, 0x14, 0xdc, 0x0, 0x8, [0x10000, 0x2, 0xe7, 0x0]}, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0x6, "d3227b37"}, {0x5, 0xc, "57dedebb1ab9871b705a"}, {0x2, 0x4, "bd09"}, {0x2, 0x4, "018b"}, {0x5, 0x3, "f3"}, {0x6, 0x6, "e58b9af6"}]}]}}}}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0xa, 0xd, 0xb, 0x2, 0x4}, @generic={0x1, 0x6, 0xe, 0x3a, 0x3}, @ldst={0x2, 0xef01d56df4d6e3de, 0x3, 0x3, 0x0, 0xfffffffffffffff0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x1, 0x82, &(0x7f0000000200)=""/130, 0x40f00, 0x6, '\x00', r1, 0x0, r0, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x7, 0x10001}, 0x10, 0x2bf28, r2, 0x0, &(0x7f0000000380)=[r3]}, 0x80)

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/106})

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/106})

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/106})

11:42:26 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3af8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x131c}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa42}]}]}]}, 0x94}}, 0x56d03a7142a8247f)

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x472ac1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:42:26 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x472ac1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x472ac1, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)

11:42:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = getpgid(0x0)
ptrace$setopts(0x4206, r1, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x84, 0x1, 0x7, 0x0, 0x8, 0x5204, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x20, 0x80000001, 0x5, 0x7, 0xfd84, 0x1ff, 0x8, 0x0, 0x70b, 0x0, 0x3}, r1, 0xa, r0, 0x0)

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x472ac1, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:42:27 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xcda, 0x4000)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x3, 0xff, 0x6, 0x7f, 0xd0})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x32a}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x933}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3af}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000000)

11:42:27 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)

11:42:27 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdffc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x553c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4008040)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:27 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x400000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0xb29, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8080)
getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

11:42:27 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xcda, 0x4000)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x3, 0xff, 0x6, 0x7f, 0xd0}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) (async, rerun: 32)
r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x32a}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x933}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3af}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000000)

11:42:27 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3af8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x131c}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa42}]}]}]}, 0x94}}, 0x56d03a7142a8247f) (async)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3af8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x131c}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa42}]}]}]}, 0x94}}, 0x56d03a7142a8247f)

11:42:27 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xcda, 0x4000)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x3, 0xff, 0x6, 0x7f, 0xd0}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x32a}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e86}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x933}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3af}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000000)

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="944b629e", @ANYRES16=0x0, @ANYBLOB="010030bd7000ffdbdf25020000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x200088d4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000440)={0x2, 0x0, [0x0, 0x0]})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a8, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x275}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80c8}, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="944b629e", @ANYRES16=0x0, @ANYBLOB="010030bd7000ffdbdf25020000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x200088d4) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000440)={0x2, 0x0, [0x0, 0x0]}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a8, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x275}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80c8}, 0x0) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (rerun: 64)

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="944b629e", @ANYRES16=0x0, @ANYBLOB="010030bd7000ffdbdf25020000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x200088d4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000440)={0x2, 0x0, [0x0, 0x0]}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1a8, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x45c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x275}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4d0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80c8}, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/72)

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/72)

11:42:27 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})

11:42:27 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdffc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x553c}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4008040)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:27 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c000000100000000000000700000000060000000000000a00000000030000000000000a000000000c0000000000000915000000005f5f0000611e5f5f2e00"], &(0x7f0000000100)=""/76, 0x54, 0x4c, 0x1}, 0x20)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/173, 0xad, 0x0, &(0x7f0000000280)=""/125, 0x7d}}, 0x10)

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x80) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/72)

11:42:27 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3af8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x131c}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa42}]}]}]}, 0x94}}, 0x56d03a7142a8247f)

11:42:27 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000950000000009000017df0000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBLED(r1, 0x4b65, 0x9)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000950000000009000017df0000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDSKBLED(r1, 0x4b65, 0x9) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (rerun: 64)

11:42:27 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000950000000009000017df0000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDSKBLED(r1, 0x4b65, 0x9) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1cb81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1cb81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1cb81, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530") (async)

11:42:27 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1cb81, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000580)="e530")

11:42:28 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})

11:42:28 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})

11:42:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c000000100000000000000700000000060000000000000a00000000030000000000000a000000000c0000000000000915000000005f5f0000611e5f5f2e00"], &(0x7f0000000100)=""/76, 0x54, 0x4c, 0x1}, 0x20)
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/173, 0xad, 0x0, &(0x7f0000000280)=""/125, 0x7d}}, 0x10)

11:42:28 executing program 3:
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)={0x4, "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"})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x7, 0x152, 0xe39, 0x1ff, 0x401})
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000080), 0x4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
connect$llc(r1, &(0x7f0000000580)={0x1a, 0x110, 0xff, 0x6, 0x1, 0x4, @local}, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x1, 0x4, 0x9f60f6b4fec46517, @loopback, @remote, 0x10, 0x700, 0x7ff, 0x4}})
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x0, 0x2e22})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x48, r5, 0x100, 0x6, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}]}, 0x48}}, 0x80)
sendto$llc(r4, &(0x7f0000000380)="98ef6c77671ff34365db6c707ec7357c47227a5afa678e8458585245f9e9dab9f80152f5f5942fb2641383d8d91dc9b3f287cd633f008ae940a964e66f759e0fed7df0c30cebe7ff14763660d0155bc76269f504bec002407a8efacda33b172ee60dc3246c1d56c16c58a83f6347d0c92c8ff783497fc0843f04fe8a19e73c2cf9a0eed9ee07eb8df3a688bf7be84d58b77f4b46236117cb1743c455c49fa77db6f53de8baeb3fd122d264a97c4c29c6753fed0efd1745b3c4", 0xb9, 0x44000, 0x0, 0x0)

11:42:28 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x9, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000100)='\x00\x00\x00\x00\x009')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0x82, 0x10, 0x6, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x700, 0x93, 0xaee}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x8, 0x2, 0x6, 0x4, r0, 0xdb, '\x00', r2, r3, 0x1, 0x0, 0x5}, 0x48)
timer_create(0x6, &(0x7f0000000080)={0x0, 0x1, 0x4, @thr={&(0x7f0000000140)="3fa00a15348818bac8c1512a09518505aece27fdb2a4e7e348b10206904b015dd9374124dabed1d5d20aa92099c732c786b513000572a0f8d295bbe65d07729886cc4f95427d7f44a1bb8ef8b473b09dae2f0ee94848cf731cecc62f111b707d673c750b6be527704e8599e3096727f8936b1040326b1200d9bc6bcf4b397e0a09795446f904057e25f4a5", &(0x7f0000000000)="c8e6"}}, &(0x7f00000000c0))

11:42:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)

11:42:28 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_RELDISP(r1, 0x5605)

11:42:28 executing program 3:
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)={0x4, "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"}) (async)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x7, 0x152, 0xe39, 0x1ff, 0x401}) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000080), 0x4) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
connect$llc(r1, &(0x7f0000000580)={0x1a, 0x110, 0xff, 0x6, 0x1, 0x4, @local}, 0x10) (async)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) (async)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10, 0x0) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x1, 0x4, 0x9f60f6b4fec46517, @loopback, @remote, 0x10, 0x700, 0x7ff, 0x4}}) (async)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x0, 0x2e22}) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x48, r5, 0x100, 0x6, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}]}, 0x48}}, 0x80)
sendto$llc(r4, &(0x7f0000000380)="98ef6c77671ff34365db6c707ec7357c47227a5afa678e8458585245f9e9dab9f80152f5f5942fb2641383d8d91dc9b3f287cd633f008ae940a964e66f759e0fed7df0c30cebe7ff14763660d0155bc76269f504bec002407a8efacda33b172ee60dc3246c1d56c16c58a83f6347d0c92c8ff783497fc0843f04fe8a19e73c2cf9a0eed9ee07eb8df3a688bf7be84d58b77f4b46236117cb1743c455c49fa77db6f53de8baeb3fd122d264a97c4c29c6753fed0efd1745b3c4", 0xb9, 0x44000, 0x0, 0x0)

11:42:28 executing program 3:
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)={0x4, "80be882c7c8f594a488a17318468382fd5caa76716ac498f540f0984fc1bc859eb9a5d4da82646b12825a7440c7ea7f49aef9d736b237962286bf466305205f157f7335c02e06853a9272eb7acbd25d1a75d79aadd225d9fa775148f4e3d9533c8dcf767f3cffe6782908fea48fd8780c2c46b40c5489e5706cf960ad537bc3e8fbe567f4c4e66c2719c70c0510e94000d0c80ea5d5b6b0922d1aaa34be255e0a38c0ee1e0353f8557fb74fcddf5ec4bde37130564dcc667581a13471be52ad85b5d93c744862ff5c222939d16215ffc27ca84de184d8c73b5d30290bcab0d8f348da02d8955955c237e3cff5f9597f84ce32227d0f3e97c7005d03343a970ea8cd179a49c5b797b90006a23e3b4a5e6beb9c6ca65ef167526c546c7dd0a210467813ce8e127336018a81618ddcf7321e012e52528f0a13d57ce3b0a840b87a8b9b6ad0269d6815d9d687e4c06cb6981203769e01c54c66365bf3fa3b2b72949cfce4923cccc73525f7108a3f8a955e031ac247cf46605c1667f18ee7662267cbb35d33fce6ea0c09a9053f679cf2c47d0a187397fe883d171362c30e11ae5962cdde2598aadb1426abbf7e6cce4023b4b5d62f5a03ffb256552a0bc63bf0f5d6624e334add2c0a5a9e239c55a06230606e0a88472042ee830600d151a55e6a5c846588e860455c91291f70fe7c3f1688dc85f4d8ffb5e05fab84a1971e1e725"})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x7, 0x152, 0xe39, 0x1ff, 0x401}) (async)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000540)={0x7, 0x152, 0xe39, 0x1ff, 0x401})
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000080), 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
connect$llc(r1, &(0x7f0000000580)={0x1a, 0x110, 0xff, 0x6, 0x1, 0x4, @local}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) (async)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x1, 0x4, 0x9f60f6b4fec46517, @loopback, @remote, 0x10, 0x700, 0x7ff, 0x4}})
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000000)={0x0, 0x2e22})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x48, r5, 0x100, 0x6, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}]}, 0x48}}, 0x80)
sendto$llc(r4, &(0x7f0000000380)="98ef6c77671ff34365db6c707ec7357c47227a5afa678e8458585245f9e9dab9f80152f5f5942fb2641383d8d91dc9b3f287cd633f008ae940a964e66f759e0fed7df0c30cebe7ff14763660d0155bc76269f504bec002407a8efacda33b172ee60dc3246c1d56c16c58a83f6347d0c92c8ff783497fc0843f04fe8a19e73c2cf9a0eed9ee07eb8df3a688bf7be84d58b77f4b46236117cb1743c455c49fa77db6f53de8baeb3fd122d264a97c4c29c6753fed0efd1745b3c4", 0xb9, 0x44000, 0x0, 0x0)

11:42:28 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001080))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000010c0)={0x5, 0x80, 0xffffffffffffffff, 0x10001, 0x20})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="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")

11:42:28 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})

11:42:28 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})

11:42:28 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (fail_nth: 1)

[ 2276.909135][T21568] FAULT_INJECTION: forcing a failure.
[ 2276.909135][T21568] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2276.922533][T21568] CPU: 0 PID: 21568 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2276.933235][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2276.943327][T21568] Call Trace:
[ 2276.946603][T21568]  <TASK>
[ 2276.949558][T21568]  dump_stack_lvl+0xda/0x130
[ 2276.954178][T21568]  dump_stack+0x15/0x20
11:42:28 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001080))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000010c0)={0x5, 0x80, 0xffffffffffffffff, 0x10001, 0x20}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="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")

[ 2276.958368][T21568]  should_fail_ex+0x21f/0x230
[ 2276.963140][T21568]  __alloc_pages+0x108/0x340
[ 2276.967846][T21568]  alloc_pages+0x3e1/0x4e0
[ 2276.972299][T21568]  ? vcs_lseek+0x280/0x280
[ 2276.976772][T21568]  __get_free_pages+0xc/0x30
[ 2276.981435][T21568]  vcs_read+0x43/0xa00
[ 2276.985590][T21568]  ? fsnotify_perm+0x32d/0x370
[ 2276.990386][T21568]  ? vcs_lseek+0x280/0x280
[ 2276.994896][T21568]  vfs_read+0x192/0x560
[ 2276.999106][T21568]  ? __fget_files+0x1c4/0x200
[ 2277.003903][T21568]  ksys_read+0xeb/0x1a0
[ 2277.008114][T21568]  __x64_sys_read+0x42/0x50
[ 2277.012653][T21568]  do_syscall_64+0x41/0xc0
[ 2277.017136][T21568]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2277.023151][T21568] RIP: 0033:0x7f4d947720f9
[ 2277.027581][T21568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2277.047216][T21568] RSP: 002b:00007f4d93ae5168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
11:42:28 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001080))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000010c0)={0x5, 0x80, 0xffffffffffffffff, 0x10001, 0x20})
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="23d15c864612ce2a9d46d25d3fe042be8938f75babc01b23f51a5e45de3bc2e4c206c3c92da60d80c9bfabfcf2c7c1e2874829986041d9c2cfd68675fa30c8e3cebaa89a5efb14dbe6cce57a36e1dbdb21430bb812929390bd10c0ce031011af56049cb0c11bb4aa3ce1e4f0ac2d805c906d9763988b2b572b63b517ad24a5b173b4e3c7321a7c03cec504894492bcb28ae751c6aad647e60bbd6aef5694fdf8eacf8b496431d686918bc539f41658ec12761529649443063453ddde5dfd17634927054dc723b79569dd90eec254234c59fe7e4ff89f9a9af7b544bb057ea09f3a60a24fb26731fb023049ec90689e64790ec97b84d070dc4af38172cb0bf3ad0744d4f7e48bbe1a6775af71adf2f6cb26db741857094303dfe107a326f5e0aa3ab6249fed1743dd04986f0b1389554e60080f09f8c1aa92c7bc31f770b2fe5873bc11336a895df596e6454a204aa13196cb3094a27a451ef70b8b2563f07130cccd7fc3a3dd60a7d04e796b39a40732b4f631333d54f1fa1194f1cd667c27d7ab6d2c4aeee9eee2f1d43a837b85b5ad3396e7125ce5f3d9b99a4002be7e55047629e8bb10e427f77d87f75163d3f6e414759f03aeb0d95c9c350b40c08a1eef69ab3451b8b1b1371ff5e095c1562ab0e40e56ddcacc32401381813cd4e07c6338bc14c275fd03f563d1b55b88ce72259516fdfb46b73790ad27ac292214d35a4562680e4c4db04da57dee3e3b39ed74a684dc12a765d2e27f68d5a6159253ce87c7b2196cf3e7cc4b341cc0fa02963ee0ef4dd57b69908f2fc43249b590d1eb2d50ef353f607c08f3bb4db51ae367df4069466bdc81bf1d0bec49605d2ee7c403f25276a671a4e264ca69ca06a5affa69c3292b84be0155c22f9457a7fc88ca3978bf5ed94bd5bbbabc90e494285eaf1fd5058c8cc8acbeb8784a35b443698468dc31450e71c1daa59f1476e39959764782e1fa4ea474e4073e56fb6275834ce9b126601e635b153e8025b86d40e7af5c000ecddce308dc9bd40d8eb967079e64c8d588f746cf0106170bc6ce9193074b8982be99bce40eb3cec10cf085c75cf42060612d1d3dc81c7260a03f7a00e5d05b8ccca38f53e5a1825b4c3c529c379cacd1a4365ffa3cbf0f5798fb39dfadcd0517aab9068ede8290f0223e9aa2d09e823fff3dad6593c079b0c3b253f44afaf6cc7306b03dc6fb742e18c00d906f2414612bf69b9b2792bb5ef65354fa0e9f770baa7fe97484c46c6d90bfe74feab08d621642c79c06ee323aa7e1fc4be8d34882b82083de9c77ebb400969280d26b31097015eabd42a4fec36b7f5575ff509870d3bf548fb8e631c5786755ca2544c74585d8ae4c453381a9909f6aa737421ae464b4105d6da9304d8b349518931c894bfdb6cbc6fab1d55888146f143b344cdb326eeb1f889b461aca4424950930334593a3c1b46196aa2024dfe66adbd293230e12067ad9fd27b2212b5e6a6a9105ad457e55c673db82171ca266038145f2899b7168a00dbe414c2c78779c1769e1c88ca8bcfcf1b037eb79f0b1bf38e79b7e86b6743e12bb6ca2d3d785ae3aad620518c1b7fde244eab26951ad8237f300270890c97d1b8f67617489a62381d55290779d67b6c0b9e02c6893562530dafe63de80d357ccca217cef37b2e87839c27ec1199c8cd158c4a0cee4fd72c13cb29ce5f2d507c92fed5e2199671978f2a20f17446437f4834ffbcb1e165034e86df2ca44d9040e74c7d9518d2734e0af0279bdb089cb172a3a14e2b4934438682215d7c663897f73fb0a0dcc7df37c176592eaa32fc5c528afbdfe639e9add8c112e933817a6bba0eca582996233548cf8f342716d1bb85a22e02062130ec76aa0d28a2886316148e810d183a90567491b7b81e24169a625ca071bbd0b7fe8a1eca062498ccbb0c07143dcfeb70db45847fdaca3f33c5a851b0de24ed86b7e96392fa9a7159d9f659f36eebceee41ee3c5a55d678b063d2be7005cad6953f087edfc497e2b453850aa026b023527c3b219fda18ce56717457ae42e432cfde26e053684725763884686dd61db756d96d69ddd93808efc99848de4b1759475b9f0fd4c8f00b9e9fb61f1dfbbb26e0101c24b843592e0dff241af6fba4dd810082832bb99418e264303de3aaa753466af6971932bc284a52d7d36678a62417d44158839523e33e8abf6ed2824532ec4dfa4d2970741845dd93d497d44ec419a766f705da852cfdac5e8a8ae14b57aa62a50b59e8955ef81e337a071244098e53ab4254ee96c02ca05ed3f944c3f5315af1be67f4323fdee615ae09622c26993df487c560fb21dcd3a82383d3941b842fc84437eadfe6e8878217cbcd955bf7029116d6116c50799c57e771378d44a81bdd15079a4067a1df6703c23f31cc26d0e5f319fb315caf82284e84dbcb3f266ab45741df73b703aa772f9f02f0e5eac6097fda66e5cfea98c01e6026e5898154b0b8074eaf6b779a3dc8d597211d89edbff252a0509e9aca913bd9fa76d355049cba7f3d436ce607e08a3ac1fa8e7f5a26205568500c94dd51bdc5700f27cba6fe6259f7db675286bfbf2b9463aa363ad4d979cdbe04693d1a1169b0a6c21214a78e82e0d321ee604fffc8a62a8fab20f4d668d64ecdf6ff4de42ad3ea23415fc9f460ff21832c7f2b5aa3ef8eada30a2c14a79b75bc9b98e4e00623085f5bd1fd83bbec87cced6275d62589f4c4f80ad9d57cda7342fd0d061324d40825b27ba458cee44572faebf8f8592d184533222a972b2c231d12add67b31822ab2976c6565cdd43a752257d3e91ca9c941e70fce5751dc50dd90f9f47a9e8ac1ef27d90263c5a0ef9633cd4730142afd8ab899d3808caf2163cefca4ddff85ba8399b51f4fcc6b6eb7000f224f8ebe2d36a18bf4e012b652b9a56a605e5048894157ecb403f98d713fc63d263008ecd956736aa6c33b5a036a071895cdaae6cb53ca425f8d1cc2ebcc038d48010d0e8e27c294a7c3482709b5861e9e33aa700970eaa1b80e0914fe9920ded2a45cd107f1f782b85d9984e2600debedfddce9126aeb9d5745851bb3cb8a3f6d8cb454f711f6b2c9035e411975794bed00b770e19f37ad1633be02397b5120871d2578ed86795dbdf93755b4622359bff23d2d1259a034d0829b6d5bf1f3385befed6db8c3f09be42ad6b8f60748ca7b57bca0b55d71bf54063221b339551311b03823e6b8e1c8efd875320169228ba4b877a17f959685aedb2add16d33325f0771d2151d1647fa8294afdc80e39384da72b49fd43a165e336bf967d56642c9a0f51413e6417615c9e7adf5d6bc8864b8656fe666abb3412be11dab57b0434d17b54dc0445317a34a22d6d51769694c9220b73d1e32c5f4f16f08b83efcd7698d8f5a4fe78db00c20d7659119366729c98246bf8d398e5f5025564fc44f6bd9b098240934895b066c11333101cf8a440c73d6b1709369e415be42162f7e5c93bb5b6e1f09cb02c737f0a0cd0307a9f14a1f11f9c2ee643521ef858d8d0d14ea463d1bbcab553cc49882e0119f79ae8285212e5cd0495ee1fa0175e85e369ce90a0e1a175bd584b84c0e0b564b0465b264694405999348621bebcbab50c451b740de58ff6b2b7b12cd9f74dea298119a1320947e3f94dd9e565fd7572ea660d116a50e49bd4537fbd351300640e505897288a2320663d19c5223f5a6581291fb66fb144792ef48eb4af5d433e8477b912c1010f5f9dfa40c9f11d9c146185b8e457d028ba837f213f61dd5345395a3dd4f9217ef656559f14bb9af798d7c09ca29584fdb27c4e4fb9205c68def35d8c7b35e04d945d9af54d7393ff0f23aa40b54dd5cb82d99dee618982fde6f91683fce635b052db3e783a8c840895f10f4d337172f91193b19ea0eb93dac8e6bccf3c815ce426b652bb01ce93d1cca426f864eca70a07c3c76ee16df120d3ff2f56cf5811d340bd5a7e7f42c31a30b5e0cd785bbf71d6c2e6e27f5904612cd856050db13af7e996e79843b837534fed61dcf98eafb20bd48531f4bc2ef38cbbb4d164de0b16320d93b775ff56c649c9217218df4c60ec123f2cf24a5430c3981cddd83e1130ea0fb49369df7c741671aa78303ff252e0c41da27a04fee5aa5d99c3600fa1dd7c6be95267fef85ab9a955e43d364a5fe30db7b22d8f9ae853516e0c12f993eb587da060fddb0b11e3d3383f07c001f482c5d7cfa77ae0f57595c87362b0c1a7aebf38ed05521516dda47faf5cf28b34392dec0085a0e5a59c0c639be567dd7bdcba79a6a10650802fbf9447d8bec1e03ccc76b98c2501b3fec55867cfa247ce033e6218cad59f5428b9b86b1c764a026000d9dded895fa35aab44f56f697b5ba0bd1648f177b1ed420e16fa78df7cf5bd4d53211061c9414aeac58a3f0c746cc6a1c2a4d21c0aa4e6f67a5572567f80c39a49187866b4cb86802457b8ad1f95fa109850dbaf05193d08b390ebbdce07e3a1c0d17d512d569da78b5bba3977e65c2e9df308678a61c0005abb3dc0f43db1dfdb96977b0f6c590a01ed0cb7597ac620278cd45cea00698c71247bd44e0d1a4cfc65005b1e49966b9c5af008df61828d1691c0b5170566fb5eaccb42e98c3b1dd0784ed2b55a4027e244a88e61818a8ebd00cc10987e8d6c9916316a559fe81afa32d70d6f2f837d4c1f8dc8fc664dc7b1b43d101400d7a9060db5956dcaa7a12cc3924dc3765d3f3db55142369cedae79045a7181e59459e88876e2628cef625bc72495527ad3fecd438bc5c393bc0ff864ffb44395f571d32a66e6167c209e10b412c33cde94064d49ad8429c03e1e08c86b4b80e571674d9cb3782ee668e0f317b9e01021e1931dc14216a5a79edb4a1499a4b47d340f8484da59fb73cad16082af376b072d84e1cf8938d7264b45875185fe4149258a8c1abc5928358cf54d29d7389dad98766a49528d05381ccee056447ccf34bb40d3cc8af26bc025902f80a6cfaab15300cebebc7d1065e814703867472d7f03961c1f8ae2de548f4240ea9056f8fbdfeb78bc1fd555be0d987be80de22f5302bbac43ef8fbd8f3c1597693f2e159996a01c68ce873d1c79d09e2225a754a12accee9aa7dc766fcad9aefeb540172df1f7f5ddf0545e3f3769190ccd7525723a684696024db5f06022b97489f168425b4dd992dcaea429ba82a6db89a22755985c7159cfe79699c117fbe641baeedb90c66cbcf62ec3cf938f29f48f7bcd5220089d86a0bf1c52e4f1fc5a8652f5ff580989b3914eb6c2158d8642aeb9dc520d97da542608c99ac0945e0fb83ab9c7d949d234b7cbef1256154618d8dc41dab65c1755f71094f8d9eda05db761d36cdc469c8e05f2d8c7feb38337f821217ac1bdbbfc7fa0aac235c3bb07a376a38689057318d6d45d9474b6cf15377a676278410fe4805de2600b09fd8c331c2bc5be9f16ac5ccef1300c42a7582e46238c94e54ce7aba813682a4a48dd04db0194d91d118719195df0fe87da6b1f4dce949a8b1e373845f4465a219bf00a3ca4a8ff7687c45f0ea403c821e6f694ae024feb515b9f283a694bdad75639295d288494d611c2abf68484384a2c5657d3a07325895ed39f58abb331ff465e89d1e69150fd5c195c6452c862dd66fc1ec9e8eb613b33f099a7bae75026319915db9860684ae187e84fc8f7b8c95cc94b39203b2f26e685acd6b25803592cf008e90e336dd41d597cacb833c413f23a026bef176c50cb76d7f16693a95f46326f63384effa38d453556d6f607cd2540f")

11:42:28 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_TID={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x884)

[ 2277.055722][T21568] RAX: ffffffffffffffda RBX: 00007f4d94891f80 RCX: 00007f4d947720f9
[ 2277.063744][T21568] RDX: 000000000000006f RSI: 0000000020000080 RDI: 0000000000000003
[ 2277.071723][T21568] RBP: 00007f4d93ae51d0 R08: 0000000000000000 R09: 0000000000000000
[ 2277.079758][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2277.087731][T21568] R13: 00007ffce00ea8ef R14: 00007f4d93ae5300 R15: 0000000000022000
[ 2277.095812][T21568]  </TASK>
11:42:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x1, 0xfffffffc, 0x54, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, {[@noop, @noop]}}}}})

11:42:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x2, 0xe6a, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x19, 0xffffff4d}})

11:42:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (fail_nth: 1)

[ 2277.384052][T21584] FAULT_INJECTION: forcing a failure.
[ 2277.384052][T21584] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2277.397389][T21584] CPU: 1 PID: 21584 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2277.407987][T21584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2277.418127][T21584] Call Trace:
[ 2277.421408][T21584]  <TASK>
[ 2277.424351][T21584]  dump_stack_lvl+0xda/0x130
[ 2277.428991][T21584]  dump_stack+0x15/0x20
11:42:29 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (fail_nth: 2)

[ 2277.433179][T21584]  should_fail_ex+0x21f/0x230
[ 2277.438048][T21584]  __alloc_pages+0x108/0x340
[ 2277.442719][T21584]  vma_alloc_folio+0x69d/0x8b0
[ 2277.447520][T21584]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2277.452744][T21584]  shmem_write_begin+0xa6/0x1e0
[ 2277.457720][T21584]  generic_perform_write+0x1c3/0x3d0
[ 2277.463069][T21584]  ? file_update_time+0x1c7/0x1f0
[ 2277.468204][T21584]  __generic_file_write_iter+0xe6/0x290
[ 2277.473899][T21584]  generic_file_write_iter+0x7d/0x1c0
[ 2277.479301][T21584]  vfs_write+0x45a/0x750
11:42:29 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001080)) (async)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000010c0)={0x5, 0x80, 0xffffffffffffffff, 0x10001, 0x20}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="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")

[ 2277.483568][T21584]  ksys_write+0xeb/0x1a0
[ 2277.487905][T21584]  __x64_sys_write+0x42/0x50
[ 2277.487999][T21584]  do_syscall_64+0x41/0xc0
[ 2277.488107][T21584]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
11:42:29 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

[ 2277.488136][T21584] RIP: 0033:0x7f3bdfaa80f9
[ 2277.488153][T21584] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2277.488173][T21584] RSP: 002b:00007f3bdee1b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2277.488264][T21584] RAX: ffffffffffffffda RBX: 00007f3bdfbc7f80 RCX: 00007f3bdfaa80f9
[ 2277.488278][T21584] RDX: 000000000000000f RSI: 0000000020000000 RDI: 0000000000000003
11:42:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (fail_nth: 2)

11:42:29 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

[ 2277.488292][T21584] RBP: 00007f3bdee1b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2277.488305][T21584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2277.488345][T21584] R13: 00007ffd5e96f7ff R14: 00007f3bdee1b300 R15: 0000000000022000
[ 2277.488361][T21584]  </TASK>
[ 2277.538656][T21590] FAULT_INJECTION: forcing a failure.
[ 2277.538656][T21590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2277.625304][T21590] CPU: 1 PID: 21590 Comm: syz-executor.0 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2277.635949][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2277.646079][T21590] Call Trace:
[ 2277.649351][T21590]  <TASK>
[ 2277.652279][T21590]  dump_stack_lvl+0xda/0x130
[ 2277.656949][T21590]  dump_stack+0x15/0x20
[ 2277.661180][T21590]  should_fail_ex+0x21f/0x230
[ 2277.665911][T21590]  should_fail+0xb/0x10
[ 2277.670109][T21590]  should_fail_usercopy+0x1a/0x20
[ 2277.675207][T21590]  _copy_from_user+0x1e/0xd0
[ 2277.679831][T21590]  kstrtouint_from_user+0x76/0xe0
[ 2277.684855][T21590]  ? 0xffffffff81000000
[ 2277.689051][T21590]  proc_fail_nth_write+0x4f/0x150
[ 2277.694080][T21590]  ? proc_fail_nth_read+0x140/0x140
[ 2277.699396][T21590]  vfs_write+0x253/0x750
[ 2277.703702][T21590]  ? __fget_files+0x1c4/0x200
[ 2277.708471][T21590]  ? mutex_lock+0xd/0x30
[ 2277.712726][T21590]  ksys_write+0xeb/0x1a0
[ 2277.716985][T21590]  __x64_sys_write+0x42/0x50
[ 2277.721652][T21590]  do_syscall_64+0x41/0xc0
[ 2277.726075][T21590]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2277.731977][T21590] RIP: 0033:0x7f4d94723e7f
[ 2277.736388][T21590] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2277.756058][T21590] RSP: 002b:00007f4d93ac4160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2277.764469][T21590] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d94723e7f
[ 2277.772482][T21590] RDX: 0000000000000001 RSI: 00007f4d93ac41e0 RDI: 0000000000000004
11:42:29 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
write$vga_arbiter(r0, &(0x7f0000000080), 0xf)

11:42:29 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x41400)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3a}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

[ 2277.780452][T21590] RBP: 00007f4d93ac41d0 R08: 0000000000000000 R09: 0000000000000000
[ 2277.788416][T21590] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2277.796379][T21590] R13: 00007ffce00ea8ef R14: 00007f4d93ac4300 R15: 0000000000022000
[ 2277.804356][T21590]  </TASK>
11:42:29 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (fail_nth: 1)

11:42:29 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x41400)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3a}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x41400) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3a}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async)

11:42:29 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (fail_nth: 1)

[ 2277.879576][T21607] FAULT_INJECTION: forcing a failure.
[ 2277.879576][T21607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2277.892688][T21607] CPU: 1 PID: 21607 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2277.903344][T21607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2277.913411][T21607] Call Trace:
[ 2277.916696][T21607]  <TASK>
[ 2277.919629][T21607]  dump_stack_lvl+0xda/0x130
[ 2277.921787][T21612] FAULT_INJECTION: forcing a failure.
[ 2277.921787][T21612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2277.924230][T21607]  dump_stack+0x15/0x20
[ 2277.924314][T21607]  should_fail_ex+0x21f/0x230
[ 2277.946147][T21607]  should_fail+0xb/0x10
[ 2277.950326][T21607]  should_fail_usercopy+0x1a/0x20
[ 2277.955499][T21607]  copy_page_from_iter_atomic+0x229/0xb30
[ 2277.961243][T21607]  ? PageHeadHuge+0x3f/0x80
[ 2277.965748][T21607]  ? shmem_write_begin+0x135/0x1e0
[ 2277.970964][T21607]  generic_perform_write+0x203/0x3d0
[ 2277.976246][T21607]  ? file_update_time+0x1c7/0x1f0
[ 2277.981358][T21607]  __generic_file_write_iter+0xe6/0x290
[ 2277.986938][T21607]  generic_file_write_iter+0x7d/0x1c0
[ 2277.992371][T21607]  vfs_write+0x45a/0x750
[ 2277.996646][T21607]  ksys_write+0xeb/0x1a0
[ 2278.000951][T21607]  __x64_sys_write+0x42/0x50
[ 2278.005656][T21607]  do_syscall_64+0x41/0xc0
[ 2278.010208][T21607]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.016111][T21607] RIP: 0033:0x7f3bdfaa80f9
[ 2278.020585][T21607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2278.040189][T21607] RSP: 002b:00007f3bdee1b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2278.048656][T21607] RAX: ffffffffffffffda RBX: 00007f3bdfbc7f80 RCX: 00007f3bdfaa80f9
[ 2278.056690][T21607] RDX: 000000000000000f RSI: 0000000020000000 RDI: 0000000000000003
[ 2278.064655][T21607] RBP: 00007f3bdee1b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2278.072626][T21607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.080631][T21607] R13: 00007ffd5e96f7ff R14: 00007f3bdee1b300 R15: 0000000000022000
[ 2278.088670][T21607]  </TASK>
[ 2278.091755][T21612] CPU: 0 PID: 21612 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2278.102387][T21612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2278.112482][T21612] Call Trace:
[ 2278.115804][T21612]  <TASK>
[ 2278.118780][T21612]  dump_stack_lvl+0xda/0x130
[ 2278.123396][T21612]  dump_stack+0x15/0x20
[ 2278.127631][T21612]  should_fail_ex+0x21f/0x230
[ 2278.132338][T21612]  should_fail+0xb/0x10
[ 2278.136521][T21612]  should_fail_usercopy+0x1a/0x20
[ 2278.141601][T21612]  _copy_from_user+0x1e/0xd0
[ 2278.146214][T21612]  do_vfs_ioctl+0x4c2/0x1360
[ 2278.150867][T21612]  __se_sys_ioctl+0x81/0x140
[ 2278.154703][T21621] FAULT_INJECTION: forcing a failure.
[ 2278.154703][T21621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2278.155497][T21612]  __x64_sys_ioctl+0x43/0x50
[ 2278.155532][T21612]  do_syscall_64+0x41/0xc0
[ 2278.177532][T21612]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.183429][T21612] RIP: 0033:0x7f47ebaeb0f9
[ 2278.187834][T21612] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2278.207533][T21612] RSP: 002b:00007f47eae5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2278.215998][T21612] RAX: ffffffffffffffda RBX: 00007f47ebc0af80 RCX: 00007f47ebaeb0f9
[ 2278.223966][T21612] RDX: 0000000020000080 RSI: 00000000401c5820 RDI: 0000000000000003
[ 2278.231970][T21612] RBP: 00007f47eae5e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2278.239953][T21612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.247960][T21612] R13: 00007ffc5691b5ef R14: 00007f47eae5e300 R15: 0000000000022000
[ 2278.255932][T21612]  </TASK>
[ 2278.258947][T21621] CPU: 1 PID: 21621 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2278.269641][T21621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2278.279706][T21621] Call Trace:
[ 2278.283023][T21621]  <TASK>
[ 2278.285971][T21621]  dump_stack_lvl+0xda/0x130
[ 2278.290650][T21621]  dump_stack+0x15/0x20
[ 2278.294894][T21621]  should_fail_ex+0x21f/0x230
[ 2278.299659][T21621]  should_fail+0xb/0x10
[ 2278.303867][T21621]  should_fail_usercopy+0x1a/0x20
[ 2278.305536][T21609] FAULT_INJECTION: forcing a failure.
[ 2278.305536][T21609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2278.308952][T21621]  _copy_to_user+0x1e/0x90
[ 2278.308981][T21621]  simple_read_from_buffer+0xa0/0x110
[ 2278.331740][T21621]  proc_fail_nth_read+0xf6/0x140
[ 2278.336695][T21621]  ? proc_fault_inject_write+0x200/0x200
[ 2278.342376][T21621]  vfs_read+0x192/0x560
[ 2278.346546][T21621]  ? ksys_read+0x76/0x1a0
[ 2278.350888][T21621]  ksys_read+0xeb/0x1a0
[ 2278.355105][T21621]  __x64_sys_read+0x42/0x50
[ 2278.359676][T21621]  do_syscall_64+0x41/0xc0
[ 2278.364192][T21621]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.370136][T21621] RIP: 0033:0x7f3bdfa59f1c
[ 2278.374543][T21621] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2278.394178][T21621] RSP: 002b:00007f3bdee1b160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2278.402750][T21621] RAX: ffffffffffffffda RBX: 00007f3bdfbc7f80 RCX: 00007f3bdfa59f1c
[ 2278.410782][T21621] RDX: 000000000000000f RSI: 00007f3bdee1b1e0 RDI: 0000000000000004
[ 2278.418810][T21621] RBP: 00007f3bdee1b1d0 R08: 0000000000000000 R09: 0000000000000000
11:42:29 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:29 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (fail_nth: 3)

11:42:29 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:30 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x41400) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3a}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x81}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (fail_nth: 2)

[ 2278.426791][T21621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.434836][T21621] R13: 00007ffd5e96f7ff R14: 00007f3bdee1b300 R15: 0000000000022000
[ 2278.442880][T21621]  </TASK>
[ 2278.445900][T21609] CPU: 0 PID: 21609 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2278.456540][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2278.466735][T21609] Call Trace:
[ 2278.470096][T21609]  <TASK>
[ 2278.473119][T21609]  dump_stack_lvl+0xda/0x130
11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (fail_nth: 2)

11:42:30 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5af9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4014)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10)

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2278.473285][T21609]  dump_stack+0x15/0x20
11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x2, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2278.473320][T21609]  should_fail_ex+0x21f/0x230
11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x2, &(0x7f00000002c0))

11:42:30 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2278.473353][T21609]  should_fail+0xb/0x10
[ 2278.473383][T21609]  should_fail_usercopy+0x1a/0x20
[ 2278.473444][T21609]  _copy_from_user+0x1e/0xd0
[ 2278.473470][T21609]  do_vfs_ioctl+0x4c2/0x1360
[ 2278.473541][T21609]  __se_sys_ioctl+0x81/0x140
[ 2278.473572][T21609]  __x64_sys_ioctl+0x43/0x50
[ 2278.473606][T21609]  do_syscall_64+0x41/0xc0
[ 2278.473663][T21609]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.473691][T21609] RIP: 0033:0x7f19722040f9
[ 2278.473709][T21609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2278.473732][T21609] RSP: 002b:00007f1971577168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2278.473755][T21609] RAX: ffffffffffffffda RBX: 00007f1972323f80 RCX: 00007f19722040f9
[ 2278.473788][T21609] RDX: 00000000200002c0 RSI: 00000000401c5820 RDI: 0000000000000003
11:42:30 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2278.473804][T21609] RBP: 00007f19715771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2278.473818][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.473831][T21609] R13: 00007ffec25c7daf R14: 00007f1971577300 R15: 0000000000022000
[ 2278.473849][T21609]  </TASK>
[ 2278.494853][T21630] FAULT_INJECTION: forcing a failure.
[ 2278.494853][T21630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2278.494925][T21630] CPU: 0 PID: 21630 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2278.494952][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2278.494966][T21630] Call Trace:
[ 2278.494972][T21630]  <TASK>
[ 2278.495014][T21630]  dump_stack_lvl+0xda/0x130
[ 2278.495047][T21630]  dump_stack+0x15/0x20
[ 2278.495079][T21630]  should_fail_ex+0x21f/0x230
[ 2278.495106][T21630]  should_fail+0xb/0x10
[ 2278.495129][T21630]  should_fail_usercopy+0x1a/0x20
[ 2278.495211][T21630]  _copy_to_user+0x1e/0x90
[ 2278.495313][T21630]  simple_read_from_buffer+0xa0/0x110
[ 2278.495420][T21630]  proc_fail_nth_read+0xf6/0x140
[ 2278.495497][T21630]  ? proc_fault_inject_write+0x200/0x200
[ 2278.495581][T21630]  vfs_read+0x192/0x560
[ 2278.495668][T21630]  ? __fget_files+0x1c4/0x200
[ 2278.495699][T21630]  ? mutex_lock+0xd/0x30
[ 2278.495718][T21630]  ksys_read+0xeb/0x1a0
[ 2278.495795][T21630]  __x64_sys_read+0x42/0x50
[ 2278.495827][T21630]  do_syscall_64+0x41/0xc0
[ 2278.495999][T21630]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.496029][T21630] RIP: 0033:0x7f47eba9cf1c
[ 2278.496051][T21630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2278.496072][T21630] RSP: 002b:00007f47eae5e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2278.496183][T21630] RAX: ffffffffffffffda RBX: 00007f47ebc0af80 RCX: 00007f47eba9cf1c
[ 2278.496200][T21630] RDX: 000000000000000f RSI: 00007f47eae5e1e0 RDI: 0000000000000004
[ 2278.496214][T21630] RBP: 00007f47eae5e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2278.496227][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.496240][T21630] R13: 00007ffc5691b5ef R14: 00007f47eae5e300 R15: 0000000000022000
[ 2278.496263][T21630]  </TASK>
[ 2278.503694][T21632] FAULT_INJECTION: forcing a failure.
[ 2278.503694][T21632] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2278.503730][T21632] CPU: 0 PID: 21632 Comm: syz-executor.2 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2278.503757][T21632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2278.503770][T21632] Call Trace:
[ 2278.503775][T21632]  <TASK>
[ 2278.503781][T21632]  dump_stack_lvl+0xda/0x130
[ 2278.503810][T21632]  dump_stack+0x15/0x20
[ 2278.503899][T21632]  should_fail_ex+0x21f/0x230
[ 2278.503927][T21632]  should_fail+0xb/0x10
[ 2278.503953][T21632]  should_fail_usercopy+0x1a/0x20
[ 2278.504003][T21632]  _copy_to_user+0x1e/0x90
[ 2278.504029][T21632]  simple_read_from_buffer+0xa0/0x110
[ 2278.504124][T21632]  proc_fail_nth_read+0xf6/0x140
[ 2278.504163][T21632]  ? proc_fault_inject_write+0x200/0x200
[ 2278.504200][T21632]  vfs_read+0x192/0x560
[ 2278.504228][T21632]  ? __fget_files+0x1c4/0x200
[ 2278.504316][T21632]  ? mutex_lock+0xd/0x30
[ 2278.504338][T21632]  ksys_read+0xeb/0x1a0
[ 2278.504467][T21632]  __x64_sys_read+0x42/0x50
[ 2278.504499][T21632]  do_syscall_64+0x41/0xc0
[ 2278.504529][T21632]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2278.504598][T21632] RIP: 0033:0x7f19721b5f1c
[ 2278.504614][T21632] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
11:42:30 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30a, 0x5, 0x2, 0x9, 0xc7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r2, &(0x7f0000000100)=""/207, 0xcf)

11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b47, &(0x7f00000002c0))

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:30 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74756e6c3700007952000000a5c6d5f6a3f72405684900"/36, @ANYRES32=<r0=>0x0, @ANYBLOB="78000010000000040000001f48fa002000670000200090787f00000100000000440cfe9000000005000000e1"]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x6, 0xfc, 0x2, 0x5c, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x6bef51f5182bcf98, 0x3, 0x3}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1410, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3e}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x1)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:30 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5af9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) (async)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10)

11:42:30 executing program 4:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

[ 2278.504634][T21632] RSP: 002b:00007f1971577160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2278.504655][T21632] RAX: ffffffffffffffda RBX: 00007f1972323f80 RCX: 00007f19721b5f1c
[ 2278.504670][T21632] RDX: 000000000000000f RSI: 00007f19715771e0 RDI: 0000000000000004
[ 2278.504684][T21632] RBP: 00007f19715771d0 R08: 0000000000000000 R09: 0000000000000000
[ 2278.504698][T21632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2278.504745][T21632] R13: 00007ffec25c7daf R14: 00007f1971577300 R15: 0000000000022000
[ 2278.504763][T21632]  </TASK>
11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b49, &(0x7f00000002c0))

11:42:30 executing program 4:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:30 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74756e6c3700007952000000a5c6d5f6a3f72405684900"/36, @ANYRES32=<r0=>0x0, @ANYBLOB="78000010000000040000001f48fa002000670000200090787f00000100000000440cfe9000000005000000e1"]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x6, 0xfc, 0x2, 0x5c, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x6bef51f5182bcf98, 0x3, 0x3}}) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1410, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3e}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x1) (async, rerun: 32)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (rerun: 32)

11:42:30 executing program 4:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:30 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:30 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30a, 0x5, 0x2, 0x9, 0xc7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r2, &(0x7f0000000100)=""/207, 0xcf)

11:42:30 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74756e6c3700007952000000a5c6d5f6a3f72405684900"/36, @ANYRES32=<r0=>0x0, @ANYBLOB="78000010000000040000001f48fa002000670000200090787f00000100000000440cfe9000000005000000e1"]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x6, 0xfc, 0x2, 0x5c, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x40, 0x6bef51f5182bcf98, 0x3, 0x3}}) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1410, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x3e}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x1) (rerun: 32)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:30 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:30 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x541b, &(0x7f00000002c0))

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30a, 0x5, 0x2, 0x9, 0xc7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r2, &(0x7f0000000100)=""/207, 0xcf) (async)
read$qrtrtun(r2, &(0x7f0000000100)=""/207, 0xcf)

11:42:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5af9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) (async)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10)

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5421, &(0x7f00000002c0))

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00')
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5450, &(0x7f00000002c0))

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r1, &(0x7f0000000100)=""/119, 0x77)

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (rerun: 64)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00') (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r1, &(0x7f0000000100)=""/119, 0x77)

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5451, &(0x7f00000002c0))

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
write$selinux_attr(r0, &(0x7f0000000080)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) (rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00')
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5452, &(0x7f00000002c0))

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
read$qrtrtun(r1, &(0x7f0000000100)=""/119, 0x77)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x5460, &(0x7f00000002c0))

11:42:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'io+mem'}, 0xc)

11:42:31 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c001000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf2502000000050004003f000000080019007f0000010600020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200440a4}, 0x40000)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40049409, &(0x7f00000002c0))

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40086602, &(0x7f00000002c0))

11:42:31 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'io+mem'}, 0xc)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c001000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf2502000000050004003f000000080019007f0000010600020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200440a4}, 0x40000)

11:42:31 executing program 4:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:31 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'io+mem'}, 0xc)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'io+mem'}, 0xc) (async)

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)={0x28, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}]}, 0x28}}, 0x0) (async, rerun: 64)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c001000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf2502000000050004003f000000080019007f0000010600020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200440a4}, 0x40000)

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x40087602, &(0x7f00000002c0))

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4020940d, &(0x7f00000002c0))

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6d29c0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)={0x57, "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"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x1, 0x9, 0x6c, 0x1, 0x7748, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)

11:42:31 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x80086601, &(0x7f00000002c0))

11:42:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)={0x57, "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"}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x1, 0x9, 0x6c, 0x1, 0x7748, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6d29c0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:31 executing program 4:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x30a, 0x5, 0x2, 0x9, 0xc7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r2, &(0x7f0000000100)=""/207, 0xcf)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)={0x57, "64f52713f849e116788630a7228b15c8796447a5191bca8c0dcc78d77e18a5263b486800a38c864d8a68e03234b1a3876ad5d8690662cd7921d13fe1b13de20aab44095fdba97d591c1d38580693fd278bc6c5b50c602751e41fd2115d1bd283817f42f8e353b86a173763b27bb749204a98de8acd0a4f88f38dd9312852f28fac5ea7145605efda8751a9f1138742ad44895d767e52e85a975a7a24e1c14aa15334f19769876f149bb289acac7988b08520da5ec0e28aca1047eeebd921198dbe5c456f1ad8b277f52005b9fc22046ebeb540a771b8d791dee722593c48c21945f25275a0ddb4c3f68e05536564d28f7674df1f190102d14d50713f762c758eeac49cd4d252459bf6338b3ba801183de08f88a7e42fe0d750ff79c411f4fa4e1ada777c94c4bb0a2f91ca4854d9045243bdf473233d27b73102541dac9f404d684f7d528f2dc7c85fdf6e708ae9c4344342fadc5e921664409c0b398788151accb8e54bc8bfa6c7bc45cb6a0c8d303dd3edead86620abda1ee2f9606fcb499b3576a17229df21ed35a503aef5fc423c5ed3e067beb8a1a254ce60cb45791e51d2611a0d0ea24ca99727cffb102c86074be2f36cb66909d5c345cc5ac9c5b42b571371880aa9c2d39ffa1e0fcd10df511b9b78e869750d7ad3888e72c0047eec5ee178a79ad54e5af21b398d045a7735b305fbcbe604cb4c18892b5b35c47f61"})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0x1, 0x9, 0x6c, 0x1, 0x7748, '\x00', 0x0, r0, 0x5, 0x4, 0x2, 0x2}, 0x48)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:31 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x80087601, &(0x7f00000002c0))

11:42:31 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6d29c0, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x6d29c0, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)

11:42:31 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:31 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 1)

[ 2280.167273][T21835] FAULT_INJECTION: forcing a failure.
[ 2280.167273][T21835] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2280.180607][T21835] CPU: 0 PID: 21835 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2280.191275][T21835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2280.201346][T21835] Call Trace:
[ 2280.204637][T21835]  <TASK>
[ 2280.207586][T21835]  dump_stack_lvl+0xda/0x130
[ 2280.212275][T21835]  dump_stack+0x15/0x20
[ 2280.216479][T21835]  should_fail_ex+0x21f/0x230
[ 2280.221253][T21835]  __alloc_pages+0x108/0x340
[ 2280.225855][T21835]  vma_alloc_folio+0x69d/0x8b0
[ 2280.230816][T21835]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2280.236087][T21835]  shmem_write_begin+0xa6/0x1e0
[ 2280.241026][T21835]  generic_perform_write+0x1c3/0x3d0
[ 2280.246330][T21835]  ? file_update_time+0x1c7/0x1f0
[ 2280.251413][T21835]  __generic_file_write_iter+0xe6/0x290
[ 2280.257050][T21835]  generic_file_write_iter+0x7d/0x1c0
[ 2280.262453][T21835]  vfs_write+0x45a/0x750
11:42:32 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

11:42:32 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe408596e4f3cd190)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x100)

11:42:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x801c581f, &(0x7f00000002c0))

[ 2280.266779][T21835]  ksys_write+0xeb/0x1a0
[ 2280.271051][T21835]  __x64_sys_write+0x42/0x50
[ 2280.275670][T21835]  do_syscall_64+0x41/0xc0
[ 2280.280123][T21835]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2280.286072][T21835] RIP: 0033:0x7f73579e80f9
[ 2280.290486][T21835] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000002c0))

11:42:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:32 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe408596e4f3cd190)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x100)

[ 2280.310101][T21835] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2280.318526][T21835] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2280.326519][T21835] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2280.334522][T21835] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2280.342506][T21835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2280.350501][T21835] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2280.358512][T21835]  </TASK>
11:42:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 2)

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0045878, &(0x7f00000002c0))

11:42:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="078d44db457d384638ca8655a3")

[ 2280.424336][T21858] FAULT_INJECTION: forcing a failure.
[ 2280.424336][T21858] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2280.437508][T21858] CPU: 1 PID: 21858 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2280.448107][T21858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2280.458169][T21858] Call Trace:
[ 2280.461469][T21858]  <TASK>
[ 2280.464408][T21858]  dump_stack_lvl+0xda/0x130
[ 2280.469048][T21858]  dump_stack+0x15/0x20
[ 2280.473219][T21858]  should_fail_ex+0x21f/0x230
[ 2280.477971][T21858]  should_fail+0xb/0x10
[ 2280.482224][T21858]  should_fail_usercopy+0x1a/0x20
[ 2280.487313][T21858]  copy_page_from_iter_atomic+0x229/0xb30
[ 2280.493101][T21858]  ? PageHeadHuge+0x3f/0x80
[ 2280.497631][T21858]  ? shmem_write_begin+0x135/0x1e0
[ 2280.502807][T21858]  generic_perform_write+0x203/0x3d0
[ 2280.508210][T21858]  ? file_update_time+0x1c7/0x1f0
[ 2280.513310][T21858]  __generic_file_write_iter+0xe6/0x290
[ 2280.518938][T21858]  generic_file_write_iter+0x7d/0x1c0
[ 2280.524326][T21858]  vfs_write+0x45a/0x750
[ 2280.528652][T21858]  ksys_write+0xeb/0x1a0
[ 2280.532982][T21858]  __x64_sys_write+0x42/0x50
[ 2280.537600][T21858]  do_syscall_64+0x41/0xc0
[ 2280.542032][T21858]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2280.547979][T21858] RIP: 0033:0x7f73579e80f9
[ 2280.552408][T21858] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:32 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (rerun: 32)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

11:42:32 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe408596e4f3cd190) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0xe408596e4f3cd190)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x100)

11:42:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc0189436, &(0x7f00000002c0))

11:42:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db057d384638ca8655a3")

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0xc020660b, &(0x7f00000002c0))

11:42:32 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655fe")

11:42:32 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socketpair(0x1e, 0xa, 0x3f, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)

11:42:32 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x3, 0x2, 0xd, 0xb, 0x40, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xfffffffe, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x4, 0x0, 0x6, 0x3f, 0x0, 0x3, 0x820, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6618}, 0xb50, 0x8, 0x9, 0x9, 0x83fd, 0xfffffff9, 0x9, 0x0, 0xffffffff, 0x0, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10)

[ 2280.572144][T21858] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2280.580639][T21858] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2280.588626][T21858] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2280.596668][T21858] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2280.604695][T21858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2280.612743][T21858] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2280.620739][T21858]  </TASK>
11:42:32 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 3)

11:42:32 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$TCSBRK(r0, 0x5409, 0xffffffffffffffa9)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x103000)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/195)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x10240)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0xffffffe0, 0x80, 0x5, 0x2, 0xd, "f0bcf0eef187c75133710da11050b3716e7da9"})

11:42:32 executing program 1:
shmdt(0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470683, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2280.814400][T21891] FAULT_INJECTION: forcing a failure.
[ 2280.814400][T21891] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2280.827686][T21891] CPU: 0 PID: 21891 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2280.838293][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2280.848408][T21891] Call Trace:
[ 2280.851693][T21891]  <TASK>
[ 2280.854711][T21891]  dump_stack_lvl+0xda/0x130
[ 2280.859325][T21891]  dump_stack+0x15/0x20
[ 2280.863496][T21891]  should_fail_ex+0x21f/0x230
[ 2280.868276][T21891]  __alloc_pages+0x108/0x340
[ 2280.872960][T21891]  vma_alloc_folio+0x69d/0x8b0
[ 2280.877822][T21891]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2280.883106][T21891]  shmem_write_begin+0xa6/0x1e0
[ 2280.887983][T21891]  generic_perform_write+0x1c3/0x3d0
[ 2280.893300][T21891]  ? shmem_write_begin+0x1e0/0x1e0
[ 2280.898511][T21891]  __generic_file_write_iter+0xe6/0x290
[ 2280.904100][T21891]  generic_file_write_iter+0x7d/0x1c0
[ 2280.909480][T21891]  vfs_write+0x45a/0x750
[ 2280.913770][T21891]  ksys_write+0xeb/0x1a0
[ 2280.918034][T21891]  __x64_sys_write+0x42/0x50
[ 2280.922658][T21891]  do_syscall_64+0x41/0xc0
[ 2280.927137][T21891]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2280.933139][T21891] RIP: 0033:0x7f73579e80f9
[ 2280.937625][T21891] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2280.957361][T21891] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2280.965853][T21891] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2280.973825][T21891] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2280.981803][T21891] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2280.989853][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2280.997917][T21891] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2281.005953][T21891]  </TASK>
11:42:33 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb)

11:42:33 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x3, 0x2, 0xd, 0xb, 0x40, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xfffffffe, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x4, 0x0, 0x6, 0x3f, 0x0, 0x3, 0x820, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6618}, 0xb50, 0x8, 0x9, 0x9, 0x83fd, 0xfffffff9, 0x9, 0x0, 0xffffffff, 0x0, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x3, 0x2, 0xd, 0xb, 0x40, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xfffffffe, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x4, 0x0, 0x6, 0x3f, 0x0, 0x3, 0x820, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6618}, 0xb50, 0x8, 0x9, 0x9, 0x83fd, 0xfffffff9, 0x9, 0x0, 0xffffffff, 0x0, 0x7}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) (async)

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socketpair(0x1e, 0xa, 0x3f, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
socketpair(0x1e, 0xa, 0x3f, &(0x7f0000000080)) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) (async)

11:42:33 executing program 1:
shmdt(0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470683, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
shmdt(0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470683, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$TCSBRK(r0, 0x5409, 0xffffffffffffffa9) (async)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x103000)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/195)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0) (async)
syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x10240)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0xffffffe0, 0x80, 0x5, 0x2, 0xd, "f0bcf0eef187c75133710da11050b3716e7da9"})

11:42:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 4)

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
socketpair(0x1e, 0xa, 0x3f, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)

11:42:33 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x3, 0x2, 0xd, 0xb, 0x40, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xb, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xfffffffe, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x0, 0x80, 0x4, 0x0, 0x6, 0x3f, 0x0, 0x3, 0x820, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6618}, 0xb50, 0x8, 0x9, 0x9, 0x83fd, 0xfffffff9, 0x9, 0x0, 0xffffffff, 0x0, 0x7}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10)

11:42:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$TCSBRK(r0, 0x5409, 0xffffffffffffffa9) (async)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x103000)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/195)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0)
syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x10240) (async)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0xffffffe0, 0x80, 0x5, 0x2, 0xd, "f0bcf0eef187c75133710da11050b3716e7da9"})

11:42:33 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'team_slave_0\x00'})
r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xd7, 0x400)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)

11:42:33 executing program 1:
shmdt(0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470683, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x30000000, 0x4)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:33 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb)

11:42:33 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'team_slave_0\x00'}) (async, rerun: 64)
r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xd7, 0x400) (rerun: 64)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)

11:42:33 executing program 1:
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:33 executing program 1:
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x30000000, 0x4) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:33 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 5)

11:42:33 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'team_slave_0\x00'})
r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0xd7, 0x400)
read$qrtrtun(r1, &(0x7f0000000080)=""/111, 0x6f)

11:42:33 executing program 1:
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:33 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb)

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x30000000, 0x4) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r3=>0x0, 0x14f, 0x8, 0x8, 0x3, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x8, [{@loopback}]}, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x3, [{@remote, 0x2818}, {@loopback, 0x9}, {@broadcast, 0x4}, {@local}, {@multicast1, 0xad3}, {@multicast2, 0x90}, {@empty, 0xd4}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0x27, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @local, @loopback]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xd, "8b72189938fc5c455bca05"}, {0x5, 0x2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r4=>0x0, 0x29, 0x1, 0x6, 0x3ff, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x0, 0x7, 0x8, 0x8}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x16202410}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf25020000003400018008000700", @ANYRES32=r3, @ANYBLOB="080006000100000008000300e000000208000300ffffffff060005004e220000060001000a00000058000180080003007f000001140004002001000000000000000000000000000014000400fc020000000000000000000000000000050002002000000014000400fe88000000000000000000000000010108000300ffffffff4c00018008000700", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c000180080003006401010208000300ac1e010106000100000000000800060001000000080006000100000008000300070000000800030004000000080003000100000008000200020000000800020000000000"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x3, 0x600002)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000500)={0x3f, 0x8000, 0x0, 0x7f, 0x17, "48fee675900ebd2e"})
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r7, 0x2e683f1971ad6a19, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6aac}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0))

11:42:33 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="198d44db457d384638ca3a1ca3bdfb1384b53e56d30fec053cce1ac1907ad7d5b0f9d654d518f3ab2309bbaa31a52ed8c0b2bc77e36b7ed04bc16f4ebe1001c233671d0a2650af51bf413e20ec2a646a1b9223c54cbbe90037624d54b3563055ea00daa0e6b4122b89405035ecd28b4b5dbc10d8be7ee590bf997fe40016b3858d7d1ab196f297b2bd0f")

11:42:33 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x20a201)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4781191d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

11:42:33 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PPPIOCDISCONN(r0, 0x7439)

11:42:33 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'geneve1\x00'})
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:33 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="198d44db457d384638ca3a1ca3bdfb1384b53e56d30fec053cce1ac1907ad7d5b0f9d654d518f3ab2309bbaa31a52ed8c0b2bc77e36b7ed04bc16f4ebe1001c233671d0a2650af51bf413e20ec2a646a1b9223c54cbbe90037624d54b3563055ea00daa0e6b4122b89405035ecd28b4b5dbc10d8be7ee590bf997fe40016b3858d7d1ab196f297b2bd0f")

11:42:33 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r3=>0x0, 0x14f, 0x8, 0x8, 0x3, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x8, [{@loopback}]}, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x3, [{@remote, 0x2818}, {@loopback, 0x9}, {@broadcast, 0x4}, {@local}, {@multicast1, 0xad3}, {@multicast2, 0x90}, {@empty, 0xd4}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0x27, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @local, @loopback]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xd, "8b72189938fc5c455bca05"}, {0x5, 0x2}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r4=>0x0, 0x29, 0x1, 0x6, 0x3ff, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x0, 0x7, 0x8, 0x8}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x16202410}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf25020000003400018008000700", @ANYRES32=r3, @ANYBLOB="080006000100000008000300e000000208000300ffffffff060005004e220000060001000a00000058000180080003007f000001140004002001000000000000000000000000000014000400fc020000000000000000000000000000050002002000000014000400fe88000000000000000000000000010108000300ffffffff4c00018008000700", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c000180080003006401010208000300ac1e010106000100000000000800060001000000080006000100000008000300070000000800030004000000080003000100000008000200020000000800020000000000"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r8 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x3, 0x600002)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) (async)
ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000500)={0x3f, 0x8000, 0x0, 0x7f, 0x17, "48fee675900ebd2e"}) (async)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r7, 0x2e683f1971ad6a19, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6aac}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0))

[ 2282.117898][T21969] FAULT_INJECTION: forcing a failure.
[ 2282.117898][T21969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2282.131122][T21969] CPU: 0 PID: 21969 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2282.131147][T21969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2282.131162][T21969] Call Trace:
[ 2282.131246][T21969]  <TASK>
[ 2282.131305][T21969]  dump_stack_lvl+0xda/0x130
[ 2282.131348][T21969]  dump_stack+0x15/0x20
[ 2282.131373][T21969]  should_fail_ex+0x21f/0x230
[ 2282.131459][T21969]  should_fail+0xb/0x10
[ 2282.131480][T21969]  should_fail_usercopy+0x1a/0x20
[ 2282.131638][T21969]  copy_page_from_iter_atomic+0x229/0xb30
[ 2282.131669][T21969]  ? PageHeadHuge+0x3f/0x80
[ 2282.131692][T21969]  ? shmem_write_begin+0x135/0x1e0
[ 2282.131735][T21969]  generic_perform_write+0x203/0x3d0
[ 2282.131759][T21969]  ? shmem_write_begin+0x1e0/0x1e0
[ 2282.131854][T21969]  __generic_file_write_iter+0xe6/0x290
[ 2282.131885][T21969]  generic_file_write_iter+0x7d/0x1c0
[ 2282.131911][T21969]  vfs_write+0x45a/0x750
[ 2282.131943][T21969]  ksys_write+0xeb/0x1a0
[ 2282.132034][T21969]  __x64_sys_write+0x42/0x50
[ 2282.132184][T21969]  do_syscall_64+0x41/0xc0
[ 2282.132218][T21969]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2282.132248][T21969] RIP: 0033:0x7f73579e80f9
11:42:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 6)

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="198d44db457d384638ca3a1ca3bdfb1384b53e56d30fec053cce1ac1907ad7d5b0f9d654d518f3ab2309bbaa31a52ed8c0b2bc77e36b7ed04bc16f4ebe1001c233671d0a2650af51bf413e20ec2a646a1b9223c54cbbe90037624d54b3563055ea00daa0e6b4122b89405035ecd28b4b5dbc10d8be7ee590bf997fe40016b3858d7d1ab196f297b2bd0f")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000180)="198d44db457d384638ca3a1ca3bdfb1384b53e56d30fec053cce1ac1907ad7d5b0f9d654d518f3ab2309bbaa31a52ed8c0b2bc77e36b7ed04bc16f4ebe1001c233671d0a2650af51bf413e20ec2a646a1b9223c54cbbe90037624d54b3563055ea00daa0e6b4122b89405035ecd28b4b5dbc10d8be7ee590bf997fe40016b3858d7d1ab196f297b2bd0f") (async)

11:42:34 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'geneve1\x00'})
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r3=>0x0, 0x14f, 0x8, 0x8, 0x3, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x8, [{@loopback}]}, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x3, [{@remote, 0x2818}, {@loopback, 0x9}, {@broadcast, 0x4}, {@local}, {@multicast1, 0xad3}, {@multicast2, 0x90}, {@empty, 0xd4}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0x27, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @local, @loopback]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xd, "8b72189938fc5c455bca05"}, {0x5, 0x2}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', <r4=>0x0, 0x29, 0x1, 0x6, 0x3ff, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x0, 0x7, 0x8, 0x8}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x16202410}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf25020000003400018008000700", @ANYRES32=r3, @ANYBLOB="080006000100000008000300e000000208000300ffffffff060005004e220000060001000a00000058000180080003007f000001140004002001000000000000000000000000000014000400fc020000000000000000000000000000050002002000000014000400fe88000000000000000000000000010108000300ffffffff4c00018008000700", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c000180080003006401010208000300ac1e010106000100000000000800060001000000080006000100000008000300070000000800030004000000080003000100000008000200020000000800020000000000"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x3, 0x600002)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000500)={0x3f, 0x8000, 0x0, 0x7f, 0x17, "48fee675900ebd2e"})
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r7, 0x2e683f1971ad6a19, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6aac}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x14f, 0x8, 0x8, 0x3, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x66, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x8, [{@loopback}]}, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x3, [{@remote, 0x2818}, {@loopback, 0x9}, {@broadcast, 0x4}, {@local}, {@multicast1, 0xad3}, {@multicast2, 0x90}, {@empty, 0xd4}, {@rand_addr=0x64010102, 0x7fff}]}, @lsrr={0x83, 0x27, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @local, @loopback]}, @cipso={0x86, 0x15, 0x0, [{0x0, 0xd, "8b72189938fc5c455bca05"}, {0x5, 0x2}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x6, 0x3ff, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x0, 0x7, 0x8, 0x8}}) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x16202410}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf25020000003400018008000700", @ANYRES32=r3, @ANYBLOB="080006000100000008000300e000000208000300ffffffff060005004e220000060001000a00000058000180080003007f000001140004002001000000000000000000000000000014000400fc020000000000000000000000000000050002002000000014000400fe88000000000000000000000000010108000300ffffffff4c00018008000700", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2c000180080003006401010208000300ac1e010106000100000000000800060001000000080006000100000008000300070000000800030004000000080003000100000008000200020000000800020000000000"], 0x140}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_open_dev$vcsn(&(0x7f00000004c0), 0x3, 0x600002) (async)
ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) (async)
ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000500)={0x3f, 0x8000, 0x0, 0x7f, 0x17, "48fee675900ebd2e"}) (async)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r7, 0x2e683f1971ad6a19, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @empty, 0x10001}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b7f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x60}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6aac}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0)) (async)

[ 2282.132264][T21969] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2282.132284][T21969] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2282.132369][T21969] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2282.132383][T21969] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2282.132397][T21969] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000009660c2bef7d5c4b3943159fa60ab65e90001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x100, 0x7ff, 0x2, 0x1ff, 0x0, 0x8})

11:42:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'geneve1\x00'}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xb4, 0x5, 0x1ff, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x10, 0x4, 0x1ff}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x8001)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001)

11:42:34 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x20a201) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4781191d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async, rerun: 32)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[ 2282.132413][T21969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2282.132429][T21969] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2282.132450][T21969]  </TASK>
[ 2282.406881][T22011] FAULT_INJECTION: forcing a failure.
[ 2282.406881][T22011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2282.406909][T22011] CPU: 0 PID: 22011 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2282.406936][T22011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2282.406951][T22011] Call Trace:
[ 2282.407020][T22011]  <TASK>
[ 2282.407026][T22011]  dump_stack_lvl+0xda/0x130
[ 2282.407134][T22011]  dump_stack+0x15/0x20
[ 2282.407160][T22011]  should_fail_ex+0x21f/0x230
[ 2282.407186][T22011]  __alloc_pages+0x108/0x340
[ 2282.407216][T22011]  vma_alloc_folio+0x69d/0x8b0
[ 2282.407252][T22011]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2282.407369][T22011]  shmem_write_begin+0xa6/0x1e0
[ 2282.407413][T22011]  generic_perform_write+0x1c3/0x3d0
[ 2282.407435][T22011]  ? shmem_write_begin+0x1e0/0x1e0
[ 2282.407504][T22011]  __generic_file_write_iter+0xe6/0x290
[ 2282.407532][T22011]  generic_file_write_iter+0x7d/0x1c0
[ 2282.407593][T22011]  vfs_write+0x45a/0x750
[ 2282.407625][T22011]  ksys_write+0xeb/0x1a0
[ 2282.407654][T22011]  __x64_sys_write+0x42/0x50
[ 2282.407684][T22011]  do_syscall_64+0x41/0xc0
[ 2282.407709][T22011]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2282.407737][T22011] RIP: 0033:0x7f73579e80f9
[ 2282.407753][T22011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2282.407853][T22011] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2282.407934][T22011] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2282.407946][T22011] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2282.407957][T22011] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2282.407974][T22011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
11:42:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 7)

11:42:34 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$PPPIOCDISCONN(r0, 0x7439)

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000009660c2bef7d5c4b3943159fa60ab65e90001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x100, 0x7ff, 0x2, 0x1ff, 0x0, 0x8})

11:42:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100090}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0xa21, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x20008000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75ba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x70c9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd6c2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40008}, 0x48004)
write$vga_arbiter(r2, &(0x7f0000000000), 0xf)

11:42:34 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x20a201)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4781191d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x20a201) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4781191d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xb4, 0x5, 0x1ff, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x10, 0x4, 0x1ff}}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x8001) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xb4, 0x5, 0x1ff, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x10, 0x4, 0x1ff}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x8001)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0xb4, 0x5, 0x1ff, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8, 0x10, 0x4, 0x1ff}}) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x8001) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001) (async)

11:42:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100090}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0xa21, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x20008000) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75ba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x70c9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd6c2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40008}, 0x48004)
write$vga_arbiter(r2, &(0x7f0000000000), 0xf)

[ 2282.408001][T22011] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2282.408019][T22011]  </TASK>
[ 2282.689221][T22033] FAULT_INJECTION: forcing a failure.
[ 2282.689221][T22033] name fail_usercopy, interval 1, probability 0, space 0, times 0
11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d60000000000009660c2bef7d5c4b3943159fa60ab65e90001000000950000000000000018200000", @ANYRES32=r1, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x100, 0x7ff, 0x2, 0x1ff, 0x0, 0x8})

11:42:34 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100090}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0xa21, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x20008000) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xc0, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75ba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x70c9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd6c2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40008}, 0x48004)
write$vga_arbiter(r2, &(0x7f0000000000), 0xf)

[ 2282.702362][T22033] CPU: 0 PID: 22033 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
11:42:34 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x450040, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x210, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe08}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x255c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3b4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r1, &(0x7f00000000c0)=@target={'target ', {'PCI:', 'c', ':', '18', ':', '11', '.', '12'}}, 0x16)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0xb725, 0x4, 0x849, r1, 0x1000, '\x00', 0x0, r1, 0x4, 0x4, 0x5, 0xd}, 0x48)
socketpair(0x10, 0x4, 0x9291, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="330b58a8af55c0b12f28100aa2ae983ac5fb6c45e12ac7a2253708c0a83e4582ff1922053b8950d351cea890044dedf887319698e95e6066daa815884c060bf90c778935217d917bd7eb19539150e1944f24667fba", &(0x7f0000000200)=@tcp6=r3, 0xe1920dc4af61d67}, 0x20)

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4f2a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2282.702392][T22033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2282.702408][T22033] Call Trace:
[ 2282.702415][T22033]  <TASK>
[ 2282.702423][T22033]  dump_stack_lvl+0xda/0x130
[ 2282.702462][T22033]  dump_stack+0x15/0x20
[ 2282.702496][T22033]  should_fail_ex+0x21f/0x230
[ 2282.702534][T22033]  should_fail+0xb/0x10
[ 2282.702562][T22033]  should_fail_usercopy+0x1a/0x20
[ 2282.702666][T22033]  copy_page_from_iter_atomic+0x229/0xb30
[ 2282.702709][T22033]  ? PageHeadHuge+0x3f/0x80
[ 2282.702754][T22033]  ? shmem_write_begin+0x135/0x1e0
[ 2282.702789][T22033]  generic_perform_write+0x203/0x3d0
[ 2282.702822][T22033]  ? shmem_write_begin+0x1e0/0x1e0
[ 2282.702862][T22033]  __generic_file_write_iter+0xe6/0x290
[ 2282.702975][T22033]  generic_file_write_iter+0x7d/0x1c0
[ 2282.703006][T22033]  vfs_write+0x45a/0x750
[ 2282.703044][T22033]  ksys_write+0xeb/0x1a0
[ 2282.703083][T22033]  __x64_sys_write+0x42/0x50
[ 2282.703154][T22033]  do_syscall_64+0x41/0xc0
[ 2282.703201][T22033]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2282.703231][T22033] RIP: 0033:0x7f73579e80f9
11:42:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 8)

11:42:34 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
ioctl$PPPIOCDISCONN(r0, 0x7439)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x21, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x4815)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c000180080006020000000031f39eb6c31b55486549de50b62b3fd7b38d1e84c18b9d5e757489f934b0844046ec6cc81d3582498b5de6680362c118d24b37fb1cd0925b85b96c8b58756d90d7fc9a1319bb3d0ab431b5c253f9433e875a2103f06d99ba2a65ccd224bf2790fbb4daaee872d97a6addb29b640fdf66774c439e88dec1044509916d1e1a0ff06b40fbfcec9d01cfc6a786c916a83b2996b64de193b963120c9125748f976f2b703d6f"], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r5=>0x0, 0x29, 0x5, 0x6, 0x6, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x80, 0x7, 0x10001}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf25010000000800020008000000080003000600000008000300080000000c00018008000700", @ANYRES32=r5, @ANYBLOB="0800020008000000080003000800000034000180060005004e20000008000700", @ANYRES32=r6, @ANYBLOB="080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000df08ca5b4e1c2fa3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x40a, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x815}, 0x8000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:34 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x450040, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x210, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe08}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x255c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3b4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r1, &(0x7f00000000c0)=@target={'target ', {'PCI:', 'c', ':', '18', ':', '11', '.', '12'}}, 0x16)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0xb725, 0x4, 0x849, r1, 0x1000, '\x00', 0x0, r1, 0x4, 0x4, 0x5, 0xd}, 0x48) (async)
socketpair(0x10, 0x4, 0x9291, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="330b58a8af55c0b12f28100aa2ae983ac5fb6c45e12ac7a2253708c0a83e4582ff1922053b8950d351cea890044dedf887319698e95e6066daa815884c060bf90c778935217d917bd7eb19539150e1944f24667fba", &(0x7f0000000200)=@tcp6=r3, 0xe1920dc4af61d67}, 0x20)

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4f2a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:34 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/234)

[ 2282.703249][T22033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2282.703269][T22033] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2282.703345][T22033] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2282.703359][T22033] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x21, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x4815)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c000180080006020000000031f39eb6c31b55486549de50b62b3fd7b38d1e84c18b9d5e757489f934b0844046ec6cc81d3582498b5de6680362c118d24b37fb1cd0925b85b96c8b58756d90d7fc9a1319bb3d0ab431b5c253f9433e875a2103f06d99ba2a65ccd224bf2790fbb4daaee872d97a6addb29b640fdf66774c439e88dec1044509916d1e1a0ff06b40fbfcec9d01cfc6a786c916a83b2996b64de193b963120c9125748f976f2b703d6f"], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r5=>0x0, 0x29, 0x5, 0x6, 0x6, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x80, 0x7, 0x10001}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf25010000000800020008000000080003000600000008000300080000000c00018008000700", @ANYRES32=r5, @ANYBLOB="0800020008000000080003000800000034000180060005004e20000008000700", @ANYRES32=r6, @ANYBLOB="080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000df08ca5b4e1c2fa3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x40a, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x815}, 0x8000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socketpair(0x21, 0x4, 0x4, &(0x7f0000000000)) (async)
sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x4815) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c000180080006020000000031f39eb6c31b55486549de50b62b3fd7b38d1e84c18b9d5e757489f934b0844046ec6cc81d3582498b5de6680362c118d24b37fb1cd0925b85b96c8b58756d90d7fc9a1319bb3d0ab431b5c253f9433e875a2103f06d99ba2a65ccd224bf2790fbb4daaee872d97a6addb29b640fdf66774c439e88dec1044509916d1e1a0ff06b40fbfcec9d01cfc6a786c916a83b2996b64de193b963120c9125748f976f2b703d6f"], 0x20}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x6, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x80, 0x7, 0x10001}}) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf25010000000800020008000000080003000600000008000300080000000c00018008000700", @ANYRES32=r5, @ANYBLOB="0800020008000000080003000800000034000180060005004e20000008000700", @ANYRES32=r6, @ANYBLOB="080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000df08ca5b4e1c2fa3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000001) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0) (async)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x40a, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x815}, 0x8000) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)

[ 2282.703373][T22033] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2282.703388][T22033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2282.703401][T22033] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2282.703468][T22033]  </TASK>
[ 2282.949144][T22071] FAULT_INJECTION: forcing a failure.
[ 2282.949144][T22071] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2282.970426][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair(0x21, 0x4, 0x4, &(0x7f0000000000)) (async)
socketpair(0x21, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x4815)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c000180080006020000000031f39eb6c31b55486549de50b62b3fd7b38d1e84c18b9d5e757489f934b0844046ec6cc81d3582498b5de6680362c118d24b37fb1cd0925b85b96c8b58756d90d7fc9a1319bb3d0ab431b5c253f9433e875a2103f06d99ba2a65ccd224bf2790fbb4daaee872d97a6addb29b640fdf66774c439e88dec1044509916d1e1a0ff06b40fbfcec9d01cfc6a786c916a83b2996b64de193b963120c9125748f976f2b703d6f"], 0x20}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000c000180080006020000000031f39eb6c31b55486549de50b62b3fd7b38d1e84c18b9d5e757489f934b0844046ec6cc81d3582498b5de6680362c118d24b37fb1cd0925b85b96c8b58756d90d7fc9a1319bb3d0ab431b5c253f9433e875a2103f06d99ba2a65ccd224bf2790fbb4daaee872d97a6addb29b640fdf66774c439e88dec1044509916d1e1a0ff06b40fbfcec9d01cfc6a786c916a83b2996b64de193b963120c9125748f976f2b703d6f"], 0x20}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r5=>0x0, 0x29, 0x5, 0x6, 0x6, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x80, 0x7, 0x10001}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdf25010000000800020008000000080003000600000008000300080000000c00018008000700", @ANYRES32=r5, @ANYBLOB="0800020008000000080003000800000034000180060005004e20000008000700", @ANYRES32=r6, @ANYBLOB="080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000df08ca5b4e1c2fa3"], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000001)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r8, 0x40a, 0x70bd26, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x815}, 0x8000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2282.975698][T22071] CPU: 1 PID: 22071 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2282.975743][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2282.975758][T22071] Call Trace:
[ 2282.975763][T22071]  <TASK>
[ 2282.975769][T22071]  dump_stack_lvl+0xda/0x130
[ 2283.008912][T22080] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2283.017225][T22071]  dump_stack+0x15/0x20
[ 2283.054699][T22098] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0xf216)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c005dc50000", @ANYRES16=r1, @ANYBLOB="00042fbd7000fddbdf250200000008000700", @ANYRES32=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4069050}, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r4=>0x0, 0x8, 0x10, 0x5, 0x80000000, {{0x27, 0x4, 0x1, 0xf, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x7, 0xd, "590acefc538ef37fdadc41"}, {0x6, 0x7, "0ce402bc61"}, {0x78a72a68864711fd, 0x5, "130e86"}, {0x6, 0xb, "c703a6bbf29ea5c05a"}]}, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x3, [{@empty, 0x8d88}, {@loopback, 0xe76}, {@rand_addr=0x64010100, 0x31fc}]}, @rr={0x7, 0xb, 0x7d, [@private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xcd, 0x1, 0x4, [{@multicast2, 0x8}, {@multicast1, 0x1}, {@remote, 0x6}, {@multicast1, 0x2}, {@loopback, 0x8001}, {@multicast1, 0xffff}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d7", @ANYRES32=r4, @ANYBLOB="000700290000000500000042460d0018006500005c299078e00000016405000000040100"]})

11:42:34 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd5, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x310, 0xff, 0x4, 0x80, 0xfb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0xf216) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c005dc50000", @ANYRES16=r1, @ANYBLOB="00042fbd7000fddbdf250200000008000700", @ANYRES32=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4069050}, 0x4) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r4=>0x0, 0x8, 0x10, 0x5, 0x80000000, {{0x27, 0x4, 0x1, 0xf, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x7, 0xd, "590acefc538ef37fdadc41"}, {0x6, 0x7, "0ce402bc61"}, {0x78a72a68864711fd, 0x5, "130e86"}, {0x6, 0xb, "c703a6bbf29ea5c05a"}]}, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x3, [{@empty, 0x8d88}, {@loopback, 0xe76}, {@rand_addr=0x64010100, 0x31fc}]}, @rr={0x7, 0xb, 0x7d, [@private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xcd, 0x1, 0x4, [{@multicast2, 0x8}, {@multicast1, 0x1}, {@remote, 0x6}, {@multicast1, 0x2}, {@loopback, 0x8001}, {@multicast1, 0xffff}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d7", @ANYRES32=r4, @ANYBLOB="000700290000000500000042460d0018006500005c299078e00000016405000000040100"]})

[ 2283.057899][T22071]  should_fail_ex+0x21f/0x230
[ 2283.057933][T22071]  __alloc_pages+0x108/0x340
[ 2283.062264][T22099] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2283.071439][T22071]  vma_alloc_folio+0x69d/0x8b0
[ 2283.094889][T22071]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2283.100133][T22071]  shmem_write_begin+0xa6/0x1e0
[ 2283.105076][T22071]  generic_perform_write+0x1c3/0x3d0
[ 2283.110407][T22071]  ? shmem_write_begin+0x1e0/0x1e0
[ 2283.115551][T22071]  __generic_file_write_iter+0xe6/0x290
11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4f2a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2283.121186][T22071]  generic_file_write_iter+0x7d/0x1c0
[ 2283.121218][T22071]  vfs_write+0x45a/0x750
[ 2283.121259][T22071]  ksys_write+0xeb/0x1a0
[ 2283.121290][T22071]  __x64_sys_write+0x42/0x50
[ 2283.121394][T22071]  do_syscall_64+0x41/0xc0
[ 2283.121442][T22071]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2283.121521][T22071] RIP: 0033:0x7f73579e80f9
11:42:34 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 9)

11:42:34 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/234)

11:42:34 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x450040, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x210, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe08}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x255c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3b4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$vga_arbiter(r1, &(0x7f00000000c0)=@target={'target ', {'PCI:', 'c', ':', '18', ':', '11', '.', '12'}}, 0x16) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7ff, 0xb725, 0x4, 0x849, r1, 0x1000, '\x00', 0x0, r1, 0x4, 0x4, 0x5, 0xd}, 0x48)
socketpair(0x10, 0x4, 0x9291, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000180)="330b58a8af55c0b12f28100aa2ae983ac5fb6c45e12ac7a2253708c0a83e4582ff1922053b8950d351cea890044dedf887319698e95e6066daa815884c060bf90c778935217d917bd7eb19539150e1944f24667fba", &(0x7f0000000200)=@tcp6=r3, 0xe1920dc4af61d67}, 0x20)

11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0xf216) (async)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0xf216)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c005dc50000", @ANYRES16=r1, @ANYBLOB="00042fbd7000fddbdf250200000008000700", @ANYRES32=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4069050}, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', <r4=>0x0, 0x8, 0x10, 0x5, 0x80000000, {{0x27, 0x4, 0x1, 0xf, 0x9c, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x7, 0xd, "590acefc538ef37fdadc41"}, {0x6, 0x7, "0ce402bc61"}, {0x78a72a68864711fd, 0x5, "130e86"}, {0x6, 0xb, "c703a6bbf29ea5c05a"}]}, @timestamp_prespec={0x44, 0x1c, 0x5d, 0x3, 0x3, [{@empty, 0x8d88}, {@loopback, 0xe76}, {@rand_addr=0x64010100, 0x31fc}]}, @rr={0x7, 0xb, 0x7d, [@private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xcd, 0x1, 0x4, [{@multicast2, 0x8}, {@multicast1, 0x1}, {@remote, 0x6}, {@multicast1, 0x2}, {@loopback, 0x8001}, {@multicast1, 0xffff}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="d7", @ANYRES32=r4, @ANYBLOB="000700290000000500000042460d0018006500005c299078e00000016405000000040100"]})

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a82, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:34 executing program 5:
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2283.121538][T22071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2283.121558][T22071] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
11:42:34 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

11:42:34 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a82, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a82, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:34 executing program 5:
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2283.121579][T22071] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2283.121593][T22071] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2283.121606][T22071] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2283.121617][T22071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2283.121643][T22071] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2283.121659][T22071]  </TASK>
[ 2283.220048][T22124] FAULT_INJECTION: forcing a failure.
[ 2283.220048][T22124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2283.220074][T22124] CPU: 1 PID: 22124 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2283.220101][T22124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2283.220124][T22124] Call Trace:
[ 2283.220131][T22124]  <TASK>
[ 2283.220138][T22124]  dump_stack_lvl+0xda/0x130
[ 2283.220173][T22124]  dump_stack+0x15/0x20
[ 2283.220270][T22124]  should_fail_ex+0x21f/0x230
[ 2283.220333][T22124]  should_fail+0xb/0x10
[ 2283.220356][T22124]  should_fail_usercopy+0x1a/0x20
[ 2283.220384][T22124]  copy_page_from_iter_atomic+0x229/0xb30
[ 2283.220429][T22124]  ? PageHeadHuge+0x3f/0x80
[ 2283.220518][T22124]  ? shmem_write_begin+0x135/0x1e0
[ 2283.220548][T22124]  generic_perform_write+0x203/0x3d0
[ 2283.220650][T22124]  ? shmem_write_begin+0x1e0/0x1e0
[ 2283.220682][T22124]  __generic_file_write_iter+0xe6/0x290
[ 2283.220710][T22124]  generic_file_write_iter+0x7d/0x1c0
[ 2283.220734][T22124]  vfs_write+0x45a/0x750
[ 2283.220912][T22124]  ksys_write+0xeb/0x1a0
[ 2283.221016][T22124]  __x64_sys_write+0x42/0x50
[ 2283.221050][T22124]  do_syscall_64+0x41/0xc0
[ 2283.221079][T22124]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2283.221173][T22124] RIP: 0033:0x7f73579e80f9
[ 2283.221189][T22124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2283.221211][T22124] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
11:42:35 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd5, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x310, 0xff, 0x4, 0x80, 0xfb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd5, 0x0) (async)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x310, 0xff, 0x4, 0x80, 0xfb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10) (async)

11:42:35 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a82, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

11:42:35 executing program 5:
getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 10)

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/234)

[ 2283.221233][T22124] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2283.221247][T22124] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2283.221260][T22124] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2283.221274][T22124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2283.221288][T22124] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2283.221372][T22124]  </TASK>
11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)) (async)
socketpair(0x15, 0x80000, 0x5, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

11:42:35 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0xa, 0x5, 0x15, 0xe3f})

11:42:35 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SVE_SET_VL(0x32, 0x27b17)

[ 2283.558367][T22152] FAULT_INJECTION: forcing a failure.
[ 2283.558367][T22152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2283.571684][T22152] CPU: 0 PID: 22152 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2283.582399][T22152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2283.592475][T22152] Call Trace:
[ 2283.595785][T22152]  <TASK>
11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x6, 0x6, {{0x7, 0x4, 0x3, 0x33, 0x1c, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x6, 0x6, {{0x7, 0x4, 0x3, 0x33, 0x1c, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})

11:42:35 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xc) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
prctl$PR_SVE_SET_VL(0x32, 0x27b17)

[ 2283.595793][T22152]  dump_stack_lvl+0xda/0x130
[ 2283.595875][T22152]  dump_stack+0x15/0x20
[ 2283.595903][T22152]  should_fail_ex+0x21f/0x230
[ 2283.595931][T22152]  __alloc_pages+0x108/0x340
[ 2283.596036][T22152]  vma_alloc_folio+0x69d/0x8b0
[ 2283.596069][T22152]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2283.596105][T22152]  shmem_write_begin+0xa6/0x1e0
[ 2283.596168][T22152]  generic_perform_write+0x1c3/0x3d0
[ 2283.596190][T22152]  ? shmem_write_begin+0x1e0/0x1e0
[ 2283.596279][T22152]  __generic_file_write_iter+0xe6/0x290
[ 2283.596303][T22152]  generic_file_write_iter+0x7d/0x1c0
[ 2283.596398][T22152]  vfs_write+0x45a/0x750
[ 2283.596446][T22152]  ksys_write+0xeb/0x1a0
[ 2283.596584][T22152]  __x64_sys_write+0x42/0x50
[ 2283.596614][T22152]  do_syscall_64+0x41/0xc0
[ 2283.596642][T22152]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2283.596671][T22152] RIP: 0033:0x7f73579e80f9
[ 2283.596687][T22152] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2283.596779][T22152] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2283.596872][T22152] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2283.596885][T22152] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2283.596897][T22152] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2283.596911][T22152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2283.596925][T22152] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
11:42:35 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd5, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x310, 0xff, 0x4, 0x80, 0xfb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd5, 0x0) (async)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x310, 0xff, 0x4, 0x80, 0xfb, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10) (async)

11:42:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 11)

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x6, 0x6, {{0x7, 0x4, 0x3, 0x33, 0x1c, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x6, 0x6, {{0x7, 0x4, 0x3, 0x33, 0x1c, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) (async)

11:42:35 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x340, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xc)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
prctl$PR_SVE_SET_VL(0x32, 0x27b17)

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4f0a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x100000001, 0x224000)
write$vga_arbiter(r1, &(0x7f00000000c0), 0x9)

11:42:35 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0xa, 0x5, 0x15, 0xe3f})

[ 2283.596943][T22152]  </TASK>
[ 2283.826612][T22191] FAULT_INJECTION: forcing a failure.
[ 2283.826612][T22191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2283.839789][T22191] CPU: 1 PID: 22191 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x4df4, 0xe7})

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4f0a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x100000001, 0x224000)
write$vga_arbiter(r1, &(0x7f00000000c0), 0x9)

11:42:35 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x40, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@target={'target ', {'PCI:', '7', ':', '11', ':', '1c', '.', '6'}}, 0x15)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x1ff, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xc3, [@multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0xcb, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0x9, [{@private=0xa010101, 0x7fffffff}, {@remote, 0x8001}, {@remote, 0x1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc20}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0xe, [{@remote, 0x400}]}, @end, @rr={0x7, 0xb, 0x6, [@loopback, @broadcast]}]}}}}})

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 32)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x4df4, 0xe7})

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4f0a81, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x100000001, 0x224000)
write$vga_arbiter(r1, &(0x7f00000000c0), 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4f0a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_open_dev$vcsn(&(0x7f0000000080), 0x100000001, 0x224000) (async)
write$vga_arbiter(r1, &(0x7f00000000c0), 0x9) (async)

[ 2283.839814][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2283.839852][T22191] Call Trace:
[ 2283.839857][T22191]  <TASK>
[ 2283.839863][T22191]  dump_stack_lvl+0xda/0x130
[ 2283.839896][T22191]  dump_stack+0x15/0x20
[ 2283.875603][T22191]  should_fail_ex+0x21f/0x230
[ 2283.875635][T22191]  should_fail+0xb/0x10
[ 2283.875673][T22191]  should_fail_usercopy+0x1a/0x20
11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x4df4, 0xe7})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x4df4, 0xe7}) (async)

[ 2283.875749][T22191]  copy_page_from_iter_atomic+0x229/0xb30
[ 2283.875790][T22191]  ? PageHeadHuge+0x3f/0x80
[ 2283.875824][T22191]  ? shmem_write_begin+0x135/0x1e0
[ 2283.875870][T22191]  generic_perform_write+0x203/0x3d0
[ 2283.875949][T22191]  ? shmem_write_begin+0x1e0/0x1e0
[ 2283.875986][T22191]  __generic_file_write_iter+0xe6/0x290
[ 2283.876010][T22191]  generic_file_write_iter+0x7d/0x1c0
[ 2283.876059][T22191]  vfs_write+0x45a/0x750
[ 2283.876096][T22191]  ksys_write+0xeb/0x1a0
[ 2283.876175][T22191]  __x64_sys_write+0x42/0x50
[ 2283.876209][T22191]  do_syscall_64+0x41/0xc0
[ 2283.876236][T22191]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2283.876332][T22191] RIP: 0033:0x7f73579e80f9
[ 2283.876347][T22191] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2283.876442][T22191] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2283.876463][T22191] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2283.876477][T22191] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2283.876491][T22191] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
11:42:35 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4})
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x4}}, 0x2e)

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 12)

11:42:35 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0xa, 0x5, 0x15, 0xe3f})

11:42:35 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x40, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@target={'target ', {'PCI:', '7', ':', '11', ':', '1c', '.', '6'}}, 0x15)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x1ff, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xc3, [@multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0xcb, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0x9, [{@private=0xa010101, 0x7fffffff}, {@remote, 0x8001}, {@remote, 0x1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc20}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0xe, [{@remote, 0x400}]}, @end, @rr={0x7, 0xb, 0x6, [@loopback, @broadcast]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x1ff, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xc3, [@multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0xcb, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0x9, [{@private=0xa010101, 0x7fffffff}, {@remote, 0x8001}, {@remote, 0x1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc20}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0xe, [{@remote, 0x400}]}, @end, @rr={0x7, 0xb, 0x6, [@loopback, @broadcast]}]}}}}})

[ 2283.876503][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2283.876515][T22191] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2283.876530][T22191]  </TASK>
[ 2284.101984][T22218] FAULT_INJECTION: forcing a failure.
11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)

11:42:35 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 13)

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async, rerun: 64)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2284.101984][T22218] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2284.115333][T22218] CPU: 1 PID: 22218 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2284.115363][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2284.115377][T22218] Call Trace:
11:42:35 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)

11:42:35 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x4, 0x5, 0x3, 0x8000, 0x3, 0x9, 0x397}, &(0x7f00000000c0)={0x4, 0x40, 0x7, 0xc2c, 0x0, 0x7fff000000, 0x0, 0x100000001}, &(0x7f0000000100)={0xfffffffffffff000, 0xfca, 0x6, 0x20, 0xffffffffffffffff, 0x2, 0x1, 0x4000000000004}, &(0x7f0000000140))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2284.115384][T22218]  <TASK>
[ 2284.115390][T22218]  dump_stack_lvl+0xda/0x130
[ 2284.115432][T22218]  dump_stack+0x15/0x20
[ 2284.115472][T22218]  should_fail_ex+0x21f/0x230
[ 2284.115567][T22218]  __alloc_pages+0x108/0x340
[ 2284.115670][T22218]  vma_alloc_folio+0x69d/0x8b0
[ 2284.115729][T22218]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2284.115772][T22218]  shmem_write_begin+0xa6/0x1e0
[ 2284.115872][T22218]  generic_perform_write+0x1c3/0x3d0
[ 2284.115937][T22218]  ? shmem_write_begin+0x1e0/0x1e0
[ 2284.116081][T22218]  __generic_file_write_iter+0xe6/0x290
[ 2284.116149][T22218]  generic_file_write_iter+0x7d/0x1c0
[ 2284.116172][T22218]  vfs_write+0x45a/0x750
[ 2284.116284][T22218]  ksys_write+0xeb/0x1a0
[ 2284.116316][T22218]  __x64_sys_write+0x42/0x50
[ 2284.116349][T22218]  do_syscall_64+0x41/0xc0
[ 2284.116435][T22218]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2284.116463][T22218] RIP: 0033:0x7f73579e80f9
[ 2284.116496][T22218] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2284.116519][T22218] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2284.116539][T22218] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2284.116559][T22218] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2284.116574][T22218] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2284.116589][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2284.116604][T22218] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2284.116622][T22218]  </TASK>
[ 2284.166214][T22235] FAULT_INJECTION: forcing a failure.
[ 2284.166214][T22235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2284.166247][T22235] CPU: 1 PID: 22235 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2284.166273][T22235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2284.166345][T22235] Call Trace:
[ 2284.166351][T22235]  <TASK>
[ 2284.166358][T22235]  dump_stack_lvl+0xda/0x130
[ 2284.166398][T22235]  dump_stack+0x15/0x20
[ 2284.166426][T22235]  should_fail_ex+0x21f/0x230
[ 2284.166456][T22235]  should_fail+0xb/0x10
[ 2284.166482][T22235]  should_fail_usercopy+0x1a/0x20
[ 2284.166577][T22235]  copy_page_from_iter_atomic+0x229/0xb30
[ 2284.166674][T22235]  ? PageHeadHuge+0x3f/0x80
[ 2284.166698][T22235]  ? shmem_write_begin+0x135/0x1e0
[ 2284.166735][T22235]  generic_perform_write+0x203/0x3d0
[ 2284.166772][T22235]  ? shmem_write_begin+0x1e0/0x1e0
[ 2284.166804][T22235]  __generic_file_write_iter+0xe6/0x290
[ 2284.166831][T22235]  generic_file_write_iter+0x7d/0x1c0
[ 2284.166921][T22235]  vfs_write+0x45a/0x750
[ 2284.166952][T22235]  ksys_write+0xeb/0x1a0
[ 2284.167018][T22235]  __x64_sys_write+0x42/0x50
[ 2284.167060][T22235]  do_syscall_64+0x41/0xc0
[ 2284.167088][T22235]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2284.167202][T22235] RIP: 0033:0x7f73579e80f9
[ 2284.167247][T22235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2284.167268][T22235] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2284.167288][T22235] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
11:42:36 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4})
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x4}}, 0x2e)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4}) (async)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x4}}, 0x2e) (async)

11:42:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 14)

11:42:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
read$qrtrtun(r0, &(0x7f0000000080)=""/49, 0x31)

11:42:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x4, 0x5, 0x3, 0x8000, 0x3, 0x9, 0x397}, &(0x7f00000000c0)={0x4, 0x40, 0x7, 0xc2c, 0x0, 0x7fff000000, 0x0, 0x100000001}, &(0x7f0000000100)={0xfffffffffffff000, 0xfca, 0x6, 0x20, 0xffffffffffffffff, 0x2, 0x1, 0x4000000000004}, &(0x7f0000000140))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2284.167303][T22235] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2284.167317][T22235] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2284.167331][T22235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2284.167344][T22235] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2284.167361][T22235]  </TASK>
[ 2284.571911][T22251] FAULT_INJECTION: forcing a failure.
[ 2284.571911][T22251] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2284.585295][T22251] CPU: 1 PID: 22251 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2284.595890][T22251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2284.605952][T22251] Call Trace:
[ 2284.609229][T22251]  <TASK>
[ 2284.612260][T22251]  dump_stack_lvl+0xda/0x130
[ 2284.616891][T22251]  dump_stack+0x15/0x20
11:42:36 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}})
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x543660, 0x0)

11:42:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x40, 0x0)
write$vga_arbiter(r0, &(0x7f00000001c0)=@target={'target ', {'PCI:', '7', ':', '11', ':', '1c', '.', '6'}}, 0x15) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x9, 0x1ff, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x67, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0xb, 0xc3, [@multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0xcb, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0xb2, 0x3, 0x9, [{@private=0xa010101, 0x7fffffff}, {@remote, 0x8001}, {@remote, 0x1}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xc20}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}, {@local, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0xe, [{@remote, 0x400}]}, @end, @rr={0x7, 0xb, 0x6, [@loopback, @broadcast]}]}}}}})

[ 2284.621061][T22251]  should_fail_ex+0x21f/0x230
[ 2284.625761][T22251]  __alloc_pages+0x108/0x340
[ 2284.630387][T22251]  vma_alloc_folio+0x69d/0x8b0
[ 2284.635222][T22251]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2284.640478][T22251]  shmem_write_begin+0xa6/0x1e0
[ 2284.645363][T22251]  generic_perform_write+0x1c3/0x3d0
[ 2284.650939][T22251]  ? shmem_write_begin+0x1e0/0x1e0
[ 2284.656149][T22251]  __generic_file_write_iter+0xe6/0x290
[ 2284.661737][T22251]  generic_file_write_iter+0x7d/0x1c0
[ 2284.667127][T22251]  vfs_write+0x45a/0x750
[ 2284.671417][T22251]  ksys_write+0xeb/0x1a0
[ 2284.675687][T22251]  __x64_sys_write+0x42/0x50
[ 2284.680310][T22251]  do_syscall_64+0x41/0xc0
[ 2284.684746][T22251]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2284.690709][T22251] RIP: 0033:0x7f73579e80f9
[ 2284.695135][T22251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
select(0x40, &(0x7f0000000080)={0x8, 0x4, 0x5, 0x3, 0x8000, 0x3, 0x9, 0x397}, &(0x7f00000000c0)={0x4, 0x40, 0x7, 0xc2c, 0x0, 0x7fff000000, 0x0, 0x100000001}, &(0x7f0000000100)={0xfffffffffffff000, 0xfca, 0x6, 0x20, 0xffffffffffffffff, 0x2, 0x1, 0x4000000000004}, &(0x7f0000000140)) (async)
select(0x40, &(0x7f0000000080)={0x8, 0x4, 0x5, 0x3, 0x8000, 0x3, 0x9, 0x397}, &(0x7f00000000c0)={0x4, 0x40, 0x7, 0xc2c, 0x0, 0x7fff000000, 0x0, 0x100000001}, &(0x7f0000000100)={0xfffffffffffff000, 0xfca, 0x6, 0x20, 0xffffffffffffffff, 0x2, 0x1, 0x4000000000004}, &(0x7f0000000140))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
read$qrtrtun(r0, &(0x7f0000000080)=""/49, 0x31)

11:42:36 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}})
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x543660, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x543660, 0x0) (async)

11:42:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:36 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4}) (async)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x4}}, 0x2e)

11:42:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000)=0x8, 0x4)

11:42:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 15)

[ 2284.714752][T22251] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2284.723186][T22251] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2284.731236][T22251] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2284.731266][T22251] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2284.731281][T22251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2284.731296][T22251] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2284.731315][T22251]  </TASK>
11:42:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2284.823479][T22288] FAULT_INJECTION: forcing a failure.
[ 2284.823479][T22288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2284.836674][T22288] CPU: 0 PID: 22288 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2284.847346][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2284.857418][T22288] Call Trace:
[ 2284.860707][T22288]  <TASK>
[ 2284.863643][T22288]  dump_stack_lvl+0xda/0x130
[ 2284.868258][T22288]  dump_stack+0x15/0x20
11:42:36 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4022c1, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100))
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:36 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}})
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x543660, 0x0)

11:42:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000)=0x8, 0x4)

[ 2284.872487][T22288]  should_fail_ex+0x21f/0x230
[ 2284.877217][T22288]  should_fail+0xb/0x10
[ 2284.881388][T22288]  should_fail_usercopy+0x1a/0x20
[ 2284.886428][T22288]  copy_page_from_iter_atomic+0x229/0xb30
[ 2284.892252][T22288]  ? PageHeadHuge+0x3f/0x80
[ 2284.896868][T22288]  ? shmem_write_begin+0x135/0x1e0
[ 2284.902073][T22288]  generic_perform_write+0x203/0x3d0
[ 2284.902111][T22288]  ? shmem_write_begin+0x1e0/0x1e0
[ 2284.912530][T22288]  __generic_file_write_iter+0xe6/0x290
[ 2284.918128][T22288]  generic_file_write_iter+0x7d/0x1c0
11:42:36 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4022c1, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100))
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

[ 2284.923604][T22288]  vfs_write+0x45a/0x750
[ 2284.927935][T22288]  ksys_write+0xeb/0x1a0
[ 2284.932319][T22288]  __x64_sys_write+0x42/0x50
[ 2284.936938][T22288]  do_syscall_64+0x41/0xc0
[ 2284.941398][T22288]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2284.947320][T22288] RIP: 0033:0x7f73579e80f9
[ 2284.951829][T22288] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:36 executing program 1:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xc, 0x7, 0xfff, 0x3c, 0x100})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:36 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
read$qrtrtun(r0, &(0x7f0000000080)=""/49, 0x31)

11:42:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000)=0x8, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
pipe2$watch_queue(&(0x7f0000000080), 0x80) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x18) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000000)=0x8, 0x4) (async)

[ 2284.971533][T22288] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2284.980061][T22288] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2284.988037][T22288] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2284.996033][T22288] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2285.004022][T22288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2285.012096][T22288] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2285.020090][T22288]  </TASK>
11:42:36 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4022c1, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:36 executing program 1:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xc, 0x7, 0xfff, 0x3c, 0x100})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:36 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 16)

11:42:36 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x119680, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x1, 0x9})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:36 executing program 2:
alarm(0x8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)

11:42:36 executing program 1:
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xc, 0x7, 0xfff, 0x3c, 0x100})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:36 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4084)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:36 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x4})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:36 executing program 2:
alarm(0x8) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 32)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (rerun: 32)

[ 2285.209996][T22335] FAULT_INJECTION: forcing a failure.
[ 2285.209996][T22335] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2285.223370][T22335] CPU: 0 PID: 22335 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2285.234115][T22335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2285.244182][T22335] Call Trace:
[ 2285.247470][T22335]  <TASK>
[ 2285.250491][T22335]  dump_stack_lvl+0xda/0x130
[ 2285.255097][T22335]  dump_stack+0x15/0x20
[ 2285.259358][T22335]  should_fail_ex+0x21f/0x230
[ 2285.264117][T22335]  __alloc_pages+0x108/0x340
[ 2285.268807][T22335]  vma_alloc_folio+0x69d/0x8b0
[ 2285.273591][T22335]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2285.278844][T22335]  shmem_write_begin+0xa6/0x1e0
[ 2285.283740][T22335]  generic_perform_write+0x1c3/0x3d0
[ 2285.289147][T22335]  ? shmem_write_begin+0x1e0/0x1e0
[ 2285.294284][T22335]  __generic_file_write_iter+0xe6/0x290
[ 2285.299841][T22335]  generic_file_write_iter+0x7d/0x1c0
[ 2285.305245][T22335]  vfs_write+0x45a/0x750
11:42:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x119680, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x1, 0x9}) (async)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:37 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4084)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:37 executing program 2:
alarm(0x8)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)

11:42:37 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x4})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2285.309553][T22335]  ksys_write+0xeb/0x1a0
[ 2285.313873][T22335]  __x64_sys_write+0x42/0x50
[ 2285.318489][T22335]  do_syscall_64+0x41/0xc0
[ 2285.322931][T22335]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2285.328853][T22335] RIP: 0033:0x7f73579e80f9
[ 2285.333348][T22335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 17)

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x119680, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x1, 0x9})
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x119680, 0x0) (async)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x7, 0x3, 0x1, 0x9}) (async)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)

11:42:37 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xbe}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4084)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:37 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0x4}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20008040)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2285.352991][T22335] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2285.353079][T22335] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2285.353099][T22335] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2285.377442][T22335] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2285.385431][T22335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2285.393440][T22335] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2285.401441][T22335]  </TASK>
[ 2285.451429][T22368] FAULT_INJECTION: forcing a failure.
[ 2285.451429][T22368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2285.464591][T22368] CPU: 1 PID: 22368 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2285.475204][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2285.485329][T22368] Call Trace:
[ 2285.488611][T22368]  <TASK>
[ 2285.491545][T22368]  dump_stack_lvl+0xda/0x130
[ 2285.496160][T22368]  dump_stack+0x15/0x20
11:42:37 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10)

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x571a81, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2285.500378][T22368]  should_fail_ex+0x21f/0x230
[ 2285.505064][T22368]  should_fail+0xb/0x10
[ 2285.509240][T22368]  should_fail_usercopy+0x1a/0x20
[ 2285.509270][T22368]  copy_page_from_iter_atomic+0x229/0xb30
[ 2285.509305][T22368]  ? PageHeadHuge+0x3f/0x80
[ 2285.509349][T22368]  ? shmem_write_begin+0x135/0x1e0
[ 2285.509379][T22368]  generic_perform_write+0x203/0x3d0
[ 2285.509401][T22368]  ? shmem_write_begin+0x1e0/0x1e0
[ 2285.509429][T22368]  __generic_file_write_iter+0xe6/0x290
[ 2285.509481][T22368]  generic_file_write_iter+0x7d/0x1c0
[ 2285.509612][T22368]  vfs_write+0x45a/0x750
11:42:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20008040) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:37 executing program 1:
syz_open_dev$evdev(&(0x7f00000000c0), 0x610e, 0x80000)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="6bbde55d227c77915d3bb23b8e66f55389a85d9cd44c89486044ac32d43162b0b73f745b7715e7213c368bf60df88802f2086c2dae77637eee8d6e5cebcdf37e0e53b31357d07b1190d6667e6775268b147e0042d30d3b5b826db65b8c32c8fa4aee9374f352afa50e1a1a89937fca5c767912c2dac269f6a6e74a35235872fdec05ffc0b80049b488888ae4079ea90f90d264c660")
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18)

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x571a81, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x571a81, 0x0) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)

11:42:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20008040)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2285.509694][T22368]  ksys_write+0xeb/0x1a0
[ 2285.509768][T22368]  __x64_sys_write+0x42/0x50
[ 2285.509801][T22368]  do_syscall_64+0x41/0xc0
[ 2285.509830][T22368]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2285.509854][T22368] RIP: 0033:0x7f73579e80f9
11:42:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 18)

11:42:37 executing program 1:
syz_open_dev$evdev(&(0x7f00000000c0), 0x610e, 0x80000) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="6bbde55d227c77915d3bb23b8e66f55389a85d9cd44c89486044ac32d43162b0b73f745b7715e7213c368bf60df88802f2086c2dae77637eee8d6e5cebcdf37e0e53b31357d07b1190d6667e6775268b147e0042d30d3b5b826db65b8c32c8fa4aee9374f352afa50e1a1a89937fca5c767912c2dac269f6a6e74a35235872fdec05ffc0b80049b488888ae4079ea90f90d264c660") (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18)

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x571a81, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:37 executing program 2:
clock_getres(0x6, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2285.509897][T22368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2285.509933][T22368] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
11:42:37 executing program 1:
syz_open_dev$evdev(&(0x7f00000000c0), 0x610e, 0x80000)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="6bbde55d227c77915d3bb23b8e66f55389a85d9cd44c89486044ac32d43162b0b73f745b7715e7213c368bf60df88802f2086c2dae77637eee8d6e5cebcdf37e0e53b31357d07b1190d6667e6775268b147e0042d30d3b5b826db65b8c32c8fa4aee9374f352afa50e1a1a89937fca5c767912c2dac269f6a6e74a35235872fdec05ffc0b80049b488888ae4079ea90f90d264c660")
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18)

[ 2285.509953][T22368] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2285.509966][T22368] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2285.509977][T22368] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2285.509989][T22368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2285.510001][T22368] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2285.510018][T22368]  </TASK>
[ 2285.754891][T22397] FAULT_INJECTION: forcing a failure.
[ 2285.754891][T22397] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2285.754919][T22397] CPU: 0 PID: 22397 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2285.754941][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2285.754953][T22397] Call Trace:
[ 2285.754958][T22397]  <TASK>
[ 2285.754964][T22397]  dump_stack_lvl+0xda/0x130
[ 2285.755057][T22397]  dump_stack+0x15/0x20
[ 2285.755083][T22397]  should_fail_ex+0x21f/0x230
[ 2285.755206][T22397]  __alloc_pages+0x108/0x340
[ 2285.755295][T22397]  vma_alloc_folio+0x69d/0x8b0
[ 2285.755326][T22397]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2285.755417][T22397]  shmem_write_begin+0xa6/0x1e0
[ 2285.755528][T22397]  generic_perform_write+0x1c3/0x3d0
[ 2285.755553][T22397]  ? shmem_write_begin+0x1e0/0x1e0
[ 2285.755582][T22397]  __generic_file_write_iter+0xe6/0x290
[ 2285.755604][T22397]  generic_file_write_iter+0x7d/0x1c0
[ 2285.755655][T22397]  vfs_write+0x45a/0x750
[ 2285.755762][T22397]  ksys_write+0xeb/0x1a0
[ 2285.755790][T22397]  __x64_sys_write+0x42/0x50
[ 2285.755877][T22397]  do_syscall_64+0x41/0xc0
[ 2285.755900][T22397]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2285.755996][T22397] RIP: 0033:0x7f73579e80f9
[ 2285.756049][T22397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2285.756069][T22397] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2285.756092][T22397] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2285.756104][T22397] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
11:42:37 executing program 2:
clock_getres(0x6, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)

11:42:37 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 19)

11:42:37 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendto$llc(r0, &(0x7f00000000c0)="bc72e49bc4157d375f2c89162607d58aeedac89de161edd1e6bb86ed03c505a07830eda33c", 0x25, 0x200400c1, &(0x7f0000000100)={0x1a, 0x339, 0x4, 0x7f, 0x20, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:37 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10)

11:42:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

[ 2285.756186][T22397] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2285.756200][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2285.756248][T22397] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2285.756263][T22397]  </TASK>
[ 2286.031042][T22411] FAULT_INJECTION: forcing a failure.
[ 2286.031042][T22411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2286.044124][T22411] CPU: 1 PID: 22411 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2286.054788][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2286.064908][T22411] Call Trace:
[ 2286.068273][T22411]  <TASK>
[ 2286.071221][T22411]  dump_stack_lvl+0xda/0x130
[ 2286.075823][T22411]  dump_stack+0x15/0x20
[ 2286.079991][T22411]  should_fail_ex+0x21f/0x230
[ 2286.084742][T22411]  should_fail+0xb/0x10
[ 2286.088926][T22411]  should_fail_usercopy+0x1a/0x20
[ 2286.094072][T22411]  copy_page_from_iter_atomic+0x229/0xb30
[ 2286.099848][T22411]  ? PageHeadHuge+0x3f/0x80
[ 2286.104366][T22411]  ? shmem_write_begin+0x135/0x1e0
[ 2286.109528][T22411]  generic_perform_write+0x203/0x3d0
[ 2286.114827][T22411]  ? shmem_write_begin+0x1e0/0x1e0
[ 2286.119961][T22411]  __generic_file_write_iter+0xe6/0x290
[ 2286.125731][T22411]  generic_file_write_iter+0x7d/0x1c0
[ 2286.131206][T22411]  vfs_write+0x45a/0x750
[ 2286.135484][T22411]  ksys_write+0xeb/0x1a0
[ 2286.139749][T22411]  __x64_sys_write+0x42/0x50
[ 2286.144464][T22411]  do_syscall_64+0x41/0xc0
[ 2286.148964][T22411]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2286.154930][T22411] RIP: 0033:0x7f73579e80f9
[ 2286.159345][T22411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:37 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendto$llc(r0, &(0x7f00000000c0)="bc72e49bc4157d375f2c89162607d58aeedac89de161edd1e6bb86ed03c505a07830eda33c", 0x25, 0x200400c1, &(0x7f0000000100)={0x1a, 0x339, 0x4, 0x7f, 0x20, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:37 executing program 2:
clock_getres(0x6, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async, rerun: 32)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (rerun: 32)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)

11:42:37 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeba3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ff2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf651}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x24040000)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:37 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
sendto$llc(r0, &(0x7f00000000c0)="bc72e49bc4157d375f2c89162607d58aeedac89de161edd1e6bb86ed03c505a07830eda33c", 0x25, 0x200400c1, &(0x7f0000000100)={0x1a, 0x339, 0x4, 0x7f, 0x20, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
sendto$llc(r0, &(0x7f00000000c0)="bc72e49bc4157d375f2c89162607d58aeedac89de161edd1e6bb86ed03c505a07830eda33c", 0x25, 0x200400c1, &(0x7f0000000100)={0x1a, 0x339, 0x4, 0x7f, 0x20, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x10) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:37 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc46}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbce}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x1331}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote, 0x840c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @mcast2, 0xffffff18}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9533}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000090)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4be5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:37 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
pipe2$watch_queue(&(0x7f0000000100), 0x80) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async)

[ 2286.178966][T22411] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2286.187451][T22411] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2286.195477][T22411] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2286.203532][T22411] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2286.211510][T22411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2286.219520][T22411] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2286.227512][T22411]  </TASK>
11:42:37 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x10) (async)

11:42:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 20)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/133})

11:42:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc46}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbce}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x1331}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote, 0x840c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @mcast2, 0xffffff18}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9533}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000090)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4be5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) (async)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc46}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbce}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x1331}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote, 0x840c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @mcast2, 0xffffff18}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9533}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000090) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4be5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)

11:42:38 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7fff, 0xe08c1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r2, &(0x7f0000000080), 0xf)

11:42:38 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/133})

11:42:38 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

11:42:38 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeba3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ff2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf651}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) (async, rerun: 32)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (rerun: 32)

11:42:38 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7fff, 0xe08c1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r2, &(0x7f0000000080), 0xf)

11:42:38 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc46}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbce}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private1, 0x1331}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @remote, 0x840c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xf9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @local, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @mcast2, 0xffffff18}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9533}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000090)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4be5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d8, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x42}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16c}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4be5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000000)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2286.437497][T22470] FAULT_INJECTION: forcing a failure.
[ 2286.437497][T22470] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2286.450754][T22470] CPU: 0 PID: 22470 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2286.461352][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2286.471417][T22470] Call Trace:
[ 2286.474703][T22470]  <TASK>
[ 2286.477637][T22470]  dump_stack_lvl+0xda/0x130
[ 2286.482329][T22470]  dump_stack+0x15/0x20
11:42:38 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x18c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeba3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8ff2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x22}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf651}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

[ 2286.486515][T22470]  should_fail_ex+0x21f/0x230
[ 2286.491208][T22470]  __alloc_pages+0x108/0x340
[ 2286.495823][T22470]  vma_alloc_folio+0x69d/0x8b0
[ 2286.500614][T22470]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2286.505915][T22470]  shmem_write_begin+0xa6/0x1e0
[ 2286.510789][T22470]  generic_perform_write+0x1c3/0x3d0
[ 2286.516091][T22470]  ? shmem_write_begin+0x1e0/0x1e0
[ 2286.521268][T22470]  __generic_file_write_iter+0xe6/0x290
[ 2286.526866][T22470]  generic_file_write_iter+0x7d/0x1c0
[ 2286.532308][T22470]  vfs_write+0x45a/0x750
[ 2286.536585][T22470]  ksys_write+0xeb/0x1a0
[ 2286.540870][T22470]  __x64_sys_write+0x42/0x50
[ 2286.545508][T22470]  do_syscall_64+0x41/0xc0
[ 2286.549959][T22470]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2286.555915][T22470] RIP: 0033:0x7f73579e80f9
[ 2286.560333][T22470] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:38 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7fff, 0xe08c1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (rerun: 32)
write$vga_arbiter(r2, &(0x7f0000000080), 0xf)

11:42:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 21)

11:42:38 executing program 2:
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x9, "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"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x90c42, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000300)=0xe, 0x81000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000480)=0x1, 0x4)
bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e00), 0x2000, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x2, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bind$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x401, @none, 0x8001, 0x1}, 0xe)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x8, 0x1, 0xf0, 0x31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x29}, 0x80, 0x8000, 0x0, 0x8}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000c80)={0x110, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004841}, 0x2040000)
r7 = syz_open_dev$vcsn(&(0x7f0000000380), 0x4, 0x80000)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x160, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54d9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x3, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x437f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x858}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40895}, 0x80)
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000000)={0x80fd, 0x2})
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x9, 0x4)

11:42:38 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/133})

[ 2286.580013][T22470] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2286.588438][T22470] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2286.588452][T22470] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2286.588465][T22470] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2286.612442][T22470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2286.612461][T22470] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2286.628519][T22470]  </TASK>
11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x31}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44004)

11:42:38 executing program 5:
getsockname$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2286.687130][T22499] FAULT_INJECTION: forcing a failure.
[ 2286.687130][T22499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2286.700296][T22499] CPU: 0 PID: 22499 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2286.710971][T22499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2286.721179][T22499] Call Trace:
[ 2286.724482][T22499]  <TASK>
[ 2286.727426][T22499]  dump_stack_lvl+0xda/0x130
[ 2286.732047][T22499]  dump_stack+0x15/0x20
11:42:38 executing program 0:
timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100))
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x32, 0x40000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:38 executing program 5:
getsockname$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2286.736251][T22499]  should_fail_ex+0x21f/0x230
[ 2286.741044][T22499]  should_fail+0xb/0x10
[ 2286.745245][T22499]  should_fail_usercopy+0x1a/0x20
[ 2286.750281][T22499]  copy_page_from_iter_atomic+0x229/0xb30
[ 2286.756021][T22499]  ? PageHeadHuge+0x3f/0x80
[ 2286.760561][T22499]  ? shmem_write_begin+0x135/0x1e0
[ 2286.765718][T22499]  generic_perform_write+0x203/0x3d0
[ 2286.771022][T22499]  ? shmem_write_begin+0x1e0/0x1e0
[ 2286.776165][T22499]  __generic_file_write_iter+0xe6/0x290
[ 2286.781955][T22499]  generic_file_write_iter+0x7d/0x1c0
11:42:38 executing program 2:
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x9, "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"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x90c42, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000300)=0xe, 0x81000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000480)=0x1, 0x4) (async, rerun: 64)
bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) (async, rerun: 64)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e00), 0x2000, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x2, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 32)
bind$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x401, @none, 0x8001, 0x1}, 0xe) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x8, 0x1, 0xf0, 0x31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x29}, 0x80, 0x8000, 0x0, 0x8}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000c80)={0x110, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004841}, 0x2040000) (async)
r7 = syz_open_dev$vcsn(&(0x7f0000000380), 0x4, 0x80000)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x160, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54d9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x3, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x437f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x858}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40895}, 0x80) (async)
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000000)={0x80fd, 0x2}) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x9, 0x4)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x31}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44004) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x31}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44004)

11:42:38 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa8, 0x1, 0x1ff, 0x41, @remote, @private2, 0x7, 0x700, 0x20, 0x1000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x5, 0xc3, 0x80})
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x8, 0x7f, 0x5, 0x1, 0x2})
write$vga_arbiter(r1, &(0x7f0000000000)=@unlock_all, 0xb)
ioctl$VT_RELDISP(r1, 0x5605)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x4059)
timer_create(0x7, &(0x7f0000000300)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="c499e49dbb6fa3539bbc6061beee3d0e3f6d412920de378ef4e2ea5038093f727133d1b2ff8fed4cb74ba3b337b3210e94609a828de92376f9e43fdcbfb384f7f7a243e9eeb399506830a1582c0abc9565915695f03cd2bb33016662303c972ff639621ef6117d3e373e4396ab34103a349e34d121e5bbf9326da42ac643e42ce28822130a991e7da558fccbc603", &(0x7f0000000280)="bcbd0e1b65ef3df68364ec7bb4bedc2b73cd74c29277f89c0cc9820c96ea42bb25c3ec495df2e36b644a96be843a7e87e70502735d32962de584fbf70ebbd2c5319330ee5de57219f70d667807"}}, &(0x7f0000000340))

11:42:38 executing program 0:
timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100))
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x32, 0x40000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

[ 2286.787347][T22499]  vfs_write+0x45a/0x750
[ 2286.791666][T22499]  ksys_write+0xeb/0x1a0
[ 2286.796032][T22499]  __x64_sys_write+0x42/0x50
[ 2286.800722][T22499]  do_syscall_64+0x41/0xc0
[ 2286.805272][T22499]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2286.811189][T22499] RIP: 0033:0x7f73579e80f9
[ 2286.815619][T22499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2286.835351][T22499] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2286.835376][T22499] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2286.835393][T22499] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2286.835410][T22499] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2286.835426][T22499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2286.875866][T22499] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2286.883850][T22499]  </TASK>
11:42:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 22)

11:42:38 executing program 2:
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x9, "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"})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x90c42, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000300)=0xe, 0x81000) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000480)=0x1, 0x4) (async)
bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) (async, rerun: 64)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e00), 0x2000, 0x0) (rerun: 64)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x2, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 64)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bind$bt_l2cap(r5, &(0x7f00000004c0)={0x1f, 0x401, @none, 0x8001, 0x1}, 0xe)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6gre0\x00', <r6=>0x0, 0x2f, 0x8, 0x1, 0xf0, 0x31, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x29}, 0x80, 0x8000, 0x0, 0x8}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000c80)={0x110, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004841}, 0x2040000) (async, rerun: 32)
r7 = syz_open_dev$vcsn(&(0x7f0000000380), 0x4, 0x80000) (rerun: 32)
sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x160, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x54d9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x3, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x437f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x858}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40895}, 0x80)
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000000)={0x80fd, 0x2})
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x9, 0x4)

11:42:38 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa8, 0x1, 0x1ff, 0x41, @remote, @private2, 0x7, 0x700, 0x20, 0x1000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x5, 0xc3, 0x80})
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x8, 0x7f, 0x5, 0x1, 0x2})
write$vga_arbiter(r1, &(0x7f0000000000)=@unlock_all, 0xb)
ioctl$VT_RELDISP(r1, 0x5605)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x4059)
timer_create(0x7, &(0x7f0000000300)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="c499e49dbb6fa3539bbc6061beee3d0e3f6d412920de378ef4e2ea5038093f727133d1b2ff8fed4cb74ba3b337b3210e94609a828de92376f9e43fdcbfb384f7f7a243e9eeb399506830a1582c0abc9565915695f03cd2bb33016662303c972ff639621ef6117d3e373e4396ab34103a349e34d121e5bbf9326da42ac643e42ce28822130a991e7da558fccbc603", &(0x7f0000000280)="bcbd0e1b65ef3df68364ec7bb4bedc2b73cd74c29277f89c0cc9820c96ea42bb25c3ec495df2e36b644a96be843a7e87e70502735d32962de584fbf70ebbd2c5319330ee5de57219f70d667807"}}, &(0x7f0000000340))
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa8, 0x1, 0x1ff, 0x41, @remote, @private2, 0x7, 0x700, 0x20, 0x1000}}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x5, 0xc3, 0x80}) (async)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x8, 0x7f, 0x5, 0x1, 0x2}) (async)
write$vga_arbiter(r1, &(0x7f0000000000)=@unlock_all, 0xb) (async)
ioctl$VT_RELDISP(r1, 0x5605) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x4059) (async)
timer_create(0x7, &(0x7f0000000300)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="c499e49dbb6fa3539bbc6061beee3d0e3f6d412920de378ef4e2ea5038093f727133d1b2ff8fed4cb74ba3b337b3210e94609a828de92376f9e43fdcbfb384f7f7a243e9eeb399506830a1582c0abc9565915695f03cd2bb33016662303c972ff639621ef6117d3e373e4396ab34103a349e34d121e5bbf9326da42ac643e42ce28822130a991e7da558fccbc603", &(0x7f0000000280)="bcbd0e1b65ef3df68364ec7bb4bedc2b73cd74c29277f89c0cc9820c96ea42bb25c3ec495df2e36b644a96be843a7e87e70502735d32962de584fbf70ebbd2c5319330ee5de57219f70d667807"}}, &(0x7f0000000340)) (async)

11:42:38 executing program 5:
getsockname$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:38 executing program 0:
timer_settime(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100))
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x32, 0x40000)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x31}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44004)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x80) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x31}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x44004) (async)

11:42:38 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000)
read$qrtrtun(r1, &(0x7f0000000100)=""/229, 0xe5)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x94540)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x20202, 0x0)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x7, 0xfc01, 0x1, 0x7f, 0x2})
getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

11:42:38 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/111})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="b41e123635ad80cdf3fac761fdbb5ff61ba29b39424fc107df25803b534288737243ef1a7c3e946e442021ca0e776c912d5e4ff254")

11:42:38 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xa8, 0x1, 0x1ff, 0x41, @remote, @private2, 0x7, 0x700, 0x20, 0x1000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x5, 0xc3, 0x80})
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x8, 0x7f, 0x5, 0x1, 0x2})
write$vga_arbiter(r1, &(0x7f0000000000)=@unlock_all, 0xb)
ioctl$VT_RELDISP(r1, 0x5605) (async)
ioctl$VT_RELDISP(r1, 0x5605)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x4059) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x4059)
timer_create(0x7, &(0x7f0000000300)={0x0, 0x17, 0x2, @thr={&(0x7f00000001c0)="c499e49dbb6fa3539bbc6061beee3d0e3f6d412920de378ef4e2ea5038093f727133d1b2ff8fed4cb74ba3b337b3210e94609a828de92376f9e43fdcbfb384f7f7a243e9eeb399506830a1582c0abc9565915695f03cd2bb33016662303c972ff639621ef6117d3e373e4396ab34103a349e34d121e5bbf9326da42ac643e42ce28822130a991e7da558fccbc603", &(0x7f0000000280)="bcbd0e1b65ef3df68364ec7bb4bedc2b73cd74c29277f89c0cc9820c96ea42bb25c3ec495df2e36b644a96be843a7e87e70502735d32962de584fbf70ebbd2c5319330ee5de57219f70d667807"}}, &(0x7f0000000340))

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x59, 0x410c})

11:42:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@loopback}, {@broadcast}, {@multicast2}, {@remote}, {@multicast1}]}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x1a, 0x9ea6, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x700, 0x4ea, 0xfffffffb}})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0xe8c, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6b}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc045}, 0x4000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000380)=""/44)

11:42:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@loopback}, {@broadcast}, {@multicast2}, {@remote}, {@multicast1}]}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x1a, 0x9ea6, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x700, 0x4ea, 0xfffffffb}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0xe8c, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6b}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc045}, 0x4000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000380)=""/44) (async)
ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000380)=""/44)

[ 2287.070419][T22551] FAULT_INJECTION: forcing a failure.
[ 2287.070419][T22551] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2287.083737][T22551] CPU: 1 PID: 22551 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2287.094335][T22551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2287.104398][T22551] Call Trace:
[ 2287.107683][T22551]  <TASK>
[ 2287.110615][T22551]  dump_stack_lvl+0xda/0x130
11:42:38 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 23)

11:42:38 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x59, 0x410c})

11:42:38 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={@empty, 0x0, 0x0, 0x60, 0x0, [{@empty}, {@loopback}, {@broadcast}, {@multicast2}, {@remote}, {@multicast1}]}})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x1a, 0x9ea6, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x700, 0x4ea, 0xfffffffb}}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x58, 0x0, 0xe8c, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6b}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc045}, 0x4000) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000380)=""/44)

11:42:38 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:38 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/111})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="b41e123635ad80cdf3fac761fdbb5ff61ba29b39424fc107df25803b534288737243ef1a7c3e946e442021ca0e776c912d5e4ff254")

11:42:38 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

[ 2287.110654][T22551]  dump_stack+0x15/0x20
[ 2287.110695][T22551]  should_fail_ex+0x21f/0x230
[ 2287.110724][T22551]  __alloc_pages+0x108/0x340
[ 2287.110816][T22551]  vma_alloc_folio+0x69d/0x8b0
[ 2287.110849][T22551]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2287.110914][T22551]  shmem_write_begin+0xa6/0x1e0
[ 2287.110948][T22551]  generic_perform_write+0x1c3/0x3d0
[ 2287.111012][T22551]  ? shmem_write_begin+0x1e0/0x1e0
[ 2287.111047][T22551]  __generic_file_write_iter+0xe6/0x290
[ 2287.111074][T22551]  generic_file_write_iter+0x7d/0x1c0
[ 2287.111116][T22551]  vfs_write+0x45a/0x750
[ 2287.111154][T22551]  ksys_write+0xeb/0x1a0
[ 2287.111182][T22551]  __x64_sys_write+0x42/0x50
[ 2287.111327][T22551]  do_syscall_64+0x41/0xc0
[ 2287.111422][T22551]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2287.111454][T22551] RIP: 0033:0x7f73579e80f9
[ 2287.111471][T22551] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2287.111491][T22551] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2287.111510][T22551] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2287.111585][T22551] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2287.111601][T22551] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2287.111615][T22551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2287.111645][T22551] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2287.111662][T22551]  </TASK>
[ 2287.159593][T22576] FAULT_INJECTION: forcing a failure.
[ 2287.159593][T22576] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2287.159621][T22576] CPU: 0 PID: 22576 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2287.159648][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2287.159660][T22576] Call Trace:
[ 2287.159665][T22576]  <TASK>
[ 2287.159671][T22576]  dump_stack_lvl+0xda/0x130
[ 2287.159765][T22576]  dump_stack+0x15/0x20
[ 2287.159791][T22576]  should_fail_ex+0x21f/0x230
[ 2287.159854][T22576]  should_fail+0xb/0x10
[ 2287.159874][T22576]  should_fail_usercopy+0x1a/0x20
[ 2287.159918][T22576]  copy_page_from_iter_atomic+0x229/0xb30
[ 2287.159971][T22576]  ? PageHeadHuge+0x3f/0x80
[ 2287.159995][T22576]  ? shmem_write_begin+0x135/0x1e0
[ 2287.160092][T22576]  generic_perform_write+0x203/0x3d0
[ 2287.160146][T22576]  ? shmem_write_begin+0x1e0/0x1e0
[ 2287.160180][T22576]  __generic_file_write_iter+0xe6/0x290
[ 2287.160231][T22576]  generic_file_write_iter+0x7d/0x1c0
[ 2287.160255][T22576]  vfs_write+0x45a/0x750
[ 2287.160347][T22576]  ksys_write+0xeb/0x1a0
[ 2287.160380][T22576]  __x64_sys_write+0x42/0x50
[ 2287.160427][T22576]  do_syscall_64+0x41/0xc0
[ 2287.160456][T22576]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2287.160484][T22576] RIP: 0033:0x7f73579e80f9
[ 2287.160499][T22576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2287.160539][T22576] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2287.160560][T22576] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2287.160574][T22576] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2287.160587][T22576] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2287.160600][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2287.160614][T22576] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2287.160665][T22576]  </TASK>
11:42:39 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000)
read$qrtrtun(r1, &(0x7f0000000100)=""/229, 0xe5)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x94540)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x20202, 0x0) (async)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x7, 0xfc01, 0x1, 0x7f, 0x2}) (async)
getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

11:42:39 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/111})
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="b41e123635ad80cdf3fac761fdbb5ff61ba29b39424fc107df25803b534288737243ef1a7c3e946e442021ca0e776c912d5e4ff254")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/111}) (async)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="b41e123635ad80cdf3fac761fdbb5ff61ba29b39424fc107df25803b534288737243ef1a7c3e946e442021ca0e776c912d5e4ff254") (async)

11:42:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x59, 0x410c})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x59, 0x410c}) (async)

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x535a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:39 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xfffffdef)

11:42:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 24)

[ 2287.928406][T22587] FAULT_INJECTION: forcing a failure.
[ 2287.928406][T22587] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2287.941701][T22587] CPU: 0 PID: 22587 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2287.952368][T22587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2287.962442][T22587] Call Trace:
[ 2287.965749][T22587]  <TASK>
[ 2287.968782][T22587]  dump_stack_lvl+0xda/0x130
[ 2287.973396][T22587]  dump_stack+0x15/0x20
[ 2287.977637][T22587]  should_fail_ex+0x21f/0x230
[ 2287.982386][T22587]  __alloc_pages+0x108/0x340
[ 2287.987018][T22587]  vma_alloc_folio+0x69d/0x8b0
[ 2287.991824][T22587]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2287.991869][T22587]  shmem_write_begin+0xa6/0x1e0
[ 2288.001940][T22587]  generic_perform_write+0x1c3/0x3d0
[ 2288.007259][T22587]  ? shmem_write_begin+0x1e0/0x1e0
[ 2288.012410][T22587]  __generic_file_write_iter+0xe6/0x290
[ 2288.017988][T22587]  generic_file_write_iter+0x7d/0x1c0
[ 2288.023438][T22587]  vfs_write+0x45a/0x750
[ 2288.027823][T22587]  ksys_write+0xeb/0x1a0
[ 2288.032130][T22587]  __x64_sys_write+0x42/0x50
[ 2288.036964][T22587]  do_syscall_64+0x41/0xc0
[ 2288.041412][T22587]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2288.047362][T22587] RIP: 0033:0x7f73579e80f9
[ 2288.051789][T22587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:39 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x24}}, 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x535a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x535a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)

11:42:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x7590c2, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:39 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000)
read$qrtrtun(r1, &(0x7f0000000100)=""/229, 0xe5)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x94540)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x20202, 0x0)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x7, 0xfc01, 0x1, 0x7f, 0x2})
getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) (async)
read$qrtrtun(r1, &(0x7f0000000100)=""/229, 0xe5) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
syz_open_dev$vcsn(&(0x7f0000000200), 0x2, 0x94540) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x20202, 0x0) (async)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x0, 0x7, 0xfc01, 0x1, 0x7f, 0x2}) (async)
getsockopt$llc_int(r2, 0x10c, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async)

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x535a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffe0}, 0x4)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000f60000005f7645b7ce3e0000000041000000000000000000000000000000cea245f531aa00bd9820250f9a5f6674d1a04190b1c80dcf983b1bd3fd1b0f549104f26cb647a3ffa347f10492d39dde634f8603bea78296d59bd74fd98b41f44db93f2db94a1cc75ebeeb47395356c99b07e9e969d750b9229fc62501af674c65731ea89551f469c66aa3d90d2665bdb691342ac5ef63e53b", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x7590c2, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x7590c2, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffe0}, 0x4)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffe0}, 0x4) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)

[ 2288.071417][T22587] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2288.079899][T22587] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2288.087887][T22587] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2288.095951][T22587] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2288.103950][T22587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2288.112026][T22587] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2288.120045][T22587]  </TASK>
11:42:39 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 25)

11:42:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x7590c2, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (rerun: 32)

[ 2288.177638][T22633] FAULT_INJECTION: forcing a failure.
[ 2288.177638][T22633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2288.190731][T22633] CPU: 1 PID: 22633 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2288.201451][T22633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2288.201469][T22633] Call Trace:
[ 2288.201476][T22633]  <TASK>
[ 2288.217797][T22633]  dump_stack_lvl+0xda/0x130
[ 2288.222429][T22633]  dump_stack+0x15/0x20
11:42:39 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2288.226642][T22633]  should_fail_ex+0x21f/0x230
[ 2288.226672][T22633]  should_fail+0xb/0x10
[ 2288.226720][T22633]  should_fail_usercopy+0x1a/0x20
[ 2288.226745][T22633]  copy_page_from_iter_atomic+0x229/0xb30
[ 2288.246419][T22633]  ? PageHeadHuge+0x3f/0x80
[ 2288.250968][T22633]  ? shmem_write_begin+0x135/0x1e0
[ 2288.256166][T22633]  generic_perform_write+0x203/0x3d0
[ 2288.261469][T22633]  ? shmem_write_begin+0x1e0/0x1e0
[ 2288.266653][T22633]  __generic_file_write_iter+0xe6/0x290
11:42:39 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x24}}, 0x8000) (async, rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) (rerun: 32)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:39 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000f60000005f7645b7ce3e0000000041000000000000000000000000000000cea245f531aa00bd9820250f9a5f6674d1a04190b1c80dcf983b1bd3fd1b0f549104f26cb647a3ffa347f10492d39dde634f8603bea78296d59bd74fd98b41f44db93f2db94a1cc75ebeeb47395356c99b07e9e969d750b9229fc62501af674c65731ea89551f469c66aa3d90d2665bdb691342ac5ef63e53b", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:39 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xffffffe0}, 0x4) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2288.266749][T22633]  generic_file_write_iter+0x7d/0x1c0
[ 2288.266800][T22633]  vfs_write+0x45a/0x750
[ 2288.266834][T22633]  ksys_write+0xeb/0x1a0
[ 2288.266925][T22633]  __x64_sys_write+0x42/0x50
[ 2288.267009][T22633]  do_syscall_64+0x41/0xc0
[ 2288.267095][T22633]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2288.267182][T22633] RIP: 0033:0x7f73579e80f9
[ 2288.267201][T22633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2288.267225][T22633] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2288.267248][T22633] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2288.267264][T22633] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2288.267279][T22633] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2288.267295][T22633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x56ee1f84, 0x4100)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/80)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xe74, 0x2, 0x0, 0x1, 0x8, "7a70c4371c89b5e1d74264def509e80da2e7d9"})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200))
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000f60000005f7645b7ce3e0000000041000000000000000000000000000000cea245f531aa00bd9820250f9a5f6674d1a04190b1c80dcf983b1bd3fd1b0f549104f26cb647a3ffa347f10492d39dde634f8603bea78296d59bd74fd98b41f44db93f2db94a1cc75ebeeb47395356c99b07e9e969d750b9229fc62501af674c65731ea89551f469c66aa3d90d2665bdb691342ac5ef63e53b", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:40 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2288.267310][T22633] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2288.267367][T22633]  </TASK>
11:42:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 26)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
clock_gettime(0x4, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602ec1, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8eb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x5000)

11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x56ee1f84, 0x4100)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/80)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xe74, 0x2, 0x0, 0x1, 0x8, "7a70c4371c89b5e1d74264def509e80da2e7d9"})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200))
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_open_dev$evdev(&(0x7f0000000140), 0x56ee1f84, 0x4100) (async)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/80) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xe74, 0x2, 0x0, 0x1, 0x8, "7a70c4371c89b5e1d74264def509e80da2e7d9"}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)

11:42:40 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb)

11:42:40 executing program 2:
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

11:42:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x24}}, 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

11:42:40 executing program 2:
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

11:42:40 executing program 2:
r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) (async)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

[ 2288.596086][T22701] FAULT_INJECTION: forcing a failure.
[ 2288.596086][T22701] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2288.609387][T22701] CPU: 1 PID: 22701 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2288.620063][T22701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2288.630124][T22701] Call Trace:
[ 2288.633402][T22701]  <TASK>
[ 2288.636388][T22701]  dump_stack_lvl+0xda/0x130
[ 2288.641082][T22701]  dump_stack+0x15/0x20
11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x155503, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x5, 0x3f, 0x1f, 0x8, 0x0, 0xa90d, 0x8220, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf3a7, 0x0, @perf_config_ext={0xad2, 0x3ff}, 0x20, 0x8, 0x2, 0x3, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0x3})
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
shmget(0x3, 0x5000, 0x10, &(0x7f0000ffa000/0x5000)=nil)

11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x56ee1f84, 0x4100)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/80) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0xe74, 0x2, 0x0, 0x1, 0x8, "7a70c4371c89b5e1d74264def509e80da2e7d9"}) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) (async, rerun: 64)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x155503, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x5, 0x3f, 0x1f, 0x8, 0x0, 0xa90d, 0x8220, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf3a7, 0x0, @perf_config_ext={0xad2, 0x3ff}, 0x20, 0x8, 0x2, 0x3, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0x3}) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
shmget(0x3, 0x5000, 0x10, &(0x7f0000ffa000/0x5000)=nil)

[ 2288.645256][T22701]  should_fail_ex+0x21f/0x230
[ 2288.649974][T22701]  __alloc_pages+0x108/0x340
[ 2288.654603][T22701]  vma_alloc_folio+0x69d/0x8b0
[ 2288.659464][T22701]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2288.664807][T22701]  shmem_write_begin+0xa6/0x1e0
[ 2288.669688][T22701]  generic_perform_write+0x1c3/0x3d0
[ 2288.674994][T22701]  ? shmem_write_begin+0x1e0/0x1e0
[ 2288.680183][T22701]  __generic_file_write_iter+0xe6/0x290
[ 2288.685773][T22701]  generic_file_write_iter+0x7d/0x1c0
[ 2288.691236][T22701]  vfs_write+0x45a/0x750
[ 2288.695542][T22701]  ksys_write+0xeb/0x1a0
[ 2288.699818][T22701]  __x64_sys_write+0x42/0x50
[ 2288.704461][T22701]  do_syscall_64+0x41/0xc0
[ 2288.708961][T22701]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2288.714881][T22701] RIP: 0033:0x7f73579e80f9
[ 2288.719308][T22701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 27)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x155503, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x5, 0x3f, 0x1f, 0x8, 0x0, 0xa90d, 0x8220, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf3a7, 0x0, @perf_config_ext={0xad2, 0x3ff}, 0x20, 0x8, 0x2, 0x3, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0x3})
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
shmget(0x3, 0x5000, 0x10, &(0x7f0000ffa000/0x5000)=nil)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
clock_gettime(0x4, &(0x7f0000000000)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602ec1, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8eb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x5000)

11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

[ 2288.739060][T22701] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2288.747549][T22701] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2288.755601][T22701] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2288.763627][T22701] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2288.771613][T22701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2288.779583][T22701] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2288.787562][T22701]  </TASK>
[ 2288.841938][T22734] FAULT_INJECTION: forcing a failure.
[ 2288.841938][T22734] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2288.855060][T22734] CPU: 0 PID: 22734 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2288.865727][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2288.875829][T22734] Call Trace:
[ 2288.879199][T22734]  <TASK>
[ 2288.882198][T22734]  dump_stack_lvl+0xda/0x130
[ 2288.886949][T22734]  dump_stack+0x15/0x20
[ 2288.891178][T22734]  should_fail_ex+0x21f/0x230
[ 2288.895941][T22734]  should_fail+0xb/0x10
[ 2288.900105][T22734]  should_fail_usercopy+0x1a/0x20
[ 2288.905236][T22734]  copy_page_from_iter_atomic+0x229/0xb30
[ 2288.910978][T22734]  ? PageHeadHuge+0x3f/0x80
[ 2288.915498][T22734]  ? shmem_write_begin+0x135/0x1e0
[ 2288.920653][T22734]  generic_perform_write+0x203/0x3d0
[ 2288.925968][T22734]  ? shmem_write_begin+0x1e0/0x1e0
[ 2288.931107][T22734]  __generic_file_write_iter+0xe6/0x290
[ 2288.936672][T22734]  generic_file_write_iter+0x7d/0x1c0
11:42:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x3)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'freezer'}]}, 0x17)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
clock_gettime(0x4, &(0x7f0000000000))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602ec1, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8eb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x5000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
clock_gettime(0x4, &(0x7f0000000000)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x602ec1, 0x0) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8eb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x5000) (async)

11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080))

[ 2288.942077][T22734]  vfs_write+0x45a/0x750
[ 2288.946353][T22734]  ksys_write+0xeb/0x1a0
[ 2288.950612][T22734]  __x64_sys_write+0x42/0x50
[ 2288.955230][T22734]  do_syscall_64+0x41/0xc0
[ 2288.959728][T22734]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2288.965648][T22734] RIP: 0033:0x7f73579e80f9
[ 2288.970075][T22734] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'freezer'}]}, 0x17)

[ 2288.989707][T22734] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2288.998223][T22734] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2289.006210][T22734] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2289.014194][T22734] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.022294][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2289.030282][T22734] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2289.038261][T22734]  </TASK>
11:42:40 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 28)

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_fd={0x18, 0xe, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0x7, 0x1}, @generic={0x40, 0xb, 0x7, 0x8, 0x1d5e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xf0, 0x7f}, 0x10}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4308c3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80) (rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'cpu'}, {0x2d, 'net_cls'}, {0x2b, 'freezer'}]}, 0x17)

11:42:40 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r1, &(0x7f0000000080)=""/125, 0x7d)

11:42:40 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x3)

11:42:40 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r1, &(0x7f0000000080)=""/125, 0x7d)

11:42:40 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4308c3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:40 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_fd={0x18, 0xe, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0x7, 0x1}, @generic={0x40, 0xb, 0x7, 0x8, 0x1d5e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xf0, 0x7f}, 0x10}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_fd={0x18, 0xe, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0x7, 0x1}, @generic={0x40, 0xb, 0x7, 0x8, 0x1d5e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xf0, 0x7f}, 0x10}, 0x80) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (async)

11:42:40 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x10, 0x1f, 0x18, 0x0, 0x8, 0x8220, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3771, 0x8000}, 0x12101, 0x3f, 0x9, 0x7, 0x4, 0x400, 0xe15e, 0x0, 0x4000000, 0x0, 0x1}, r2, 0x10, r3, 0x8)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:40 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x2f}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0x1, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r1, &(0x7f0000000080)=""/125, 0x7d)

[ 2289.274311][T22777] FAULT_INJECTION: forcing a failure.
[ 2289.274311][T22777] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2289.287648][T22777] CPU: 0 PID: 22777 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2289.298315][T22777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2289.308379][T22777] Call Trace:
[ 2289.311666][T22777]  <TASK>
[ 2289.314604][T22777]  dump_stack_lvl+0xda/0x130
[ 2289.319252][T22777]  dump_stack+0x15/0x20
[ 2289.323443][T22777]  should_fail_ex+0x21f/0x230
[ 2289.328232][T22777]  __alloc_pages+0x108/0x340
[ 2289.332923][T22777]  vma_alloc_folio+0x69d/0x8b0
[ 2289.337715][T22777]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2289.342983][T22777]  shmem_write_begin+0xa6/0x1e0
[ 2289.347889][T22777]  generic_perform_write+0x1c3/0x3d0
[ 2289.353250][T22777]  ? shmem_write_begin+0x1e0/0x1e0
[ 2289.358429][T22777]  __generic_file_write_iter+0xe6/0x290
[ 2289.364070][T22777]  generic_file_write_iter+0x7d/0x1c0
[ 2289.369486][T22777]  vfs_write+0x45a/0x750
11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x10, 0x1f, 0x18, 0x0, 0x8, 0x8220, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3771, 0x8000}, 0x12101, 0x3f, 0x9, 0x7, 0x4, 0x400, 0xe15e, 0x0, 0x4000000, 0x0, 0x1}, r2, 0x10, r3, 0x8)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2289.373755][T22777]  ksys_write+0xeb/0x1a0
[ 2289.378028][T22777]  __x64_sys_write+0x42/0x50
[ 2289.382651][T22777]  do_syscall_64+0x41/0xc0
[ 2289.387104][T22777]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2289.393044][T22777] RIP: 0033:0x7f73579e80f9
[ 2289.397479][T22777] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 29)

11:42:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_fd={0x18, 0xe, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0x7, 0x1}, @generic={0x40, 0xb, 0x7, 0x8, 0x1d5e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xd4, &(0x7f0000000100)=""/212, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0xf0, 0x7f}, 0x10}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4308c3, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4308c3, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x10, 0x1f, 0x18, 0x0, 0x8, 0x8220, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3771, 0x8000}, 0x12101, 0x3f, 0x9, 0x7, 0x4, 0x400, 0xe15e, 0x0, 0x4000000, 0x0, 0x1}, r2, 0x10, r3, 0x8)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:41 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x3) (async)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x3)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xf2083, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe)

[ 2289.417096][T22777] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2289.425599][T22777] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2289.433573][T22777] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2289.441612][T22777] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.449672][T22777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2289.449690][T22777] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000010)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x4260a70e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6, 0xe, "03d9863ce1ef5f7c69fa6dfa080342c55c76d9"})
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xffff0001, <r4=>0x0}, 0x8)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x8001, 0x301000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x504, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x2cbf, 0xff}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[r0, r5, r1]}, 0x80)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xf2083, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe)

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000010) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2289.449710][T22777]  </TASK>
[ 2289.504293][T22806] FAULT_INJECTION: forcing a failure.
[ 2289.504293][T22806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2289.504393][T22806] CPU: 1 PID: 22806 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2289.504415][T22806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2289.504428][T22806] Call Trace:
[ 2289.504434][T22806]  <TASK>
[ 2289.504441][T22806]  dump_stack_lvl+0xda/0x130
[ 2289.504475][T22806]  dump_stack+0x15/0x20
[ 2289.504521][T22806]  should_fail_ex+0x21f/0x230
[ 2289.504547][T22806]  should_fail+0xb/0x10
[ 2289.504570][T22806]  should_fail_usercopy+0x1a/0x20
[ 2289.504633][T22806]  copy_page_from_iter_atomic+0x229/0xb30
[ 2289.504671][T22806]  ? PageHeadHuge+0x3f/0x80
[ 2289.504696][T22806]  ? shmem_write_begin+0x135/0x1e0
[ 2289.504803][T22806]  generic_perform_write+0x203/0x3d0
[ 2289.504829][T22806]  ? shmem_write_begin+0x1e0/0x1e0
[ 2289.504908][T22806]  __generic_file_write_iter+0xe6/0x290
[ 2289.504931][T22806]  generic_file_write_iter+0x7d/0x1c0
[ 2289.504954][T22806]  vfs_write+0x45a/0x750
[ 2289.504990][T22806]  ksys_write+0xeb/0x1a0
[ 2289.505023][T22806]  __x64_sys_write+0x42/0x50
[ 2289.505051][T22806]  do_syscall_64+0x41/0xc0
[ 2289.505083][T22806]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2289.505169][T22806] RIP: 0033:0x7f73579e80f9
[ 2289.505185][T22806] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2289.505206][T22806] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2289.505229][T22806] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2289.505293][T22806] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2289.505305][T22806] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2289.505317][T22806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2289.505403][T22806] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
11:42:41 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xf2083, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2}, 0xe)

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000010)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 30)

11:42:41 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)

11:42:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x4260a70e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6, 0xe, "03d9863ce1ef5f7c69fa6dfa080342c55c76d9"}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xffff0001, <r4=>0x0}, 0x8) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x8001, 0x301000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x504, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x2cbf, 0xff}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[r0, r5, r1]}, 0x80)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf2b84830524750cd}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4040}, 0x10)

[ 2289.505420][T22806]  </TASK>
[ 2289.849382][T22825] FAULT_INJECTION: forcing a failure.
[ 2289.849382][T22825] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2289.862686][T22825] CPU: 0 PID: 22825 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2289.873294][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf2b84830524750cd}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="080014bd7000ffdbdf25090000004400098008000200060000000800010008000000080002000104000008000200220200000800020008000000080001000100000008000200000000000800020001800000c00004802c00078008000400ff0f000008000400ff0f00000800010014000000080001001e00000008000200890e00001300010062726f6164636173742d6c696e6b00003c0007800800010002000000080003001f00800008000200050000000800030003000000080002000800000008000200030000000800020007000000340007800800010020000000080002001a00000008000200000800000800040000000100080002000000000008000400090000000900010073797a3000000000200001801c000280080002000000000008000300370000000800020003000000980006804600040067636d28616573290000000000000000000000000000000000000000000000001e000000fe021d345379bedb76d9a425e72cdf71710d0eb9780f092796de7e0bf93200004400040067636d28616573290000000000000000000000000000000000000000000000001c000000af03dd138700496360e1a5d8ba7a6bca2562d070bb0ac1e95e833bb804000200040005002c0007800c0003003d0f000000000000080001000800000008000200ffffff7f0c000400c5ca0000000000002c000380080002000000000008000100ce00000008000100d200000008000100feffffff0800020092000000"], 0x228}, 0x1, 0x0, 0x0, 0x4040}, 0x10)

11:42:41 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf2b84830524750cd}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="080014bd7000ffdbdf25090000004400098008000200060000000800010008000000080002000104000008000200220200000800020008000000080001000100000008000200000000000800020001800000c00004802c00078008000400ff0f000008000400ff0f00000800010014000000080001001e00000008000200890e00001300010062726f6164636173742d6c696e6b00003c0007800800010002000000080003001f00800008000200050000000800030003000000080002000800000008000200030000000800020007000000340007800800010020000000080002001a00000008000200000800000800040000000100080002000000000008000400090000000900010073797a3000000000200001801c000280080002000000000008000300370000000800020003000000980006804600040067636d28616573290000000000000000000000000000000000000000000000001e000000fe021d345379bedb76d9a425e72cdf71710d0eb9780f092796de7e0bf93200004400040067636d28616573290000000000000000000000000000000000000000000000001c000000af03dd138700496360e1a5d8ba7a6bca2562d070bb0ac1e95e833bb804000200040005002c0007800c0003003d0f000000000000080001000800000008000200ffffff7f0c000400c5ca0000000000002c000380080002000000000008000100ce00000008000100d200000008000100feffffff0800020092000000"], 0x228}, 0x1, 0x0, 0x0, 0x4040}, 0x10)

[ 2289.883405][T22825] Call Trace:
[ 2289.886694][T22825]  <TASK>
[ 2289.889633][T22825]  dump_stack_lvl+0xda/0x130
[ 2289.894291][T22825]  dump_stack+0x15/0x20
[ 2289.898471][T22825]  should_fail_ex+0x21f/0x230
[ 2289.903177][T22825]  __alloc_pages+0x108/0x340
[ 2289.907869][T22825]  vma_alloc_folio+0x69d/0x8b0
[ 2289.912667][T22825]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2289.917903][T22825]  shmem_write_begin+0xa6/0x1e0
[ 2289.922897][T22825]  generic_perform_write+0x1c3/0x3d0
[ 2289.928244][T22825]  ? shmem_write_begin+0x1e0/0x1e0
11:42:41 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x573a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2289.933389][T22825]  __generic_file_write_iter+0xe6/0x290
[ 2289.938965][T22825]  generic_file_write_iter+0x7d/0x1c0
[ 2289.944445][T22825]  vfs_write+0x45a/0x750
[ 2289.948758][T22825]  ksys_write+0xeb/0x1a0
[ 2289.953046][T22825]  __x64_sys_write+0x42/0x50
[ 2289.957705][T22825]  do_syscall_64+0x41/0xc0
[ 2289.962281][T22825]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2289.968282][T22825] RIP: 0033:0x7f73579e80f9
[ 2289.972753][T22825] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2289.992392][T22825] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2290.000832][T22825] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2290.000850][T22825] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2290.000866][T22825] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
11:42:41 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1)

11:42:41 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/23)

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x573a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:41 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x4260a70e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6, 0xe, "03d9863ce1ef5f7c69fa6dfa080342c55c76d9"})
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xffff0001, <r4=>0x0}, 0x8)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x8001, 0x301000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x504, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x2cbf, 0xff}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[r0, r5, r1]}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x4260a70e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x6, 0xe, "03d9863ce1ef5f7c69fa6dfa080342c55c76d9"}) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xffff0001}, 0x8) (async)
syz_open_dev$vcsn(&(0x7f0000000300), 0x8001, 0x301000) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xf}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x504, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x2cbf, 0xff}, 0x10, r4, 0x0, 0x0, &(0x7f0000000340)=[r0, r5, r1]}, 0x80) (async)

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x84)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:41 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 31)

[ 2290.000917][T22825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2290.000931][T22825] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2290.000950][T22825]  </TASK>
[ 2290.071454][T22863] FAULT_INJECTION: forcing a failure.
[ 2290.071454][T22863] name fail_usercopy, interval 1, probability 0, space 0, times 0
11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x84)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x573a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2290.084544][T22863] CPU: 0 PID: 22863 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2290.095149][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2290.095163][T22863] Call Trace:
[ 2290.095168][T22863]  <TASK>
11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x10000000000, 0x38, 0x9, 0x80000001})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2290.095175][T22863]  dump_stack_lvl+0xda/0x130
11:42:41 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x7d, 0x9, 0x4, 0x100, 0xffffffffffffffff, 0x100, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x48)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:41 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x10000000000, 0x38, 0x9, 0x80000001})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2290.095279][T22863]  dump_stack+0x15/0x20
[ 2290.095304][T22863]  should_fail_ex+0x21f/0x230
[ 2290.095331][T22863]  should_fail+0xb/0x10
[ 2290.095353][T22863]  should_fail_usercopy+0x1a/0x20
[ 2290.095381][T22863]  copy_page_from_iter_atomic+0x229/0xb30
[ 2290.095452][T22863]  ? PageHeadHuge+0x3f/0x80
[ 2290.095475][T22863]  ? shmem_write_begin+0x135/0x1e0
[ 2290.095508][T22863]  generic_perform_write+0x203/0x3d0
[ 2290.095566][T22863]  ? shmem_write_begin+0x1e0/0x1e0
[ 2290.095599][T22863]  __generic_file_write_iter+0xe6/0x290
[ 2290.095626][T22863]  generic_file_write_iter+0x7d/0x1c0
[ 2290.095652][T22863]  vfs_write+0x45a/0x750
[ 2290.095701][T22863]  ksys_write+0xeb/0x1a0
[ 2290.095734][T22863]  __x64_sys_write+0x42/0x50
[ 2290.095834][T22863]  do_syscall_64+0x41/0xc0
[ 2290.095858][T22863]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2290.095957][T22863] RIP: 0033:0x7f73579e80f9
[ 2290.095971][T22863] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2290.095989][T22863] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2290.096007][T22863] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2290.096042][T22863] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2290.096056][T22863] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2290.096069][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2290.096082][T22863] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2290.096097][T22863]  </TASK>
[ 2290.228853][T22863] ==================================================================
[ 2290.228905][T22863] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch
[ 2290.228945][T22863] 
[ 2290.228950][T22863] read-write to 0xffff88810011e3d0 of 8 bytes by task 22859 on cpu 1:
[ 2290.228966][T22863]  percpu_counter_add_batch+0xd5/0x160
[ 2290.228990][T22863]  shmem_get_folio_gfp+0x434/0x1120
[ 2290.229021][T22863]  shmem_write_begin+0xa6/0x1e0
[ 2290.229049][T22863]  generic_perform_write+0x1c3/0x3d0
[ 2290.229073][T22863]  __generic_file_write_iter+0xe6/0x290
[ 2290.229097][T22863]  generic_file_write_iter+0x7d/0x1c0
[ 2290.229118][T22863]  vfs_write+0x45a/0x750
[ 2290.229149][T22863]  ksys_write+0xeb/0x1a0
[ 2290.229180][T22863]  __x64_sys_write+0x42/0x50
[ 2290.229212][T22863]  do_syscall_64+0x41/0xc0
[ 2290.229242][T22863]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2290.229271][T22863] 
[ 2290.229276][T22863] read to 0xffff88810011e3d0 of 8 bytes by task 22863 on cpu 0:
[ 2290.229294][T22863]  __percpu_counter_compare+0x2b/0x1a0
[ 2290.229323][T22863]  shmem_get_folio_gfp+0x3fd/0x1120
[ 2290.229354][T22863]  shmem_write_begin+0xa6/0x1e0
[ 2290.229385][T22863]  generic_perform_write+0x1c3/0x3d0
[ 2290.229417][T22863]  __generic_file_write_iter+0xe6/0x290
[ 2290.229444][T22863]  generic_file_write_iter+0x7d/0x1c0
[ 2290.229467][T22863]  vfs_write+0x45a/0x750
[ 2290.229495][T22863]  ksys_write+0xeb/0x1a0
[ 2290.229522][T22863]  __x64_sys_write+0x42/0x50
[ 2290.229552][T22863]  do_syscall_64+0x41/0xc0
[ 2290.229579][T22863]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2290.229603][T22863] 
[ 2290.229606][T22863] value changed: 0x00000000000014a1 -> 0x00000000000014c1
[ 2290.229617][T22863] 
11:42:42 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1)

11:42:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x7d, 0x9, 0x4, 0x100, 0xffffffffffffffff, 0x100, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x48)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x7d, 0x9, 0x4, 0x100, 0xffffffffffffffff, 0x100, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x48) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:42 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x10000000000, 0x38, 0x9, 0x80000001}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:42 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/23)

11:42:42 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 32)

11:42:42 executing program 5:
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000180))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080)

[ 2290.229620][T22863] Reported by Kernel Concurrency Sanitizer on:
[ 2290.229627][T22863] CPU: 0 PID: 22863 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2290.229653][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2290.229666][T22863] ==================================================================
[ 2290.638805][T22904] FAULT_INJECTION: forcing a failure.
[ 2290.638805][T22904] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2290.652215][T22904] CPU: 1 PID: 22904 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2290.662855][T22904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2290.672944][T22904] Call Trace:
[ 2290.676234][T22904]  <TASK>
[ 2290.679170][T22904]  dump_stack_lvl+0xda/0x130
[ 2290.683780][T22904]  dump_stack+0x15/0x20
11:42:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x7d, 0x9, 0x4, 0x100, 0xffffffffffffffff, 0x100, '\x00', 0x0, r1, 0x5, 0x0, 0x4}, 0x48) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_process_wait\x00', r0}, 0x10)

11:42:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_process_wait\x00', r0}, 0x10) (rerun: 64)

[ 2290.687973][T22904]  should_fail_ex+0x21f/0x230
[ 2290.692678][T22904]  __alloc_pages+0x108/0x340
[ 2290.697384][T22904]  vma_alloc_folio+0x69d/0x8b0
[ 2290.702282][T22904]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2290.707564][T22904]  shmem_write_begin+0xa6/0x1e0
[ 2290.712544][T22904]  generic_perform_write+0x1c3/0x3d0
[ 2290.717865][T22904]  ? shmem_write_begin+0x1e0/0x1e0
[ 2290.723065][T22904]  __generic_file_write_iter+0xe6/0x290
[ 2290.728647][T22904]  generic_file_write_iter+0x7d/0x1c0
[ 2290.734046][T22904]  vfs_write+0x45a/0x750
11:42:42 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_process_wait\x00', r0}, 0x10)

11:42:42 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x20, 0x0, 0x8001, 0x20, @mcast2, @local, 0x8, 0x7800, 0x14b5, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="657273001d9ac9c75fc02b8be8a60ef69087d24796b785b79863261fc54be8047610a771d5ac67923af22b985582c2152a54c97e1d69612fa983ffa05cb9b61a5186556f58e77247aacff013d54bdedf5cf96168596b3ca4b0339ce18eaf345a690fa028f0eeb4fd6e3f76baacd0684d66564763bb9b7000c44e6dcf33720cb11adef19d8837f8b4fff909581252eaaef44388ad", @ANYRES32=r1, @ANYBLOB="0080800000000004000036414c56007000660000000290780a0101020a01010144183c6000000003000007ff000000020000001f000000084414c0c1e00000020001000164010100000000049404010000440c57800000000500000401071ffeac14143c000000007f000001ac14143a6401010000000000e0000001"]})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x8c}}, 0x40080)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x689a}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5048}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

[ 2290.738335][T22904]  ksys_write+0xeb/0x1a0
[ 2290.742649][T22904]  __x64_sys_write+0x42/0x50
[ 2290.747279][T22904]  do_syscall_64+0x41/0xc0
[ 2290.751826][T22904]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2290.757842][T22904] RIP: 0033:0x7f73579e80f9
[ 2290.762296][T22904] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:42 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x20, 0x0, 0x8001, 0x20, @mcast2, @local, 0x8, 0x7800, 0x14b5, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="657273001d9ac9c75fc02b8be8a60ef69087d24796b785b79863261fc54be8047610a771d5ac67923af22b985582c2152a54c97e1d69612fa983ffa05cb9b61a5186556f58e77247aacff013d54bdedf5cf96168596b3ca4b0339ce18eaf345a690fa028f0eeb4fd6e3f76baacd0684d66564763bb9b7000c44e6dcf33720cb11adef19d8837f8b4fff909581252eaaef44388ad", @ANYRES32=r1, @ANYBLOB="0080800000000004000036414c56007000660000000290780a0101020a01010144183c6000000003000007ff000000020000001f000000084414c0c1e00000020001000164010100000000049404010000440c57800000000500000401071ffeac14143c000000007f000001ac14143a6401010000000000e0000001"]}) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x8c}}, 0x40080) (async)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x689a}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5048}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

11:42:42 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380842, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

11:42:42 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff8000, 0x40000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:42 executing program 5:
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000180))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000180)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080) (async)

[ 2290.781945][T22904] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2290.790487][T22904] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2290.798475][T22904] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2290.806525][T22904] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2290.814575][T22904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2290.822569][T22904] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2290.830591][T22904]  </TASK>
11:42:43 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/23)

11:42:43 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380842, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

11:42:43 executing program 1:
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r1=>0x0, 0x29, 0x20, 0x0, 0x8001, 0x20, @mcast2, @local, 0x8, 0x7800, 0x14b5, 0x7}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="657273001d9ac9c75fc02b8be8a60ef69087d24796b785b79863261fc54be8047610a771d5ac67923af22b985582c2152a54c97e1d69612fa983ffa05cb9b61a5186556f58e77247aacff013d54bdedf5cf96168596b3ca4b0339ce18eaf345a690fa028f0eeb4fd6e3f76baacd0684d66564763bb9b7000c44e6dcf33720cb11adef19d8837f8b4fff909581252eaaef44388ad", @ANYRES32=r1, @ANYBLOB="0080800000000004000036414c56007000660000000290780a0101020a01010144183c6000000003000007ff000000020000001f000000084414c0c1e00000020001000164010100000000049404010000440c57800000000500000401071ffeac14143c000000007f000001ac14143a6401010000000000e0000001"]})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x8c}}, 0x40080)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x689a}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gretap0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5048}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

11:42:43 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 33)

11:42:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff8000, 0x40000) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:43 executing program 5:
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000180)) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8080)

[ 2291.860812][T22950] FAULT_INJECTION: forcing a failure.
[ 2291.860812][T22950] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2291.874014][T22950] CPU: 0 PID: 22950 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2291.884678][T22950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2291.894900][T22950] Call Trace:
[ 2291.894908][T22950]  <TASK>
[ 2291.894915][T22950]  dump_stack_lvl+0xda/0x130
[ 2291.905733][T22950]  dump_stack+0x15/0x20
11:42:43 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380842, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x380842, 0x0) (async)
ioctl$TIOCNXCL(r1, 0x540d) (async)

11:42:43 executing program 0:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040))
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3, 0x1000, 0x3, 0x3, 0x16, "b0cd311d0d774ba6"})
socket$pppl2tp(0x18, 0x1, 0x1)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0xb)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x5, 0x2}, {0x1, 0x1000}]})

11:42:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x40, 0x2, 0x10000000, 0x4, 0x2, 0x8})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4949}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x604c015}, 0x8004)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

[ 2291.905764][T22950]  should_fail_ex+0x21f/0x230
[ 2291.914607][T22950]  should_fail+0xb/0x10
[ 2291.918861][T22950]  should_fail_usercopy+0x1a/0x20
[ 2291.923982][T22950]  copy_page_from_iter_atomic+0x229/0xb30
[ 2291.929746][T22950]  ? PageHeadHuge+0x3f/0x80
[ 2291.934306][T22950]  ? shmem_write_begin+0x135/0x1e0
[ 2291.939455][T22950]  generic_perform_write+0x203/0x3d0
[ 2291.944780][T22950]  ? shmem_write_begin+0x1e0/0x1e0
[ 2291.949910][T22950]  __generic_file_write_iter+0xe6/0x290
[ 2291.955478][T22950]  generic_file_write_iter+0x7d/0x1c0
11:42:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x40, 0x2, 0x10000000, 0x4, 0x2, 0x8})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4949}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x604c015}, 0x8004)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x40, 0x2, 0x10000000, 0x4, 0x2, 0x8}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4949}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x604c015}, 0x8004) (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (async)

11:42:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffff8000, 0x40000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca868b8c")

[ 2291.960930][T22950]  vfs_write+0x45a/0x750
[ 2291.965213][T22950]  ksys_write+0xeb/0x1a0
[ 2291.969580][T22950]  __x64_sys_write+0x42/0x50
[ 2291.974261][T22950]  do_syscall_64+0x41/0xc0
[ 2291.978706][T22950]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2291.984747][T22950] RIP: 0033:0x7f73579e80f9
[ 2291.989186][T22950] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2292.008818][T22950] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2292.017272][T22950] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2292.025260][T22950] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2292.033263][T22950] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2292.041269][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2292.049252][T22950] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2292.057243][T22950]  </TASK>
11:42:43 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xf71c, 0x7e, 0x3ff, 0x1, 0x7, 0x1})

11:42:43 executing program 0:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040))
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3, 0x1000, 0x3, 0x3, 0x16, "b0cd311d0d774ba6"}) (async)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3, 0x1000, 0x3, 0x3, 0x16, "b0cd311d0d774ba6"})
socket$pppl2tp(0x18, 0x1, 0x1)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0xb) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0xb)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x5, 0x2}, {0x1, 0x1000}]})

11:42:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca868b8c") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca868b8c")

11:42:43 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 34)

11:42:43 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x40, 0x2, 0x10000000, 0x4, 0x2, 0x8}) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x40, 0x2, 0x10000000, 0x4, 0x2, 0x8})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4949}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x604c015}, 0x8004)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca868b8c") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca868b8c")

11:42:43 executing program 0:
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x3, 0x1000, 0x3, 0x3, 0x16, "b0cd311d0d774ba6"}) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0xb) (async)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x5, 0x2}, {0x1, 0x1000}]})

11:42:43 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
getsockname$llc(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10)

11:42:43 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:43 executing program 5:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80800)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x30f, 0x5, 0x80, 0x8, 0x1, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:43 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xdb, 0x44841)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

[ 2292.257441][T23003] FAULT_INJECTION: forcing a failure.
[ 2292.257441][T23003] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2292.270818][T23003] CPU: 0 PID: 23003 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2292.281616][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2292.291692][T23003] Call Trace:
[ 2292.295020][T23003]  <TASK>
[ 2292.297972][T23003]  dump_stack_lvl+0xda/0x130
[ 2292.302651][T23003]  dump_stack+0x15/0x20
[ 2292.306842][T23003]  should_fail_ex+0x21f/0x230
[ 2292.311554][T23003]  __alloc_pages+0x108/0x340
[ 2292.316167][T23003]  vma_alloc_folio+0x69d/0x8b0
[ 2292.321037][T23003]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2292.326322][T23003]  shmem_write_begin+0xa6/0x1e0
[ 2292.331276][T23003]  generic_perform_write+0x1c3/0x3d0
[ 2292.336651][T23003]  ? shmem_write_begin+0x1e0/0x1e0
[ 2292.341865][T23003]  __generic_file_write_iter+0xe6/0x290
[ 2292.347476][T23003]  generic_file_write_iter+0x7d/0x1c0
[ 2292.352981][T23003]  vfs_write+0x45a/0x750
[ 2292.357274][T23003]  ksys_write+0xeb/0x1a0
[ 2292.361553][T23003]  __x64_sys_write+0x42/0x50
[ 2292.366177][T23003]  do_syscall_64+0x41/0xc0
[ 2292.370628][T23003]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2292.376561][T23003] RIP: 0033:0x7f73579e80f9
[ 2292.380984][T23003] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xf71c, 0x7e, 0x3ff, 0x1, 0x7, 0x1})

11:42:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
getsockname$llc(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10)

11:42:44 executing program 5:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80800)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x30f, 0x5, 0x80, 0x8, 0x1, @broadcast}, 0x10) (async)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x30f, 0x5, 0x80, 0x8, 0x1, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

11:42:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 35)

11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xdb, 0x44841)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:44 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000))

11:42:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
getsockname$llc(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10)

11:42:44 executing program 5:
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80800)
connect$llc(r0, &(0x7f0000000100)={0x1a, 0x30f, 0x5, 0x80, 0x8, 0x1, @broadcast}, 0x10) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)

[ 2292.400614][T23003] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2292.409077][T23003] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2292.417156][T23003] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2292.425188][T23003] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2292.433189][T23003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2292.441193][T23003] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2292.449181][T23003]  </TASK>
11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0xdb, 0x44841)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
syz_open_dev$vcsn(&(0x7f0000000040), 0xdb, 0x44841) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)

11:42:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14004011}, 0x40000)

11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/108, 0x6c)

[ 2292.497439][T23032] FAULT_INJECTION: forcing a failure.
[ 2292.497439][T23032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2292.510567][T23032] CPU: 0 PID: 23032 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2292.521174][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2292.531360][T23032] Call Trace:
[ 2292.534678][T23032]  <TASK>
[ 2292.537614][T23032]  dump_stack_lvl+0xda/0x130
[ 2292.542289][T23032]  dump_stack+0x15/0x20
11:42:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14004011}, 0x40000)

[ 2292.546520][T23032]  should_fail_ex+0x21f/0x230
[ 2292.551253][T23032]  should_fail+0xb/0x10
[ 2292.551298][T23032]  should_fail_usercopy+0x1a/0x20
[ 2292.551327][T23032]  copy_page_from_iter_atomic+0x229/0xb30
[ 2292.551366][T23032]  ? PageHeadHuge+0x3f/0x80
[ 2292.551388][T23032]  ? shmem_write_begin+0x135/0x1e0
[ 2292.551479][T23032]  generic_perform_write+0x203/0x3d0
[ 2292.551502][T23032]  ? shmem_write_begin+0x1e0/0x1e0
[ 2292.551586][T23032]  __generic_file_write_iter+0xe6/0x290
[ 2292.551611][T23032]  generic_file_write_iter+0x7d/0x1c0
[ 2292.551690][T23032]  vfs_write+0x45a/0x750
[ 2292.551721][T23032]  ksys_write+0xeb/0x1a0
[ 2292.551765][T23032]  __x64_sys_write+0x42/0x50
[ 2292.551796][T23032]  do_syscall_64+0x41/0xc0
[ 2292.551822][T23032]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2292.551917][T23032] RIP: 0033:0x7f73579e80f9
[ 2292.551932][T23032] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2292.551954][T23032] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2292.551975][T23032] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2292.551990][T23032] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2292.552004][T23032] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2292.552092][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
11:42:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0xf71c, 0x7e, 0x3ff, 0x1, 0x7, 0x1})

11:42:44 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc7dd07d3122de79d, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000140)="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")

11:42:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 36)

11:42:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r1, &(0x7f0000000000), 0xf) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14004011}, 0x40000)

11:42:44 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc7dd07d3122de79d, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000140)="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")

11:42:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/108, 0x6c)

[ 2292.552106][T23032] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2292.552171][T23032]  </TASK>
11:42:44 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0xc7dd07d3122de79d, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000140)="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")

11:42:44 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

[ 2292.835837][T23063] FAULT_INJECTION: forcing a failure.
[ 2292.835837][T23063] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2292.849172][T23063] CPU: 1 PID: 23063 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2292.859773][T23063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2292.869856][T23063] Call Trace:
[ 2292.873142][T23063]  <TASK>
[ 2292.876121][T23063]  dump_stack_lvl+0xda/0x130
[ 2292.880745][T23063]  dump_stack+0x15/0x20
11:42:44 executing program 2:
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000065}, @generic={0x0, 0x0, 0x3, 0x8000, 0x5}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/254, 0xfe)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)

[ 2292.884972][T23063]  should_fail_ex+0x21f/0x230
[ 2292.889656][T23063]  __alloc_pages+0x108/0x340
[ 2292.894295][T23063]  vma_alloc_folio+0x69d/0x8b0
[ 2292.899204][T23063]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2292.904443][T23063]  shmem_write_begin+0xa6/0x1e0
[ 2292.909318][T23063]  generic_perform_write+0x1c3/0x3d0
[ 2292.914618][T23063]  ? shmem_write_begin+0x1e0/0x1e0
[ 2292.919814][T23063]  __generic_file_write_iter+0xe6/0x290
[ 2292.925371][T23063]  generic_file_write_iter+0x7d/0x1c0
[ 2292.930802][T23063]  vfs_write+0x45a/0x750
[ 2292.935085][T23063]  ksys_write+0xeb/0x1a0
[ 2292.939374][T23063]  __x64_sys_write+0x42/0x50
[ 2292.944061][T23063]  do_syscall_64+0x41/0xc0
[ 2292.948552][T23063]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2292.954560][T23063] RIP: 0033:0x7f73579e80f9
[ 2292.959008][T23063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:44 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x420181, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000008bc6ac0cc22e01ba0000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x43, &(0x7f0000000800)=""/67, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)

11:42:44 executing program 2:
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:44 executing program 5:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2, &(0x7f0000000780)=@raw=[@alu={0x4, 0x0, 0x3, 0xa, 0x3, 0x6, 0x10}, @call={0x85, 0x0, 0x0, 0x15}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x4, 0x6, 0x8001})

11:42:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000065}, @generic={0x0, 0x0, 0x3, 0x8000, 0x5}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/254, 0xfe) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)

11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f00000000c0)=""/108, 0x6c)

11:42:44 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 37)

11:42:44 executing program 2:
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (rerun: 64)

[ 2292.978796][T23063] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2292.987222][T23063] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2292.995204][T23063] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2293.003181][T23063] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2293.011255][T23063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2293.019244][T23063] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2293.027235][T23063]  </TASK>
11:42:44 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x80400)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)

11:42:44 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x8, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000065}, @generic={0x0, 0x0, 0x3, 0x8000, 0x5}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0xc, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/254, 0xfe) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)

11:42:44 executing program 5:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2, &(0x7f0000000780)=@raw=[@alu={0x4, 0x0, 0x3, 0xa, 0x3, 0x6, 0x10}, @call={0x85, 0x0, 0x0, 0x15}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b) (async)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x4, 0x6, 0x8001})

11:42:44 executing program 5:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2, &(0x7f0000000780)=@raw=[@alu={0x4, 0x0, 0x3, 0xa, 0x3, 0x6, 0x10}, @call={0x85, 0x0, 0x0, 0x15}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x4, 0x6, 0x8001})

[ 2293.094599][T23093] FAULT_INJECTION: forcing a failure.
[ 2293.094599][T23093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2293.107921][T23093] CPU: 1 PID: 23093 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2293.118576][T23093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2293.128652][T23093] Call Trace:
[ 2293.131932][T23093]  <TASK>
[ 2293.134963][T23093]  dump_stack_lvl+0xda/0x130
[ 2293.139596][T23093]  dump_stack+0x15/0x20
11:42:44 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3798c0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x2, 0x100}, {0x6}, {0x5, 0xdd2}, {0x7f}, {0xffc1, 0x9}]})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x8)

[ 2293.143778][T23093]  should_fail_ex+0x21f/0x230
[ 2293.148512][T23093]  should_fail+0xb/0x10
[ 2293.152683][T23093]  should_fail_usercopy+0x1a/0x20
[ 2293.157949][T23093]  copy_page_from_iter_atomic+0x229/0xb30
[ 2293.163768][T23093]  ? PageHeadHuge+0x3f/0x80
[ 2293.168290][T23093]  ? shmem_write_begin+0x135/0x1e0
[ 2293.173425][T23093]  generic_perform_write+0x203/0x3d0
[ 2293.178727][T23093]  ? shmem_write_begin+0x1e0/0x1e0
[ 2293.183871][T23093]  __generic_file_write_iter+0xe6/0x290
[ 2293.189475][T23093]  generic_file_write_iter+0x7d/0x1c0
[ 2293.194937][T23093]  vfs_write+0x45a/0x750
[ 2293.199308][T23093]  ksys_write+0xeb/0x1a0
[ 2293.203638][T23093]  __x64_sys_write+0x42/0x50
[ 2293.208267][T23093]  do_syscall_64+0x41/0xc0
[ 2293.212739][T23093]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2293.218661][T23093] RIP: 0033:0x7f73579e80f9
[ 2293.223084][T23093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2293.242863][T23093] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2293.251298][T23093] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2293.259273][T23093] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2293.267273][T23093] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2293.275256][T23093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2293.283306][T23093] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2293.291300][T23093]  </TASK>
11:42:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x420181, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000008bc6ac0cc22e01ba0000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x43, &(0x7f0000000800)=""/67, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x420181, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000008bc6ac0cc22e01ba0000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x43, &(0x7f0000000800)=""/67, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
ioctl$TIOCNXCL(r1, 0x540d) (async)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef) (async)

11:42:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async, rerun: 32)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) (async, rerun: 32)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3798c0, 0x0) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x2, 0x100}, {0x6}, {0x5, 0xdd2}, {0x7f}, {0xffc1, 0x9}]}) (async, rerun: 64)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x8)

11:42:45 executing program 1:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000000c0)=""/210)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="b80d5e4b", @ANYRES16=r3, @ANYBLOB="01000000000000000000060000001400080070696d36726567300000000000000000"], 0x28}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7020ffdbdf25000000000500000005002100010000000800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200008c9}, 0x851)

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x5d1d40, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100))
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0))
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)

11:42:45 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x80400)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)

[ 2293.400243][T23093] ==================================================================
[ 2293.408358][T23093] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch
[ 2293.417318][T23093] 
[ 2293.419639][T23093] read-write to 0xffff88810011e3d0 of 8 bytes by task 23121 on cpu 1:
[ 2293.427789][T23093]  percpu_counter_add_batch+0xd5/0x160
[ 2293.433288][T23093]  shmem_get_folio_gfp+0x434/0x1120
[ 2293.438513][T23093]  shmem_write_begin+0xa6/0x1e0
[ 2293.443404][T23093]  generic_perform_write+0x1c3/0x3d0
[ 2293.448707][T23093]  __generic_file_write_iter+0xe6/0x290
[ 2293.454270][T23093]  generic_file_write_iter+0x7d/0x1c0
[ 2293.459650][T23093]  vfs_write+0x45a/0x750
[ 2293.463919][T23093]  ksys_write+0xeb/0x1a0
[ 2293.468193][T23093]  __x64_sys_write+0x42/0x50
[ 2293.472814][T23093]  do_syscall_64+0x41/0xc0
[ 2293.477265][T23093]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2293.483183][T23093] 
[ 2293.485518][T23093] read to 0xffff88810011e3d0 of 8 bytes by task 23093 on cpu 0:
[ 2293.493160][T23093]  __percpu_counter_compare+0x2b/0x1a0
[ 2293.498683][T23093]  shmem_get_folio_gfp+0x3fd/0x1120
[ 2293.503905][T23093]  shmem_write_begin+0xa6/0x1e0
[ 2293.508778][T23093]  generic_perform_write+0x1c3/0x3d0
[ 2293.514075][T23093]  __generic_file_write_iter+0xe6/0x290
[ 2293.519638][T23093]  generic_file_write_iter+0x7d/0x1c0
[ 2293.525033][T23093]  vfs_write+0x45a/0x750
[ 2293.529306][T23093]  ksys_write+0xeb/0x1a0
[ 2293.533549][T23093]  __x64_sys_write+0x42/0x50
[ 2293.538143][T23093]  do_syscall_64+0x41/0xc0
[ 2293.542559][T23093]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2293.548450][T23093] 
[ 2293.550757][T23093] value changed: 0x0000000000000f7e -> 0x0000000000000f9e
[ 2293.557844][T23093] 
[ 2293.560150][T23093] Reported by Kernel Concurrency Sanitizer on:
[ 2293.566284][T23093] CPU: 0 PID: 23093 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2293.576853][T23093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2293.586907][T23093] ==================================================================
11:42:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 38)

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x5d1d40, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)

11:42:45 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x80400) (async)
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x80400)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1)

11:42:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) (async)
getsockname$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3798c0, 0x0)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x1) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x2, 0x100}, {0x6}, {0x5, 0xdd2}, {0x7f}, {0xffc1, 0x9}]}) (async)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x2, 0x100}, {0x6}, {0x5, 0xdd2}, {0x7f}, {0xffc1, 0x9}]})
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x8)

11:42:45 executing program 1:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000000c0)=""/210)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="b80d5e4b", @ANYRES16=r3, @ANYBLOB="01000000000000000000060000001400080070696d36726567300000000000000000"], 0x28}}, 0x0) (async, rerun: 64)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7020ffdbdf25000000000500000005002100010000000800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200008c9}, 0x851) (rerun: 64)

11:42:45 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x420181, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000008bc6ac0cc22e01ba0000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x43, &(0x7f0000000800)=""/67, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64)
write$vga_arbiter(r1, &(0x7f0000000000), 0xfffffdef) (rerun: 64)

11:42:45 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa605690}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, 0x0, 0xe00, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x557}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040851)

11:42:45 executing program 1:
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f00000000c0)=""/210) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="b80d5e4b", @ANYRES16=r3, @ANYBLOB="01000000000000000000060000001400080070696d36726567300000000000000000"], 0x28}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7020ffdbdf25000000000500000005002100010000000800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x200008c9}, 0x851)

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x5d1d40, 0x0)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100))
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000000c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x2000)
openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0)

[ 2293.678468][T23145] FAULT_INJECTION: forcing a failure.
[ 2293.678468][T23145] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2293.691790][T23145] CPU: 1 PID: 23145 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2293.702391][T23145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2293.712518][T23145] Call Trace:
[ 2293.715820][T23145]  <TASK>
[ 2293.718844][T23145]  dump_stack_lvl+0xda/0x130
[ 2293.723552][T23145]  dump_stack+0x15/0x20
11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="af54ea5affffffffffffff8839e630c6e5b4fb1fa55be28d33ecc42111d2e870a40461810b154487a98a4c0fc186762d60ab3cd30fb0f532fce5fc9dd34e71174602c020432003d30002a4e2780141e05fa0248c97600dde1ec9999034ca73b787bc000000000000000000000000000000000000f2833c7eece6f08000000000000000b7c316ff992d1bc6095d")

11:42:45 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="af54ea5affffffffffffff8839e630c6e5b4fb1fa55be28d33ecc42111d2e870a40461810b154487a98a4c0fc186762d60ab3cd30fb0f532fce5fc9dd34e71174602c020432003d30002a4e2780141e05fa0248c97600dde1ec9999034ca73b787bc000000000000000000000000000000000000f2833c7eece6f08000000000000000b7c316ff992d1bc6095d")

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="af54ea5affffffffffffff8839e630c6e5b4fb1fa55be28d33ecc42111d2e870a40461810b154487a98a4c0fc186762d60ab3cd30fb0f532fce5fc9dd34e71174602c020432003d30002a4e2780141e05fa0248c97600dde1ec9999034ca73b787bc000000000000000000000000000000000000f2833c7eece6f08000000000000000b7c316ff992d1bc6095d")

[ 2293.727721][T23145]  should_fail_ex+0x21f/0x230
[ 2293.732464][T23145]  __alloc_pages+0x108/0x340
[ 2293.737163][T23145]  vma_alloc_folio+0x69d/0x8b0
[ 2293.742071][T23145]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2293.747364][T23145]  shmem_write_begin+0xa6/0x1e0
[ 2293.752249][T23145]  generic_perform_write+0x1c3/0x3d0
[ 2293.757743][T23145]  ? shmem_write_begin+0x1e0/0x1e0
[ 2293.762934][T23145]  __generic_file_write_iter+0xe6/0x290
[ 2293.768549][T23145]  generic_file_write_iter+0x7d/0x1c0
[ 2293.773942][T23145]  vfs_write+0x45a/0x750
[ 2293.778219][T23145]  ksys_write+0xeb/0x1a0
[ 2293.782505][T23145]  __x64_sys_write+0x42/0x50
[ 2293.787129][T23145]  do_syscall_64+0x41/0xc0
[ 2293.791634][T23145]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2293.797546][T23145] RIP: 0033:0x7f73579e80f9
[ 2293.801967][T23145] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:45 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 39)

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000080)=0x8)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc001, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x0, 0x1800000, 0x514b, 0x12, "c70877a1569b5513df76600fe97e7a280027e4"})

11:42:45 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x80000)

11:42:45 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa605690}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, 0x0, 0xe00, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x557}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040851)

11:42:45 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000080)=0x8) (async, rerun: 64)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 64)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc001, 0x0) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x0, 0x1800000, 0x514b, 0x12, "c70877a1569b5513df76600fe97e7a280027e4"})

[ 2293.821701][T23145] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2293.830263][T23145] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2293.838259][T23145] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2293.846332][T23145] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2293.854365][T23145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2293.862354][T23145] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2293.870338][T23145]  </TASK>
[ 2293.933895][T23176] FAULT_INJECTION: forcing a failure.
[ 2293.933895][T23176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2293.947028][T23176] CPU: 1 PID: 23176 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2293.957717][T23176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2293.967777][T23176] Call Trace:
[ 2293.971079][T23176]  <TASK>
[ 2293.974128][T23176]  dump_stack_lvl+0xda/0x130
[ 2293.978779][T23176]  dump_stack+0x15/0x20
[ 2293.982958][T23176]  should_fail_ex+0x21f/0x230
[ 2293.987653][T23176]  should_fail+0xb/0x10
[ 2293.991822][T23176]  should_fail_usercopy+0x1a/0x20
[ 2293.996871][T23176]  copy_page_from_iter_atomic+0x229/0xb30
[ 2294.002646][T23176]  ? PageHeadHuge+0x3f/0x80
[ 2294.007206][T23176]  ? shmem_write_begin+0x135/0x1e0
[ 2294.012342][T23176]  generic_perform_write+0x203/0x3d0
[ 2294.017664][T23176]  ? shmem_write_begin+0x1e0/0x1e0
[ 2294.022807][T23176]  __generic_file_write_iter+0xe6/0x290
[ 2294.028375][T23176]  generic_file_write_iter+0x7d/0x1c0
[ 2294.033789][T23176]  vfs_write+0x45a/0x750
[ 2294.038056][T23176]  ksys_write+0xeb/0x1a0
[ 2294.042324][T23176]  __x64_sys_write+0x42/0x50
[ 2294.046961][T23176]  do_syscall_64+0x41/0xc0
[ 2294.051387][T23176]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2294.057338][T23176] RIP: 0033:0x7f73579e80f9
[ 2294.061817][T23176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2294.081433][T23176] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2294.089857][T23176] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2294.097830][T23176] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2294.105813][T23176] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2294.113805][T23176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2294.121800][T23176] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2294.129778][T23176]  </TASK>
11:42:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]})

11:42:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/211})

11:42:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x80000)

11:42:46 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x6}, 0x4)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000080)=0x8)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc001, 0x0) (async, rerun: 32)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x6, 0x0, 0x1800000, 0x514b, 0x12, "c70877a1569b5513df76600fe97e7a280027e4"}) (rerun: 32)

11:42:46 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa605690}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, 0x0, 0xe00, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x557}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040851)

11:42:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 40)

11:42:46 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]})

[ 2294.960024][T23186] FAULT_INJECTION: forcing a failure.
[ 2294.960024][T23186] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2294.973318][T23186] CPU: 1 PID: 23186 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2294.983916][T23186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2294.994040][T23186] Call Trace:
[ 2294.997326][T23186]  <TASK>
[ 2295.000353][T23186]  dump_stack_lvl+0xda/0x130
[ 2295.004978][T23186]  dump_stack+0x15/0x20
11:42:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x80000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x80000) (async)

11:42:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/211})

11:42:46 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00')
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/131, 0x83)

11:42:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]})

11:42:46 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x1, 0x0, 0x10000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1ff, 0x111000)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

[ 2295.009258][T23186]  should_fail_ex+0x21f/0x230
[ 2295.014021][T23186]  __alloc_pages+0x108/0x340
[ 2295.018675][T23186]  vma_alloc_folio+0x69d/0x8b0
[ 2295.023481][T23186]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2295.028716][T23186]  shmem_write_begin+0xa6/0x1e0
[ 2295.033618][T23186]  generic_perform_write+0x1c3/0x3d0
[ 2295.038997][T23186]  ? shmem_write_begin+0x1e0/0x1e0
[ 2295.044220][T23186]  __generic_file_write_iter+0xe6/0x290
[ 2295.049861][T23186]  generic_file_write_iter+0x7d/0x1c0
[ 2295.055260][T23186]  vfs_write+0x45a/0x750
11:42:46 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/211})

[ 2295.059621][T23186]  ksys_write+0xeb/0x1a0
[ 2295.063925][T23186]  __x64_sys_write+0x42/0x50
[ 2295.068623][T23186]  do_syscall_64+0x41/0xc0
[ 2295.073145][T23186]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2295.079087][T23186] RIP: 0033:0x7f73579e80f9
[ 2295.083520][T23186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:46 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x1, 0x0, 0x10000}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000)) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1ff, 0x111000)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

11:42:46 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfbb)

11:42:46 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)

11:42:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:46 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 41)

[ 2295.103169][T23186] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2295.111610][T23186] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2295.119612][T23186] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2295.127607][T23186] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2295.135624][T23186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2295.143600][T23186] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2295.151597][T23186]  </TASK>
11:42:46 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)

11:42:46 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x1, 0x0, 0x10000}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x2, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x80, 0x1, 0x0, 0x10000}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000)) (async)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000000))
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1ff, 0x111000)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f00000002c0))

11:42:46 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2295.227341][T23223] FAULT_INJECTION: forcing a failure.
[ 2295.227341][T23223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2295.240502][T23223] CPU: 0 PID: 23223 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2295.251146][T23223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2295.261285][T23223] Call Trace:
[ 2295.264591][T23223]  <TASK>
[ 2295.267526][T23223]  dump_stack_lvl+0xda/0x130
[ 2295.272153][T23223]  dump_stack+0x15/0x20
[ 2295.276332][T23223]  should_fail_ex+0x21f/0x230
[ 2295.281048][T23223]  should_fail+0xb/0x10
[ 2295.285283][T23223]  should_fail_usercopy+0x1a/0x20
[ 2295.290407][T23223]  copy_page_from_iter_atomic+0x229/0xb30
[ 2295.296199][T23223]  ? PageHeadHuge+0x3f/0x80
[ 2295.300722][T23223]  ? shmem_write_begin+0x135/0x1e0
[ 2295.305953][T23223]  generic_perform_write+0x203/0x3d0
[ 2295.311370][T23223]  ? shmem_write_begin+0x1e0/0x1e0
[ 2295.316513][T23223]  __generic_file_write_iter+0xe6/0x290
[ 2295.322093][T23223]  generic_file_write_iter+0x7d/0x1c0
[ 2295.327515][T23223]  vfs_write+0x45a/0x750
[ 2295.331783][T23223]  ksys_write+0xeb/0x1a0
[ 2295.336063][T23223]  __x64_sys_write+0x42/0x50
[ 2295.340732][T23223]  do_syscall_64+0x41/0xc0
[ 2295.345234][T23223]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2295.351177][T23223] RIP: 0033:0x7f73579e80f9
[ 2295.355614][T23223] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2295.375308][T23223] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2295.383727][T23223] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2295.391824][T23223] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2295.399831][T23223] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2295.407813][T23223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2295.415835][T23223] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2295.423830][T23223]  </TASK>
11:42:47 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00')
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80) (async)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/131, 0x83)

11:42:47 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)

11:42:47 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4008810)

11:42:47 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfbb)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfbb) (async)

11:42:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:47 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 42)

11:42:47 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4008810)

11:42:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x308, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6d}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x30}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4090)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:47 executing program 2:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async, rerun: 64)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4008810) (rerun: 64)

11:42:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x308, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6d}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x30}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4090)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2295.942666][T23252] FAULT_INJECTION: forcing a failure.
[ 2295.942666][T23252] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2295.955979][T23252] CPU: 0 PID: 23252 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2295.966579][T23252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2295.976639][T23252] Call Trace:
[ 2295.979930][T23252]  <TASK>
[ 2295.982897][T23252]  dump_stack_lvl+0xda/0x130
[ 2295.987524][T23252]  dump_stack+0x15/0x20
11:42:47 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
sendto$llc(r0, &(0x7f0000000000)="53840b7d5d25fc0fa987518e2b31c9b32fd0", 0x12, 0x40000, &(0x7f0000000080)={0x1a, 0x13, 0x53, 0x5, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)

11:42:47 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x308, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6d}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x30}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x4090)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2295.991729][T23252]  should_fail_ex+0x21f/0x230
[ 2295.996510][T23252]  __alloc_pages+0x108/0x340
[ 2296.001270][T23252]  vma_alloc_folio+0x69d/0x8b0
[ 2296.006133][T23252]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2296.011401][T23252]  shmem_write_begin+0xa6/0x1e0
[ 2296.016355][T23252]  generic_perform_write+0x1c3/0x3d0
[ 2296.021721][T23252]  ? shmem_write_begin+0x1e0/0x1e0
[ 2296.026872][T23252]  __generic_file_write_iter+0xe6/0x290
[ 2296.032494][T23252]  generic_file_write_iter+0x7d/0x1c0
[ 2296.037959][T23252]  vfs_write+0x45a/0x750
[ 2296.042273][T23252]  ksys_write+0xeb/0x1a0
[ 2296.046615][T23252]  __x64_sys_write+0x42/0x50
[ 2296.051240][T23252]  do_syscall_64+0x41/0xc0
[ 2296.055713][T23252]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2296.061631][T23252] RIP: 0033:0x7f73579e80f9
[ 2296.066054][T23252] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2296.066151][T23252] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2296.066170][T23252] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2296.066183][T23252] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2296.066196][T23252] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2296.066276][T23252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2296.066291][T23252] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2296.066311][T23252]  </TASK>
11:42:48 executing program 0:
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00')
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80)
read$qrtrtun(r0, &(0x7f00000000c0)=""/131, 0x83)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80) (async)
read$qrtrtun(r0, &(0x7f00000000c0)=""/131, 0x83) (async)

11:42:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
sendto$llc(r0, &(0x7f0000000000)="53840b7d5d25fc0fa987518e2b31c9b32fd0", 0x12, 0x40000, &(0x7f0000000080)={0x1a, 0x13, 0x53, 0x5, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
sendto$llc(r0, &(0x7f0000000000)="53840b7d5d25fc0fa987518e2b31c9b32fd0", 0x12, 0x40000, &(0x7f0000000080)={0x1a, 0x13, 0x53, 0x5, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) (async)

11:42:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f1a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)

11:42:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 43)

11:42:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:48 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfbb)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0xfbb) (async)

11:42:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f1a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)

11:42:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
sendto$llc(r0, &(0x7f0000000000)="53840b7d5d25fc0fa987518e2b31c9b32fd0", 0x12, 0x40000, &(0x7f0000000080)={0x1a, 0x13, 0x53, 0x5, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
sendto$llc(r0, &(0x7f0000000000)="53840b7d5d25fc0fa987518e2b31c9b32fd0", 0x12, 0x40000, &(0x7f0000000080)={0x1a, 0x13, 0x53, 0x5, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10) (async)

[ 2296.826390][T23283] FAULT_INJECTION: forcing a failure.
[ 2296.826390][T23283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2296.839512][T23283] CPU: 0 PID: 23283 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2296.850255][T23283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2296.860331][T23283] Call Trace:
[ 2296.863700][T23283]  <TASK>
[ 2296.866645][T23283]  dump_stack_lvl+0xda/0x130
[ 2296.871274][T23283]  dump_stack+0x15/0x20
11:42:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f1a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x5f1a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) (async)

11:42:48 executing program 2:
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="bcab89fbd888", 'veth0_macvtap\x00'}})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x1a280)
ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x200}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0))

[ 2296.875463][T23283]  should_fail_ex+0x21f/0x230
[ 2296.880234][T23283]  should_fail+0xb/0x10
[ 2296.884408][T23283]  should_fail_usercopy+0x1a/0x20
[ 2296.889455][T23283]  copy_page_from_iter_atomic+0x229/0xb30
[ 2296.895255][T23283]  ? PageHeadHuge+0x3f/0x80
[ 2296.899782][T23283]  ? shmem_write_begin+0x135/0x1e0
[ 2296.904919][T23283]  generic_perform_write+0x203/0x3d0
[ 2296.910270][T23283]  ? shmem_write_begin+0x1e0/0x1e0
[ 2296.915442][T23283]  __generic_file_write_iter+0xe6/0x290
[ 2296.921048][T23283]  generic_file_write_iter+0x7d/0x1c0
[ 2296.926436][T23283]  vfs_write+0x45a/0x750
[ 2296.930705][T23283]  ksys_write+0xeb/0x1a0
[ 2296.934982][T23283]  __x64_sys_write+0x42/0x50
[ 2296.939608][T23283]  do_syscall_64+0x41/0xc0
[ 2296.944069][T23283]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2296.950072][T23283] RIP: 0033:0x7f73579e80f9
[ 2296.954499][T23283] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:48 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x28, 0x4, 0x8, 0x57bb, 0x40000000, 0x1f})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="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")

11:42:48 executing program 2:
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="bcab89fbd888", 'veth0_macvtap\x00'}}) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x1a280)
ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x200}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0))

11:42:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xab42, 0x4)
socketpair(0x23, 0x1, 0x9, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x10, 0xfffffffc, 0xaef1, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x64, 0x0, 0x74, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x12, 0x1, [{0x5, 0xa, "8234db77856af274"}, {0x1, 0x2}]}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x7, 0xed, [@empty]}, @end, @timestamp={0x44, 0x20, 0x2e, 0x0, 0x2, [0x5, 0x1, 0x9, 0x400, 0x0, 0x33, 0x4]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x1, [{@broadcast, 0x8a0}, {@empty, 0x8}, {@local, 0x3ff}]}]}}}}})
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB='\x00'/11], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1e0, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8040}, 0x4800)
connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x6, {0xa, 0x4e24, 0xffffffff, @local, 0x7}}}, 0x3a)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2296.974207][T23283] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2296.982632][T23283] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2296.990650][T23283] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2296.998706][T23283] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2297.006681][T23283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2297.014748][T23283] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2297.022834][T23283]  </TASK>
11:42:48 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 44)

11:42:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000006000418200000", @ANYRES32=r1, @ANYBLOB="000000000009000000480080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x7550}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x48084)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x6, 0x8, 0x6, 0x7fff})

11:42:48 executing program 2:
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="bcab89fbd888", 'veth0_macvtap\x00'}}) (async, rerun: 32)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x1a280)
ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000000c0)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x200}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0))

11:42:48 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xab42, 0x4) (async)
socketpair(0x23, 0x1, 0x9, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x10, 0xfffffffc, 0xaef1, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x64, 0x0, 0x74, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x12, 0x1, [{0x5, 0xa, "8234db77856af274"}, {0x1, 0x2}]}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x7, 0xed, [@empty]}, @end, @timestamp={0x44, 0x20, 0x2e, 0x0, 0x2, [0x5, 0x1, 0x9, 0x400, 0x0, 0x33, 0x4]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x1, [{@broadcast, 0x8a0}, {@empty, 0x8}, {@local, 0x3ff}]}]}}}}}) (async)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB='\x00'/11], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1e0, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8040}, 0x4800)
connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x6, {0xa, 0x4e24, 0xffffffff, @local, 0x7}}}, 0x3a) (async)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:48 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x28, 0x4, 0x8, 0x57bb, 0x40000000, 0x1f})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="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")
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x28, 0x4, 0x8, 0x57bb, 0x40000000, 0x1f}) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="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") (async)

11:42:48 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2b, 'hugetlb'}, {0x2b, 'io'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'perf_event'}]}, 0x3f)
write$vga_arbiter(r1, &(0x7f0000000100)=@unlock_all, 0xb)

11:42:48 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x13, 0x1, 0x3, 0x0, 0x0, 0x80000001, 0x40100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0x6, 0xf}, 0x40, 0x2, 0x401, 0x2, 0x400, 0x2, 0xffff, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4)

11:42:48 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x28, 0x4, 0x8, 0x57bb, 0x40000000, 0x1f}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="51f81ee2cf9dac55cc54e47275004360fb3832d6150af01811fbd7f1c9d99069e6e91e8400b3128b859249ade5d7daf9e41e79cc4e403dd570feed05e01a7c1bd4584157e65e7992b4b1cf2530a08b6e75e2e8bfdbe7595bc9c1e988f690aeb594febfc72bb096d1f3e04caab101061e36e4b31468cb7d737f45d2d4a3e445d695a45803a7b962b4bc99188610002e61cf6c4f5d66d01893191fb96f49045f37776b998a88cb5f678d1af2032c12544b65c25a786e66313ae54854b5b105383ea8cddf342a35fc5b5d75ddd1502bc4e097aaa415e7c45c8b4a6f0bdc42ce896efc0bafda91070064a96a8fe598bb5237742a07a8a09c924fb60d923006fdbb742e2bd49369d657648c256d296031a96bca543b733891e0a959ac01e86f95bec8a1c3b7ad29346e1007f72a67487c131e58bec6e3cdaf78e7b99cecadc986382dd4c775d557e9cacd0c8f44c94c0a6df9e6c111fedba4036d5222596ce2757a338bbf7484ace4a9a674904aa093c808ec1ad64815fb473ffa36638126fe03e060de311f799ce1cf7b19dc192ee5de7da22388f4065eff688d0726cdd0547dfed42ee7803b613fb00db5c4f5e57f2a10b706a34f1b09dbe117c95c89a3d49a1021576951988b343a23e29844aee04f972e9b73574b4c532e48adbd4c65123c87ece73bcbd34f41aa1eaead7ef846e599e71d8ddfe7c3cd78802b402ee64b5a028e6592e593ff3d9266f48e3f92889b8a618b4439eee20c399061dd06883bcc25f180f01ef6fdc1f1e0713167180aba7802c11acf1cc5b936d70c54853dd62204745164edae674c16b8b96fbe1345e399152f32e6b1388c30fd24bacfa1ed2451bff204a3e09c87f9d0c13795cf6c25d5766cbd968a8e9dfdbba14c8214792432eed6385a49c80dd3c58d801067fdd9fdc57e58fe6eb9dab63f7906e1fa4961fa51fa64dfda64d8911d3ed64cfe71e0eb74b617a75c22ba9b79cf9e4ceb752edfa5b6c56a7bcb9fadd4f816073aa4dab947050b7eb96408a8b969b56de79226252cd2f477ff05ae08eae2c6445d65409d5659369832a468d4c43e671dc8fda51c1152b71768b32335059b1d435af9a0a66850c00b54fa307777ae4844f097c0d9332f6b786323df6796063eae57b3ffacbd9b250606ba594c3b507d0da9e69429750d71f56024c61ee0419c3a1ef82859789e590d8e4afa9cccc54b9fc5110158c84103c550878ff0bc2292e42fd2968f1c132e78db727d30537cc31f05642aee7739246bbfbefcad05b3cbb3ca908d428aad9c1b28f941f58d61792ed9ed3506d18cf42d555784a7c3cebecf2e04b65be1120b63bb7f6845e44098422e73ec1476342b9b5441cb6010091a3fdfb47d1bf97bffda66c20b9ae338793c063d853a977825841b9b3383c19583e353c60fc848b4c7fbd6fe6d3c0f11af9798da6414cc3eda71f97154768a88334d9df20d5c23b5a2d32043943bfe6224c017f509c1fdd1a159968834545a10f2f724402fee75a787b7c4b75227155453a3c0933aec93f867f956486577fae9cf75538f7f7b4603ec58b82d9c47492070828578fbb7bf0b84ec0cccdc60905b04de27609b63e40c7af2a85cc1205299291a1ffbf887100d3124759d635ea284e3db29bfdd2daf9109403079f5d3b95a38088aec950294ee9b4a83750ff9aefc208d73bd874b360373a565e18881cc7e9e5fbc5256754ee5b6ecff427939061bd567af5448628034cab529f23e87015d8b2eb803e66cf132d648a27496d1276448e039df3a4ab9f076933df55273fdc8777d2cb5c061c3ac94a260ae908b7ae65dae0879c6d8cbe3e63693b30dce4529d51fc3cbd2b313e81f1d9ebff06833146a5f65f2ae50c7084f5bbe9e31edbe0f7dda8a4a655bc1691f86bc73bf3d09db98b00901319145c991999ebe1c2ab562069773f9ac91cefe1a540bdc63a2e26763cb7c261e63088017d9e63d44540fd9a0f576e83ace924f84de1687c45727914780cd1fa8b523351437dfceea9faf1f928dc1bde8533a21866a65f698d51556945601b2460ea0edfb29947e12dcbffa9ce59e74154f8c39c9c32df5d244a45e62cd3152e272897c5e925e7c73ccb6c93bdaccda43bf9ca59f8a74259f443acd1056bf464671198d4eff42e4692333a19222ce6fe60bd7ad1dccebc19d1542bb97a581e311a174cf0f4f21c8f475cb12288c21f48d3c0cf67e3a775f141ed85f68b4d441e7cb2f12c286e0aa59d4a0ac50709cea2d46c8ec8d6bf6f222f28241f3d1a09a13ad108864f5852aafcf4eb972318a6d16fecf1f3b8a0bf334a7b3e9b0a38a8056cf4671d13b98a017610507277bc085e71c34aadaad621a929e6401d0c435a5d7af751907489669afd9ac7a350714070b3cad8a2e6a7f4446e5887e95e61c41392f5627793f97023de1f685d81acefc6a061a25d908f571dea238c4d8c44639d8fa5b072c7120ee1524ddcd7882c929daf280bba1d42fc2db16519aa4649aa907f251a5e6d00469f9599e72d69b425548db5fb4d7d27551de1820532e06df55ba1c0f4b5382ae73436994e01a54f8d7595f872abb0f929a02fa91a17ad8e169570e71d7aca82cb6e6167b648e21b8baadd8fe065a65fa777b8139e98d8a50d735e6363f7fcb6048651fbafabe1f8661fbd65aa52ac4a415b529b5ab677baa5145e2e2b656ce3e19c17ad08808736f5c3469b7668f70fb89084b766f668d6d6fd6af258405984c930850aee2db5a0f9b00981994a0c3bb56a6b9b4442a3e09469951063f24cd289c6ffc488f1608dfc8d2072e707c851bfaa5204859515540ed5f728631fec04539c5ed7cd8ba4eac80086a4adfe643f9e4463cb5254e46a171dffd2794f280a219618a35e327662283fd4213d70f4bc69d3f0faf33c8d74e8863e9c85bde6c50872e9d13bc39cc7bf5a54756d80e807880b7e7c8f7ad4ca7da4ae2dbe6bd1a8c0666b8c4cc7b46b22429f3b3106220ceccfa21e38cba4e67ff2bc7664c059d49649aae22cc0c5cf936e30c94540b6a8dfe5ea7da529f4002970370a66af54c8d988b803cde388970378d52d861f0cd2e523899da393ddcb45628637b79ec6f1a555ea9f8c7df02779ab69f9bb2effc8a6e858a91a1b37cf4224911217e8a25ee6a25f5732775b4ab1f44687141c92fc05d4422e5f833a18935981979ffac1425335caa2770d511db280a931c60de60dbd7d82aef4d9df0f383307d8451287caca9bef2b6ea2d634eadae8c8856fe72c5e9ffea09cbc943a75cb353698d17a74d047e3594884d97d4b88e7d0ea263d4dd2e2a6662eb817f0653f0004f83492f6e8da495b54179777681ccca9d7dbaecdd671cb752693116f0ba177a9899e06789c7259993ba27fca3afda8b7c3d1e7aee287dbb0250d2ecb2b453f258e7d7b9ded068f387f5a797175cf78b9a617a87e690931c22b6b619f2c745ff2a84091d831568b3fd685af697622e2669d6dfe7e695d6979385512fdaac81edde1a7e5045f08e408550c13addf0f9a3b64c432e3ba394dba1dba21f05f001261fc710084981d714aaee6ca2fdbd9e4f7f086fa79d2e7ed2198efd4281b1d8301822f92bf4e328860ccba7ad8bf41c4a122415e3d353637336e12836a9e7feb4cbac24270f34e547791fd3a80c7963e1c3e51333a2f224c78fe6dd8e85332b15ae0d62a90da31ca63f1c3a2dff0ebd3ae036c64314b5ca5abb04871ae9557ff45f90fd5d063ef1529b79cf539aedfc2b51a8e5a704c9d6d5cc5c9275850698a3e65aaa6f021cc590783b1d4de157fca9ca67674f3a95b830ea35414f72623ed271587c068d4d4857e89efc693d1bbaf90f8da5d7e97e364c40b7b7c1f5c32994736f73294c8144f8649fe24b66bdb91641ea850b4fa49769932490c4d2e0609f0eab98d1c7c624d0b9d96412579343da870f943e5b811bb14ee7cb20f8252119c96c778afcfcd87799f89175dd385173e3081f849a796eb928c0479cd0d4053dc89c4a034ef848d69aac96d356ee506ff595dce4855456cb3facc05ddea592dce170f93967fe9d4c3864f7b9b790c747768d6e3e81e6cd0cf3dc0c2eb1308c418b08b372edd3a78144e867d6c897e2074b5d03c3460629fa1d64bd76af4d4066b9694f33ab83fe6b5e1af4662e1484a7454a2e889e2d83287cf9bb23a0d2574c2c1496d6dddf2b6d7263acb7d03e2cdc4f2c45596daa059bc119b4ec2454965392f0f42f9f0f17c90768b45a71d04fa5d292ea6151c93c4749368b94ffb9af11fd19a463dbb7971f5e3bbca820c96cfb0188327f615ae2468670f357d99d936d5f912d1854c335181aa8dd6382274c8befa8545e1fd2946bfceb286b225e25308e6159647428baf30ae9fa258dc978bb890ccb85a6e2d3e9b23ccc9cc457146f37059e25665c6901b9ab4fbe1b7cf412e450179767e6d1b6da36a7796b8fc0df6a6fb86221a96cdad79b899822cd7a9f66a1eb86c55046de626d1f11bdc64baeb36f8513f82c4da31af10dcaf0132e044bcc9df126d04b8e513ba97a9a592a33b5a8f33c2bbad4c244b726bb325d0c3782f257ab8ba839e672f97e950c50338b6c4d894b985ffca115906d4ed9217fe8fb7897f9f875e5e32699de3a600a7336007d01ed7e165ab58266836decfc6379786568def994e881559f8a2e0a5e9cdd537e8fc0cdaab2cbe482d930739496a2fa046817968a1076d0d169d326acbcc0fa63d1a0e064cbf80adf368e28db74671b146ca8080c914e189badcd06ee69876622dd924ccab28dc3174f232f08329c7fcb44f9a7810eb7e884cc48e43c96be7e5cda1394405d6baf6bab85b2bc03a3e889f352dc8f63959a1e38596c280b433bb0a4397e0d27e08af84075ff0e36404490540a674ff88c50db4eeb6f83f00f74450604f0c31d83f349f4610a61a1a0c024e67422f9c6c79f51e5d8ebbe9f98403565457e33297dcfdad0462dee577ee96f11d051c25a1905d2061d9c1a8739514aab437cf7e143fe1a000d4fe5b2b9802f059f1a023ed7ae3e8a233f4348908d0f3c45be25025ae501575b6d373aec0998d8fd6bd24573e5996ffd8509e72993ef330727ad5417df842bdba376528f52e5c5226a1dab152e96733648d7ed7281bf784860a02bf089d443cd9672ea6b0f99a13fed2f1138fdb66e28c0c375912eace499bddc9a295fc6e84f7030c88667d2bbfae628ab5957d7d6cee4d8ed910541ed677b97826d7e9544c623e5e4944f07354b1c52f7d91d579405cd147e6d46e2b6ba67d050b1389f9969686495d5608bdd6eeac279f7ba9ac35ff1cb410b0f7986071e8fd39e6329e908a5665d05392bbb2a95c4118ceaeeec8e0d789d0bee6f830afd9f65740a139df730cb1ed305ee3cd114c885337fa7959b6679186761736c315aeec5838ed5f9bc814b7bca83e5bac7edf70c7454639764aba0c3a73a93e4715c67735b0452e7491e05f1e2a12be92c7d0c917ab1bdbf8ce517ac520c54d24339c5d22e7bb2035f32ac5166d8e99e72dc4821809013034e2c324f3eea9e5a6eeaa0faf5bbd7e7e1bd5665709596c47a23cd526afac9990efb2cf0c3e939739b5fb220b6398d66ffa9594008a571eaf6730de59a082c624ab48d6c4ab72c9a8216cfe0bbf16c7ac40dffb1fd398bdc5d3b7587393604e77da6ff2314323b9f72ae472d2863651f751cf46e2a9403cc639781256ebd9c835630b1a999b6dd653a38bda59c852b64eb9c44b9e19b4279ea59f52bb54f59ff0d7a21db93190bf22c95314b787d74089ffc0719d88b")

11:42:48 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000006000418200000", @ANYRES32=r1, @ANYBLOB="000000000009000000480080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x7550}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x48084)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x6, 0x8, 0x6, 0x7fff})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000006000418200000", @ANYRES32=r1, @ANYBLOB="000000000009000000480080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x7550}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x48084) (async)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x6, 0x8, 0x6, 0x7fff}) (async)

11:42:48 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000d600000095000000000000001820c612479007b35a9151117213d0afab3a156a6d6de409b38a083fa3242dfa623623a9e770c10cccecc56a29ad1974a4b1ab15155c0fec281d79d0a8c6a25744aae3f1915abf269da04284afcab8", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x400001)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$cgroup_subtree(r3, &(0x7f0000000540)={[{0x2b, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'cpuacct'}]}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0xffffff22, 0x2, 0x1400, r0, 0x3, '\x00', 0x0, r0, 0x5, 0x4, 0x3, 0x6}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffff00}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x20, 0x1, 0x1, 0x3, 0x9}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r4]}, 0x80)
read$qrtrtun(r0, &(0x7f0000000100)=""/225, 0xe1)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r5, &(0x7f0000000080)=""/111, 0x6f)
socketpair(0xcad4519c33147398, 0x4, 0x400, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4)

[ 2297.228993][T23355] FAULT_INJECTION: forcing a failure.
[ 2297.228993][T23355] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2297.229022][T23355] CPU: 1 PID: 23355 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2297.252928][T23355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2297.263009][T23355] Call Trace:
[ 2297.266301][T23355]  <TASK>
[ 2297.269291][T23355]  dump_stack_lvl+0xda/0x130
[ 2297.273904][T23355]  dump_stack+0x15/0x20
11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x13, 0x1, 0x3, 0x0, 0x0, 0x80000001, 0x40100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0x6, 0xf}, 0x40, 0x2, 0x401, 0x2, 0x400, 0x2, 0xffff, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4) (async)
perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x13, 0x1, 0x3, 0x0, 0x0, 0x80000001, 0x40100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0x6, 0xf}, 0x40, 0x2, 0x401, 0x2, 0x400, 0x2, 0xffff, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4)

[ 2297.278110][T23355]  should_fail_ex+0x21f/0x230
[ 2297.282811][T23355]  __alloc_pages+0x108/0x340
[ 2297.287439][T23355]  vma_alloc_folio+0x69d/0x8b0
[ 2297.292251][T23355]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2297.297552][T23355]  shmem_write_begin+0xa6/0x1e0
[ 2297.302484][T23355]  generic_perform_write+0x1c3/0x3d0
[ 2297.307895][T23355]  ? shmem_write_begin+0x1e0/0x1e0
[ 2297.313071][T23355]  __generic_file_write_iter+0xe6/0x290
[ 2297.318742][T23355]  generic_file_write_iter+0x7d/0x1c0
[ 2297.324125][T23355]  vfs_write+0x45a/0x750
11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xab42, 0x4) (async)
socketpair(0x23, 0x1, 0x9, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x10, 0xfffffffc, 0xaef1, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x64, 0x0, 0x74, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x12, 0x1, [{0x5, 0xa, "8234db77856af274"}, {0x1, 0x2}]}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x7, 0xed, [@empty]}, @end, @timestamp={0x44, 0x20, 0x2e, 0x0, 0x2, [0x5, 0x1, 0x9, 0x400, 0x0, 0x33, 0x4]}, @timestamp_addr={0x44, 0x1c, 0xac, 0x1, 0x1, [{@broadcast, 0x8a0}, {@empty, 0x8}, {@local, 0x3ff}]}]}}}}}) (async, rerun: 64)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4) (async, rerun: 64)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x1, 0x4) (async)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000d60000000000000001000000950000000000000018200000", @ANYRES32=r4, @ANYBLOB='\x00'/11], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1e0, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) (async)
connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x2, 0x6, {0xa, 0x4e24, 0xffffffff, @local, 0x7}}}, 0x3a) (async)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

[ 2297.328396][T23355]  ksys_write+0xeb/0x1a0
[ 2297.332836][T23355]  __x64_sys_write+0x42/0x50
[ 2297.337526][T23355]  do_syscall_64+0x41/0xc0
[ 2297.341967][T23355]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.347873][T23355] RIP: 0033:0x7f73579e80f9
[ 2297.352294][T23355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:49 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 45)

11:42:49 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000d600000095000000000000001820c612479007b35a9151117213d0afab3a156a6d6de409b38a083fa3242dfa623623a9e770c10cccecc56a29ad1974a4b1ab15155c0fec281d79d0a8c6a25744aae3f1915abf269da04284afcab8", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x400001)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async, rerun: 32)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
write$cgroup_subtree(r3, &(0x7f0000000540)={[{0x2b, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'cpuacct'}]}, 0x2c) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0xffffff22, 0x2, 0x1400, r0, 0x3, '\x00', 0x0, r0, 0x5, 0x4, 0x3, 0x6}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffff00}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x20, 0x1, 0x1, 0x3, 0x9}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r4]}, 0x80) (async)
read$qrtrtun(r0, &(0x7f0000000100)=""/225, 0xe1) (async)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r5, &(0x7f0000000080)=""/111, 0x6f)
socketpair(0xcad4519c33147398, 0x4, 0x400, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4)

11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="dc51bb63f04017fcbd98427f9ad687f34009e5d62153d9cdba30f64dc2022931266078fd06517fcef573c1b01140633f8597e6c95d9ee7e09cec321357e44c4b78061b9dd67697453a8c4d14418822848adf3dc3c9db63d07bffcaccda3054c3cf57")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100))

11:42:49 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000006000418200000", @ANYRES32=r1, @ANYBLOB="000000000009000000480080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000006000418200000", @ANYRES32=r1, @ANYBLOB="000000000009000000480080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xfffffffe}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x7550}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x48084)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x6, 0x8, 0x6, 0x7fff})

[ 2297.372007][T23355] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2297.380486][T23355] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2297.388473][T23355] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2297.396455][T23355] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2297.404451][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2297.412442][T23355] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2297.420438][T23355]  </TASK>
11:42:49 executing program 2:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x13, 0x1, 0x3, 0x0, 0x0, 0x80000001, 0x40100, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x0, @perf_config_ext={0x6, 0xf}, 0x40, 0x2, 0x401, 0x2, 0x400, 0x2, 0xffff, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x4)

11:42:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0) (async)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2b, 'hugetlb'}, {0x2b, 'io'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'perf_event'}]}, 0x3f) (async)
write$vga_arbiter(r1, &(0x7f0000000100)=@unlock_all, 0xb)

11:42:49 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000d600000095000000000000001820c612479007b35a9151117213d0afab3a156a6d6de409b38a083fa3242dfa623623a9e770c10cccecc56a29ad1974a4b1ab15155c0fec281d79d0a8c6a25744aae3f1915abf269da04284afcab8", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000d600000095000000000000001820c612479007b35a9151117213d0afab3a156a6d6de409b38a083fa3242dfa623623a9e770c10cccecc56a29ad1974a4b1ab15155c0fec281d79d0a8c6a25744aae3f1915abf269da04284afcab8", @ANYRES32=r0, @ANYBLOB="000000000000010000300080000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x2, 0x400001)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
write$cgroup_subtree(r3, &(0x7f0000000540)={[{0x2b, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'cpuacct'}]}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0xffffff22, 0x2, 0x1400, r0, 0x3, '\x00', 0x0, r0, 0x5, 0x4, 0x3, 0x6}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8, 0xffffff22, 0x2, 0x1400, r0, 0x3, '\x00', 0x0, r0, 0x5, 0x4, 0x3, 0x6}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffff00}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x20, 0x1, 0x1, 0x3, 0x9}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r4]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffff00}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x20, 0x1, 0x1, 0x3, 0x9}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r2, r4]}, 0x80)
read$qrtrtun(r0, &(0x7f0000000100)=""/225, 0xe1)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r5, &(0x7f0000000080)=""/111, 0x6f)
socketpair(0xcad4519c33147398, 0x4, 0x400, &(0x7f0000000040)) (async)
socketpair(0xcad4519c33147398, 0x4, 0x400, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4)

11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="dc51bb63f04017fcbd98427f9ad687f34009e5d62153d9cdba30f64dc2022931266078fd06517fcef573c1b01140633f8597e6c95d9ee7e09cec321357e44c4b78061b9dd67697453a8c4d14418822848adf3dc3c9db63d07bffcaccda3054c3cf57")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async, rerun: 64)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) (rerun: 64)

[ 2297.480910][T23379] FAULT_INJECTION: forcing a failure.
[ 2297.480910][T23379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2297.494107][T23379] CPU: 1 PID: 23379 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2297.504770][T23379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2297.514840][T23379] Call Trace:
[ 2297.518126][T23379]  <TASK>
[ 2297.521053][T23379]  dump_stack_lvl+0xda/0x130
[ 2297.525821][T23379]  dump_stack+0x15/0x20
11:42:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42042, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2b, 'hugetlb'}, {0x2b, 'io'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'perf_event'}]}, 0x3f) (async)
write$vga_arbiter(r1, &(0x7f0000000100)=@unlock_all, 0xb)

11:42:49 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="dc51bb63f04017fcbd98427f9ad687f34009e5d62153d9cdba30f64dc2022931266078fd06517fcef573c1b01140633f8597e6c95d9ee7e09cec321357e44c4b78061b9dd67697453a8c4d14418822848adf3dc3c9db63d07bffcaccda3054c3cf57")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) (async)
ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100))

[ 2297.530006][T23379]  should_fail_ex+0x21f/0x230
[ 2297.534796][T23379]  should_fail+0xb/0x10
[ 2297.538973][T23379]  should_fail_usercopy+0x1a/0x20
[ 2297.544022][T23379]  copy_page_from_iter_atomic+0x229/0xb30
[ 2297.549853][T23379]  ? PageHeadHuge+0x3f/0x80
[ 2297.554485][T23379]  ? shmem_write_begin+0x135/0x1e0
[ 2297.559639][T23379]  generic_perform_write+0x203/0x3d0
[ 2297.565032][T23379]  ? shmem_write_begin+0x1e0/0x1e0
[ 2297.570259][T23379]  __generic_file_write_iter+0xe6/0x290
[ 2297.575863][T23379]  generic_file_write_iter+0x7d/0x1c0
[ 2297.581272][T23379]  vfs_write+0x45a/0x750
[ 2297.585534][T23379]  ksys_write+0xeb/0x1a0
[ 2297.589802][T23379]  __x64_sys_write+0x42/0x50
[ 2297.594409][T23379]  do_syscall_64+0x41/0xc0
[ 2297.598843][T23379]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.604810][T23379] RIP: 0033:0x7f73579e80f9
[ 2297.609229][T23379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="75ad1ee9da1cbd6c5b5093cb6f0a18c0c75cc3d10f98f7bbe29c41b9a81256a6b495a7f2af60d84edbefd6aa2b7cabd558b58907a68a1890c57daea5cc0704d7632cf589ea3ba914424822de5515b428aa02f94e64efe92c111848")

11:42:49 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x5, 0x80, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x5, 0xb89, 0x7, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x48)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r3, r4]}, 0x80)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xfff7, 0x3, 0xfff, 0x6, 0xb, "ffede1b56afa3bb9"})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x9}, {0xc2, 0xf1}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x13)

[ 2297.628858][T23379] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2297.637393][T23379] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2297.645377][T23379] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2297.653362][T23379] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2297.661343][T23379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2297.669351][T23379] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2297.677375][T23379]  </TASK>
11:42:49 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 46)

11:42:49 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="200029bd7000fedbdf250500000014000280080002000700000004000380040004002c00078008000100ff03000008000200ff000000080001005076000008000200020000000800020040000000240007800800020002009b18abcca2990f8d5800000c000400bb7f000000000000000002000600000010000280040004000800020001000000040009801400098008000100eea100000800010002000000580006804800040067636d286165732900000000000000000000000000000000000000000000000020000000482f59a7a83b7e634b47a3de77007c9ca35599561d6bb4c4b08f5da957053d4f0400050008000600090000002c0003800800010000000000080003000100000008000300ff03000002000200000000"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20000041)

11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r3=>0x0, 0x700, 0x7, 0x5, 0x8, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x19, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102, @local, @local, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0xf, 0x75, [@loopback, @multicast1, @private=0xa010102]}, @noop, @generic={0x94, 0x12, "f0f4613d77fd7f161ee16a18f0ee4e27"}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x3, [{@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x687f}, {@broadcast, 0x5}, {@multicast2, 0x8}, {@empty, 0x3}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c801}, 0x2004c0c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x38, r6, 0x318, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x24000004)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x224, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6057e871}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffb87}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x86}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x48800}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000)

11:42:49 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x5, 0x80, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x5, 0xb89, 0x7, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x48)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r3, r4]}, 0x80)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xfff7, 0x3, 0xfff, 0x6, 0xb, "ffede1b56afa3bb9"})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x9}, {0xc2, 0xf1}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x13)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x5, 0x80, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x5, 0xb89, 0x7, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x48) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r3, r4]}, 0x80) (async)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xfff7, 0x3, 0xfff, 0x6, 0xb, "ffede1b56afa3bb9"}) (async)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x9}, {0xc2, 0xf1}]}) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x13) (async)

11:42:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000003c0)={0x34, "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"})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000740)={@empty, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {}, {@dev}]}})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000006c0)={&(0x7f0000000240), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x12, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x11c, r2, 0x100, 0x70bd28, 0x4, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x515}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8001f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59709b27}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x12f3416b, 0x4, 0x8})

11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="75ad1ee9da1cbd6c5b5093cb6f0a18c0c75cc3d10f98f7bbe29c41b9a81256a6b495a7f2af60d84edbefd6aa2b7cabd558b58907a68a1890c57daea5cc0704d7632cf589ea3ba914424822de5515b428aa02f94e64efe92c111848")

11:42:49 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20000041)

11:42:49 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x5, 0x80, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x5, 0xb89, 0x7, 0x0, r0, 0x9, '\x00', 0x0, r0, 0x0, 0x1, 0x5}, 0x48)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x9, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5, r3, r4]}, 0x80)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xfff7, 0x3, 0xfff, 0x6, 0xb, "ffede1b56afa3bb9"}) (async)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xfff7, 0x3, 0xfff, 0x6, 0xb, "ffede1b56afa3bb9"})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x9}, {0xc2, 0xf1}]}) (async)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x9}, {0xc2, 0xf1}]})
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x13) (async)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x13)

11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r3=>0x0, 0x700, 0x7, 0x5, 0x8, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x19, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102, @local, @local, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0xf, 0x75, [@loopback, @multicast1, @private=0xa010102]}, @noop, @generic={0x94, 0x12, "f0f4613d77fd7f161ee16a18f0ee4e27"}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x3, [{@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x687f}, {@broadcast, 0x5}, {@multicast2, 0x8}, {@empty, 0x3}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c801}, 0x2004c0c0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x38, r6, 0x318, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x24000004) (async)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x224, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6057e871}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffb87}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x86}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x48800}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000)

11:42:49 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="75ad1ee9da1cbd6c5b5093cb6f0a18c0c75cc3d10f98f7bbe29c41b9a81256a6b495a7f2af60d84edbefd6aa2b7cabd558b58907a68a1890c57daea5cc0704d7632cf589ea3ba914424822de5515b428aa02f94e64efe92c111848")

11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async, rerun: 32)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r3=>0x0, 0x700, 0x7, 0x5, 0x8, {{0x25, 0x4, 0x2, 0x4, 0x94, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x19, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102, @local, @local, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0xf, 0x75, [@loopback, @multicast1, @private=0xa010102]}, @noop, @generic={0x94, 0x12, "f0f4613d77fd7f161ee16a18f0ee4e27"}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x3, [{@loopback, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x18000000}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x687f}, {@broadcast, 0x5}, {@multicast2, 0x8}, {@empty, 0x3}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c801}, 0x2004c0c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x38, r6, 0x318, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x24000004) (async, rerun: 64)
sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x224, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6057e871}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffb87}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x86}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x95a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x48800}, 0x10) (async, rerun: 64)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x10000)

11:42:49 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20000041)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20000041) (async)

11:42:49 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 47)

[ 2297.902182][T23438] FAULT_INJECTION: forcing a failure.
[ 2297.902182][T23438] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2297.915500][T23438] CPU: 0 PID: 23438 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2297.926184][T23438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2297.936251][T23438] Call Trace:
[ 2297.939530][T23438]  <TASK>
[ 2297.942475][T23438]  dump_stack_lvl+0xda/0x130
[ 2297.942541][T23438]  dump_stack+0x15/0x20
11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffd7)

11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffd7)

[ 2297.942572][T23438]  should_fail_ex+0x21f/0x230
[ 2297.942600][T23438]  __alloc_pages+0x108/0x340
[ 2297.942686][T23438]  vma_alloc_folio+0x69d/0x8b0
[ 2297.942724][T23438]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2297.942769][T23438]  shmem_write_begin+0xa6/0x1e0
11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xffffffffffffffd7)

[ 2297.942809][T23438]  generic_perform_write+0x1c3/0x3d0
[ 2297.942889][T23438]  ? shmem_write_begin+0x1e0/0x1e0
[ 2297.942924][T23438]  __generic_file_write_iter+0xe6/0x290
[ 2297.942952][T23438]  generic_file_write_iter+0x7d/0x1c0
[ 2297.942984][T23438]  vfs_write+0x45a/0x750
[ 2297.943172][T23438]  ksys_write+0xeb/0x1a0
[ 2297.943214][T23438]  __x64_sys_write+0x42/0x50
11:42:49 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x505000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x81)

[ 2297.943323][T23438]  do_syscall_64+0x41/0xc0
[ 2297.943353][T23438]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.943383][T23438] RIP: 0033:0x7f73579e80f9
[ 2297.943406][T23438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2297.943432][T23438] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2297.943451][T23438] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2297.943463][T23438] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2297.943475][T23438] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2297.943487][T23438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2297.943556][T23438] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2297.943572][T23438]  </TASK>
[ 2297.967515][T23455] FAULT_INJECTION: forcing a failure.
[ 2297.967515][T23455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2297.967541][T23455] CPU: 1 PID: 23455 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2297.967562][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2297.967575][T23455] Call Trace:
[ 2297.967581][T23455]  <TASK>
[ 2297.967664][T23455]  dump_stack_lvl+0xda/0x130
[ 2297.967770][T23455]  dump_stack+0x15/0x20
[ 2297.967838][T23455]  should_fail_ex+0x21f/0x230
[ 2297.967865][T23455]  should_fail+0xb/0x10
[ 2297.967896][T23455]  should_fail_usercopy+0x1a/0x20
[ 2297.967923][T23455]  copy_page_from_iter_atomic+0x229/0xb30
[ 2297.968013][T23455]  ? PageHeadHuge+0x3f/0x80
[ 2297.968038][T23455]  ? shmem_write_begin+0x135/0x1e0
[ 2297.968068][T23455]  generic_perform_write+0x203/0x3d0
[ 2297.968094][T23455]  ? shmem_write_begin+0x1e0/0x1e0
[ 2297.968124][T23455]  __generic_file_write_iter+0xe6/0x290
[ 2297.968187][T23455]  generic_file_write_iter+0x7d/0x1c0
[ 2297.968213][T23455]  vfs_write+0x45a/0x750
[ 2297.968242][T23455]  ksys_write+0xeb/0x1a0
[ 2297.968273][T23455]  __x64_sys_write+0x42/0x50
[ 2297.968367][T23455]  do_syscall_64+0x41/0xc0
[ 2297.968393][T23455]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.968416][T23455] RIP: 0033:0x7f73579e80f9
[ 2297.968429][T23455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2297.968512][T23455] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2297.968533][T23455] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2297.968546][T23455] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2297.968558][T23455] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2297.968570][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2297.968609][T23455] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2297.968627][T23455]  </TASK>
[ 2297.973775][T23425] ==================================================================
[ 2297.973806][T23425] BUG: KCSAN: data-race in __percpu_counter_compare / percpu_counter_add_batch
[ 2297.973841][T23425] 
[ 2297.973846][T23425] read-write to 0xffff88810011e3d0 of 8 bytes by task 23455 on cpu 1:
[ 2297.973864][T23425]  percpu_counter_add_batch+0xd5/0x160
[ 2297.973890][T23425]  shmem_get_folio_gfp+0x434/0x1120
[ 2297.973921][T23425]  shmem_write_begin+0xa6/0x1e0
[ 2297.973951][T23425]  generic_perform_write+0x1c3/0x3d0
[ 2297.973971][T23425]  __generic_file_write_iter+0xe6/0x290
[ 2297.973991][T23425]  generic_file_write_iter+0x7d/0x1c0
[ 2297.974010][T23425]  vfs_write+0x45a/0x750
[ 2297.974039][T23425]  ksys_write+0xeb/0x1a0
[ 2297.974068][T23425]  __x64_sys_write+0x42/0x50
[ 2297.974098][T23425]  do_syscall_64+0x41/0xc0
[ 2297.974122][T23425]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.974145][T23425] 
[ 2297.974150][T23425] read to 0xffff88810011e3d0 of 8 bytes by task 23425 on cpu 0:
[ 2297.974167][T23425]  __percpu_counter_compare+0x2b/0x1a0
[ 2297.974193][T23425]  shmem_get_folio_gfp+0x3fd/0x1120
[ 2297.974223][T23425]  shmem_write_begin+0xa6/0x1e0
[ 2297.974252][T23425]  generic_perform_write+0x1c3/0x3d0
[ 2297.974274][T23425]  __generic_file_write_iter+0xe6/0x290
[ 2297.974293][T23425]  generic_file_write_iter+0x7d/0x1c0
[ 2297.974313][T23425]  vfs_write+0x45a/0x750
[ 2297.974339][T23425]  ksys_write+0xeb/0x1a0
[ 2297.974366][T23425]  __x64_sys_write+0x42/0x50
[ 2297.974424][T23425]  do_syscall_64+0x41/0xc0
[ 2297.974450][T23425]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2297.974478][T23425] 
[ 2297.974481][T23425] value changed: 0x00000000000007b4 -> 0x00000000000007d4
[ 2297.974504][T23425] 
[ 2297.974507][T23425] Reported by Kernel Concurrency Sanitizer on:
[ 2297.974513][T23425] CPU: 0 PID: 23425 Comm: syz-executor.3 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2297.974537][T23425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2297.974550][T23425] ==================================================================
11:42:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000003c0)={0x34, "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"}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000740)={@empty, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {}, {@dev}]}})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000006c0)={&(0x7f0000000240), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x12, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x11c, r2, 0x100, 0x70bd28, 0x4, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x515}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8001f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59709b27}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x12f3416b, 0x4, 0x8})

11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x505000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x81)

11:42:50 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 48)

11:42:50 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15f, 0x15f, 0x4, [@datasec={0x6, 0x9, 0x0, 0xf, 0x3, [{0x4, 0xa4}, {0x3, 0x1f, 0xffff}, {0x5, 0x20, 0x2}, {0x1, 0x4, 0x56da}, {0x2, 0xffffffff, 0x80000001}, {0x5, 0x7, 0x80000001}, {0x4, 0xa042, 0x8}, {0x5, 0x1ff, 0x8}, {0x3, 0x6, 0xb90}], "3dfeb1"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x39, 0x7}, @union={0x3, 0x5, 0x0, 0x5, 0x1, 0x7ff, [{0x6, 0x5, 0xa54e}, {0xe, 0x2, 0x3}, {0x7, 0x3, 0x9}, {0x8, 0x2}, {0xb, 0x5, 0x9}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @restrict, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x13}, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xff}}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4d92373b, [{0xf, 0x4, 0x1}, {0x5, 0x5, 0x2}, {0x8, 0x4, 0x4}, {0x0, 0x5, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000040)=""/3, 0x17c, 0x3}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/214, 0xd6, 0x0, &(0x7f00000003c0)=""/176, 0xb0}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:50 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x452782, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x95b7, 0x10000)
write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="756e0500636b206d656d00fdbba4a703bf6800f3c7d3993311b02ee38dfba5e7bdf77aa8c0ad14ee7fdda4e95f10367ddeff176e46671ea5b847265aece0d24747ed0313c904efd8aae7ec32fb046ac17f26707929747f216a23b46c38a524de3af5e2fa6fea7a9d683f00"], 0xb)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x30800)

11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x505000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0x81)

11:42:50 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15f, 0x15f, 0x4, [@datasec={0x6, 0x9, 0x0, 0xf, 0x3, [{0x4, 0xa4}, {0x3, 0x1f, 0xffff}, {0x5, 0x20, 0x2}, {0x1, 0x4, 0x56da}, {0x2, 0xffffffff, 0x80000001}, {0x5, 0x7, 0x80000001}, {0x4, 0xa042, 0x8}, {0x5, 0x1ff, 0x8}, {0x3, 0x6, 0xb90}], "3dfeb1"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x39, 0x7}, @union={0x3, 0x5, 0x0, 0x5, 0x1, 0x7ff, [{0x6, 0x5, 0xa54e}, {0xe, 0x2, 0x3}, {0x7, 0x3, 0x9}, {0x8, 0x2}, {0xb, 0x5, 0x9}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @restrict, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x13}, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xff}}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4d92373b, [{0xf, 0x4, 0x1}, {0x5, 0x5, 0x2}, {0x8, 0x4, 0x4}, {0x0, 0x5, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000040)=""/3, 0x17c, 0x3}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/214, 0xd6, 0x0, &(0x7f00000003c0)=""/176, 0xb0}}, 0x10) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async, rerun: 64)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (rerun: 64)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x30800)

11:42:50 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x452782, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x95b7, 0x10000)
write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="756e0500636b206d656d00fdbba4a703bf6800f3c7d3993311b02ee38dfba5e7bdf77aa8c0ad14ee7fdda4e95f10367ddeff176e46671ea5b847265aece0d24747ed0313c904efd8aae7ec32fb046ac17f26707929747f216a23b46c38a524de3af5e2fa6fea7a9d683f00"], 0xb)

[ 2298.649755][T23482] FAULT_INJECTION: forcing a failure.
[ 2298.649755][T23482] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2298.663084][T23482] CPU: 0 PID: 23482 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2298.673700][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2298.673715][T23482] Call Trace:
[ 2298.673721][T23482]  <TASK>
[ 2298.673727][T23482]  dump_stack_lvl+0xda/0x130
11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x608001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:50 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 49)

[ 2298.694642][T23482]  dump_stack+0x15/0x20
[ 2298.694741][T23482]  should_fail_ex+0x21f/0x230
[ 2298.694793][T23482]  __alloc_pages+0x108/0x340
[ 2298.694820][T23482]  vma_alloc_folio+0x69d/0x8b0
[ 2298.694926][T23482]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2298.694966][T23482]  shmem_write_begin+0xa6/0x1e0
[ 2298.694996][T23482]  generic_perform_write+0x1c3/0x3d0
[ 2298.695018][T23482]  ? shmem_write_begin+0x1e0/0x1e0
[ 2298.695061][T23482]  __generic_file_write_iter+0xe6/0x290
[ 2298.695087][T23482]  generic_file_write_iter+0x7d/0x1c0
[ 2298.695112][T23482]  vfs_write+0x45a/0x750
[ 2298.695145][T23482]  ksys_write+0xeb/0x1a0
[ 2298.695282][T23482]  __x64_sys_write+0x42/0x50
[ 2298.695324][T23482]  do_syscall_64+0x41/0xc0
[ 2298.695421][T23482]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2298.695449][T23482] RIP: 0033:0x7f73579e80f9
[ 2298.695464][T23482] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2298.695491][T23482] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2298.695512][T23482] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2298.695524][T23482] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2298.695535][T23482] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2298.695547][T23482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2298.695558][T23482] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2298.695620][T23482]  </TASK>
[ 2298.738126][T23503] FAULT_INJECTION: forcing a failure.
[ 2298.738126][T23503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2298.738150][T23503] CPU: 1 PID: 23503 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2298.738247][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2298.738259][T23503] Call Trace:
[ 2298.738264][T23503]  <TASK>
[ 2298.738269][T23503]  dump_stack_lvl+0xda/0x130
[ 2298.738304][T23503]  dump_stack+0x15/0x20
[ 2298.738371][T23503]  should_fail_ex+0x21f/0x230
[ 2298.738398][T23503]  should_fail+0xb/0x10
[ 2298.738476][T23503]  should_fail_usercopy+0x1a/0x20
[ 2298.738502][T23503]  copy_page_from_iter_atomic+0x229/0xb30
[ 2298.738539][T23503]  ? PageHeadHuge+0x3f/0x80
[ 2298.738631][T23503]  ? shmem_write_begin+0x135/0x1e0
[ 2298.738660][T23503]  generic_perform_write+0x203/0x3d0
[ 2298.738682][T23503]  ? shmem_write_begin+0x1e0/0x1e0
[ 2298.738745][T23503]  __generic_file_write_iter+0xe6/0x290
[ 2298.738772][T23503]  generic_file_write_iter+0x7d/0x1c0
[ 2298.738829][T23503]  vfs_write+0x45a/0x750
[ 2298.738858][T23503]  ksys_write+0xeb/0x1a0
[ 2298.738885][T23503]  __x64_sys_write+0x42/0x50
[ 2298.738918][T23503]  do_syscall_64+0x41/0xc0
[ 2298.738995][T23503]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2298.739084][T23503] RIP: 0033:0x7f73579e80f9
[ 2298.739098][T23503] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2298.739119][T23503] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2298.739141][T23503] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2298.739156][T23503] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
11:42:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x24}}, 0x0) (async)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000003c0)={0x34, "18e454b15c7666772da0d339e15621f8822fc2fb6a1c20817c6edd7a7f430a92f71f996f0b4beb8cb2baf955168b2422581eb6da423d05bd819d282ebfa50e962834025855339ca98c410db0ee42b40a9c7b54b732768503d439c558506b8d17a29df5bc4b639135577cc66124cb06489b1a6fe186e350e721c66673ecc5ccd794a5b8030035ab576c36af8dd92dbbf630374a7221fd0f3e6b7f0667db7b1b21dc976896b8f660a77aa2f23239e84017d8e709daa079dfffe866b2580e28c4e89ec4e9e0ddff955104feecfdcc74f96a2eb171b00678ceea94268265b4820a2f59ba33dd768ecea8321c0a5c9fab7042eefcd3a3318e94098f2c6f25de44ffa1e2805d38877d7354ef32f08ccf588cfe9a6e88b4f56383b195b9d9571795927d13951a27503db58a36fb5f285c8ef4c4351d2f0e9baa8114fd33b10e04da656237bcff93a1e45b1ff2043fc8fd195182b68c8efe03608a618274fc61eea5f05a6bd99dbe187e45a42d3f48836789e1504670e34c763a8259c388b6c8d136ff08176dbf55e50d7d38def3ec21dc94f75afe108a52611ad9434a86482b64d8327efbeb5690a6f47559b4f7ef83153ac37d5ee54777b5e4683f7b631cd588a93f5b2c6ec343b87e7baaf3c90a9b9607d446483868005a959b14b130f543b15fd4c7ec6d7de9604f392ca6be56b84b2ac061dbf41e84b9e45553e496853fc98d1f8b"}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) (async)
pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000740)={@empty, 0x1, 0x0, 0x30, 0x0, [{@loopback}, {}, {@dev}]}})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r3)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000006c0)={&(0x7f0000000240), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x12, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040001) (async)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x11c, r2, 0x100, 0x70bd28, 0x4, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x515}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8001f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59709b27}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x12f3416b, 0x4, 0x8}) (rerun: 64)

11:42:50 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x452782, 0x0)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x95b7, 0x10000)
write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="756e0500636b206d656d00fdbba4a703bf6800f3c7d3993311b02ee38dfba5e7bdf77aa8c0ad14ee7fdda4e95f10367ddeff176e46671ea5b847265aece0d24747ed0313c904efd8aae7ec32fb046ac17f26707929747f216a23b46c38a524de3af5e2fa6fea7a9d683f00"], 0xb)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x30800)

11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x608001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x608001, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0)) (async)

11:42:50 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 50)

11:42:50 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15f, 0x15f, 0x4, [@datasec={0x6, 0x9, 0x0, 0xf, 0x3, [{0x4, 0xa4}, {0x3, 0x1f, 0xffff}, {0x5, 0x20, 0x2}, {0x1, 0x4, 0x56da}, {0x2, 0xffffffff, 0x80000001}, {0x5, 0x7, 0x80000001}, {0x4, 0xa042, 0x8}, {0x5, 0x1ff, 0x8}, {0x3, 0x6, 0xb90}], "3dfeb1"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x39, 0x7}, @union={0x3, 0x5, 0x0, 0x5, 0x1, 0x7ff, [{0x6, 0x5, 0xa54e}, {0xe, 0x2, 0x3}, {0x7, 0x3, 0x9}, {0x8, 0x2}, {0xb, 0x5, 0x9}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @restrict, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x13}, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xff}}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4d92373b, [{0xf, 0x4, 0x1}, {0x5, 0x5, 0x2}, {0x8, 0x4, 0x4}, {0x0, 0x5, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000040)=""/3, 0x17c, 0x3}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/214, 0xd6, 0x0, &(0x7f00000003c0)=""/176, 0xb0}}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)
syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15f, 0x15f, 0x4, [@datasec={0x6, 0x9, 0x0, 0xf, 0x3, [{0x4, 0xa4}, {0x3, 0x1f, 0xffff}, {0x5, 0x20, 0x2}, {0x1, 0x4, 0x56da}, {0x2, 0xffffffff, 0x80000001}, {0x5, 0x7, 0x80000001}, {0x4, 0xa042, 0x8}, {0x5, 0x1ff, 0x8}, {0x3, 0x6, 0xb90}], "3dfeb1"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x39, 0x7}, @union={0x3, 0x5, 0x0, 0x5, 0x1, 0x7ff, [{0x6, 0x5, 0xa54e}, {0xe, 0x2, 0x3}, {0x7, 0x3, 0x9}, {0x8, 0x2}, {0xb, 0x5, 0x9}]}, @var={0xc, 0x0, 0x0, 0xe, 0x4}, @restrict, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x13}, @func={0x0, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xff}}, @struct={0x8, 0x4, 0x0, 0x4, 0x0, 0x4d92373b, [{0xf, 0x4, 0x1}, {0x5, 0x5, 0x2}, {0x8, 0x4, 0x4}, {0x0, 0x5, 0x2}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000040)=""/3, 0x17c, 0x3}, 0x20) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f00000002c0)=""/214, 0xd6, 0x0, &(0x7f00000003c0)=""/176, 0xb0}}, 0x10) (async)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f) (async)

[ 2298.739178][T23503] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2298.739190][T23503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2298.739227][T23503] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2298.739245][T23503]  </TASK>
11:42:50 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x4040)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x40, 0x4, 0xe4f1})

11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x608001, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))

11:42:50 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x4040)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async, rerun: 64)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x40, 0x4, 0xe4f1}) (rerun: 64)

11:42:50 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 51)

[ 2299.148141][T23518] FAULT_INJECTION: forcing a failure.
[ 2299.148141][T23518] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2299.161452][T23518] CPU: 1 PID: 23518 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
11:42:50 executing program 5:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x4040)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:50 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1a, 0x58, 0x8000})

11:42:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x1, 0x0, 0x10, 0x0, [{@remote}]}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2a8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e532406c500b72d463494e2f0601e09dc9d66995ce5847ba01"}}, @TIPC_NLA_NODE_ID={0x96, 0x3, "cac3ab600de65d6b9eef37c8bec5ad0a28b4242858fe89002446556c8503f16d1083aaf5a8c3dbfe354819896ce73ee7828a128079e736d3eb04874f9cc60d8fd33d5de60c3d8e0be9d51801e12800e7a2e41bd46df60d7419a180fe092b1aac91b6d140398f6143a2605b6c30dab03166dee5daa3baca5d90a85c4eed4c7a829b80ff5f9d6cd4f2ff79224b666513166bf1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x180}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "2a1dbadd9a6c4f883e21c58c39f120ffee1ff861b21f974ac39c0bd511a0e594ca5bb5b772047d94a6d7a8ab2b0dc1116e984f2792981a2c5e513ca0019689f4317054b7a85b07abdc"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dffeb184e451f10e4cc3f3abb1867e3436802062780a43750f2cc4ff7351e0f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendto$llc(r2, &(0x7f0000000100)="d34699874d53f8daf1840ad0353d890dfceef57601da83d81ded86567f370bb35e42d1c7f9bcd1070d5c9d420f737db9c3ce617dbbd6c3686d17d4712e6e41c2134798a9ffde0d4844af814ed8fe3b1e76b37dcde94db8b53589e474af5ede0a9ac2303b202a0f78c4f9f454f3bdf0ee51099eb49492003c1141", 0x7a, 0x40850, &(0x7f0000000180)={0x1a, 0x5, 0x5, 0x5, 0x5, 0xad, @multicast}, 0x10)

11:42:50 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x40, 0x4, 0xe4f1})

11:42:50 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="198d40db457d384638ca8655a33588959dc378ba2b77058315c4df96f163c8f701450a78c682567cbc7b16ced166c97cb583c677975a57071e642aeada47b8c8b46e4663f77153fc193277856364f41e44d7a94978d2fc78e58d007b658b252f0e598249f177c099ae9f047b84ce6d3b81f34ad0744fb64e64ea25f474adf0cf1b5ec7a319207b29b362dacdf432aad37205112a846b3302538b7d5fd80d3343aed01f8aeb67e3daa23feb53d956e94d1ccf948ade")
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00')

[ 2299.161548][T23518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2299.161560][T23518] Call Trace:
[ 2299.161566][T23518]  <TASK>
[ 2299.161574][T23518]  dump_stack_lvl+0xda/0x130
[ 2299.161610][T23518]  dump_stack+0x15/0x20
[ 2299.161696][T23518]  should_fail_ex+0x21f/0x230
[ 2299.161722][T23518]  __alloc_pages+0x108/0x340
[ 2299.161752][T23518]  vma_alloc_folio+0x69d/0x8b0
[ 2299.161785][T23518]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2299.161883][T23518]  shmem_write_begin+0xa6/0x1e0
[ 2299.161918][T23518]  generic_perform_write+0x1c3/0x3d0
[ 2299.161957][T23518]  ? shmem_write_begin+0x1e0/0x1e0
[ 2299.162060][T23518]  __generic_file_write_iter+0xe6/0x290
[ 2299.162190][T23518]  generic_file_write_iter+0x7d/0x1c0
[ 2299.162222][T23518]  vfs_write+0x45a/0x750
[ 2299.162263][T23518]  ksys_write+0xeb/0x1a0
[ 2299.162302][T23518]  __x64_sys_write+0x42/0x50
[ 2299.162341][T23518]  do_syscall_64+0x41/0xc0
[ 2299.162418][T23518]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2299.162452][T23518] RIP: 0033:0x7f73579e80f9
[ 2299.162570][T23518] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2299.162593][T23518] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2299.162618][T23518] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2299.162635][T23518] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2299.162651][T23518] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2299.162666][T23518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2299.162682][T23518] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2299.162702][T23518]  </TASK>
[ 2299.234566][T23541] FAULT_INJECTION: forcing a failure.
[ 2299.234566][T23541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2299.234594][T23541] CPU: 1 PID: 23541 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2299.234692][T23541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2299.234706][T23541] Call Trace:
[ 2299.234712][T23541]  <TASK>
[ 2299.234719][T23541]  dump_stack_lvl+0xda/0x130
[ 2299.234750][T23541]  dump_stack+0x15/0x20
[ 2299.234833][T23541]  should_fail_ex+0x21f/0x230
[ 2299.234863][T23541]  should_fail+0xb/0x10
[ 2299.234888][T23541]  should_fail_usercopy+0x1a/0x20
[ 2299.234913][T23541]  copy_page_from_iter_atomic+0x229/0xb30
[ 2299.234943][T23541]  ? PageHeadHuge+0x3f/0x80
[ 2299.234998][T23541]  ? shmem_write_begin+0x135/0x1e0
[ 2299.235031][T23541]  generic_perform_write+0x203/0x3d0
[ 2299.235105][T23541]  ? shmem_write_begin+0x1e0/0x1e0
[ 2299.235152][T23541]  __generic_file_write_iter+0xe6/0x290
[ 2299.235179][T23541]  generic_file_write_iter+0x7d/0x1c0
[ 2299.235279][T23541]  vfs_write+0x45a/0x750
[ 2299.235315][T23541]  ksys_write+0xeb/0x1a0
[ 2299.235347][T23541]  __x64_sys_write+0x42/0x50
[ 2299.235427][T23541]  do_syscall_64+0x41/0xc0
[ 2299.235458][T23541]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2299.235488][T23541] RIP: 0033:0x7f73579e80f9
[ 2299.235504][T23541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2299.235531][T23541] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2299.235553][T23541] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
11:42:51 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x80000001, 0x3f, 0x8, 0x2, 0x0, 0x800})
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socketpair(0x3, 0x1, 0x4, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d5}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x11a0, @empty, 0x2c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb5ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffb, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6f1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x148}}, 0x8000)
getpeername$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10)

11:42:51 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="198d40db457d384638ca8655a33588959dc378ba2b77058315c4df96f163c8f701450a78c682567cbc7b16ced166c97cb583c677975a57071e642aeada47b8c8b46e4663f77153fc193277856364f41e44d7a94978d2fc78e58d007b658b252f0e598249f177c099ae9f047b84ce6d3b81f34ad0744fb64e64ea25f474adf0cf1b5ec7a319207b29b362dacdf432aad37205112a846b3302538b7d5fd80d3343aed01f8aeb67e3daa23feb53d956e94d1ccf948ade") (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00')

11:42:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 52)

11:42:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x1, 0x0, 0x10, 0x0, [{@remote}]}}) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2a8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e532406c500b72d463494e2f0601e09dc9d66995ce5847ba01"}}, @TIPC_NLA_NODE_ID={0x96, 0x3, "cac3ab600de65d6b9eef37c8bec5ad0a28b4242858fe89002446556c8503f16d1083aaf5a8c3dbfe354819896ce73ee7828a128079e736d3eb04874f9cc60d8fd33d5de60c3d8e0be9d51801e12800e7a2e41bd46df60d7419a180fe092b1aac91b6d140398f6143a2605b6c30dab03166dee5daa3baca5d90a85c4eed4c7a829b80ff5f9d6cd4f2ff79224b666513166bf1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x180}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "2a1dbadd9a6c4f883e21c58c39f120ffee1ff861b21f974ac39c0bd511a0e594ca5bb5b772047d94a6d7a8ab2b0dc1116e984f2792981a2c5e513ca0019689f4317054b7a85b07abdc"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dffeb184e451f10e4cc3f3abb1867e3436802062780a43750f2cc4ff7351e0f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendto$llc(r2, &(0x7f0000000100)="d34699874d53f8daf1840ad0353d890dfceef57601da83d81ded86567f370bb35e42d1c7f9bcd1070d5c9d420f737db9c3ce617dbbd6c3686d17d4712e6e41c2134798a9ffde0d4844af814ed8fe3b1e76b37dcde94db8b53589e474af5ede0a9ac2303b202a0f78c4f9f454f3bdf0ee51099eb49492003c1141", 0x7a, 0x40850, &(0x7f0000000180)={0x1a, 0x5, 0x5, 0x5, 0x5, 0xad, @multicast}, 0x10)

11:42:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1a, 0x58, 0x8000})

[ 2299.235567][T23541] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2299.235580][T23541] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2299.235594][T23541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2299.235608][T23541] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2299.235626][T23541]  </TASK>
11:42:51 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000000c0)="198d40db457d384638ca8655a33588959dc378ba2b77058315c4df96f163c8f701450a78c682567cbc7b16ced166c97cb583c677975a57071e642aeada47b8c8b46e4663f77153fc193277856364f41e44d7a94978d2fc78e58d007b658b252f0e598249f177c099ae9f047b84ce6d3b81f34ad0744fb64e64ea25f474adf0cf1b5ec7a319207b29b362dacdf432aad37205112a846b3302538b7d5fd80d3343aed01f8aeb67e3daa23feb53d956e94d1ccf948ade")
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00')

11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2299.753669][T23568] FAULT_INJECTION: forcing a failure.
[ 2299.753669][T23568] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2299.766943][T23568] CPU: 1 PID: 23568 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2299.777547][T23568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2299.787686][T23568] Call Trace:
[ 2299.790973][T23568]  <TASK>
[ 2299.793903][T23568]  dump_stack_lvl+0xda/0x130
[ 2299.798566][T23568]  dump_stack+0x15/0x20
[ 2299.802814][T23568]  should_fail_ex+0x21f/0x230
[ 2299.807593][T23568]  __alloc_pages+0x108/0x340
[ 2299.812336][T23568]  vma_alloc_folio+0x69d/0x8b0
[ 2299.817140][T23568]  shmem_get_folio_gfp+0x4d5/0x1120
[ 2299.822429][T23568]  shmem_write_begin+0xa6/0x1e0
[ 2299.827322][T23568]  generic_perform_write+0x1c3/0x3d0
[ 2299.832696][T23568]  ? shmem_write_begin+0x1e0/0x1e0
[ 2299.837882][T23568]  __generic_file_write_iter+0xe6/0x290
[ 2299.843452][T23568]  generic_file_write_iter+0x7d/0x1c0
[ 2299.848890][T23568]  vfs_write+0x45a/0x750
[ 2299.853277][T23568]  ksys_write+0xeb/0x1a0
[ 2299.857568][T23568]  __x64_sys_write+0x42/0x50
[ 2299.862193][T23568]  do_syscall_64+0x41/0xc0
[ 2299.866689][T23568]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2299.872614][T23568] RIP: 0033:0x7f73579e80f9
[ 2299.877040][T23568] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
11:42:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)
socketpair(0x3, 0x1, 0x4, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d5}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x11a0, @empty, 0x2c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb5ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffb, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6f1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x148}}, 0x8000)
getpeername$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10)

11:42:51 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x80000001, 0x3f, 0x8, 0x2, 0x0, 0x800})
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:51 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 53)

11:42:51 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f00000002c0))
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1a, 0x58, 0x8000})

11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40000)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

[ 2299.896767][T23568] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2299.905217][T23568] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2299.913211][T23568] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2299.921282][T23568] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2299.929267][T23568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2299.937275][T23568] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2299.945303][T23568]  </TASK>
[ 2299.991048][T23590] FAULT_INJECTION: forcing a failure.
[ 2299.991048][T23590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2300.004166][T23590] CPU: 0 PID: 23590 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2300.014854][T23590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2300.014868][T23590] Call Trace:
[ 2300.014878][T23590]  <TASK>
[ 2300.014885][T23590]  dump_stack_lvl+0xda/0x130
[ 2300.014921][T23590]  dump_stack+0x15/0x20
11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="198d44db457d384638ca8655a3")

11:42:51 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x1, 0x0, 0x10, 0x0, [{@remote}]}})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2a8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e532406c500b72d463494e2f0601e09dc9d66995ce5847ba01"}}, @TIPC_NLA_NODE_ID={0x96, 0x3, "cac3ab600de65d6b9eef37c8bec5ad0a28b4242858fe89002446556c8503f16d1083aaf5a8c3dbfe354819896ce73ee7828a128079e736d3eb04874f9cc60d8fd33d5de60c3d8e0be9d51801e12800e7a2e41bd46df60d7419a180fe092b1aac91b6d140398f6143a2605b6c30dab03166dee5daa3baca5d90a85c4eed4c7a829b80ff5f9d6cd4f2ff79224b666513166bf1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x180}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "2a1dbadd9a6c4f883e21c58c39f120ffee1ff861b21f974ac39c0bd511a0e594ca5bb5b772047d94a6d7a8ab2b0dc1116e984f2792981a2c5e513ca0019689f4317054b7a85b07abdc"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dffeb184e451f10e4cc3f3abb1867e3436802062780a43750f2cc4ff7351e0f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x2a8, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75b}]}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e532406c500b72d463494e2f0601e09dc9d66995ce5847ba01"}}, @TIPC_NLA_NODE_ID={0x96, 0x3, "cac3ab600de65d6b9eef37c8bec5ad0a28b4242858fe89002446556c8503f16d1083aaf5a8c3dbfe354819896ce73ee7828a128079e736d3eb04874f9cc60d8fd33d5de60c3d8e0be9d51801e12800e7a2e41bd46df60d7419a180fe092b1aac91b6d140398f6143a2605b6c30dab03166dee5daa3baca5d90a85c4eed4c7a829b80ff5f9d6cd4f2ff79224b666513166bf1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x180}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "2a1dbadd9a6c4f883e21c58c39f120ffee1ff861b21f974ac39c0bd511a0e594ca5bb5b772047d94a6d7a8ab2b0dc1116e984f2792981a2c5e513ca0019689f4317054b7a85b07abdc"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "dffeb184e451f10e4cc3f3abb1867e3436802062780a43750f2cc4ff7351e0f5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8a0f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
sendto$llc(r2, &(0x7f0000000100)="d34699874d53f8daf1840ad0353d890dfceef57601da83d81ded86567f370bb35e42d1c7f9bcd1070d5c9d420f737db9c3ce617dbbd6c3686d17d4712e6e41c2134798a9ffde0d4844af814ed8fe3b1e76b37dcde94db8b53589e474af5ede0a9ac2303b202a0f78c4f9f454f3bdf0ee51099eb49492003c1141", 0x7a, 0x40850, &(0x7f0000000180)={0x1a, 0x5, 0x5, 0x5, 0x5, 0xad, @multicast}, 0x10)

11:42:51 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x80000001, 0x3f, 0x8, 0x2, 0x0, 0x800})
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="198d44db457d384638ca8655a3") (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="198d44db457d384638ca8655a3")

[ 2300.040213][T23590]  should_fail_ex+0x21f/0x230
[ 2300.040323][T23590]  should_fail+0xb/0x10
[ 2300.040360][T23590]  should_fail_usercopy+0x1a/0x20
11:42:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf) (async)
socketpair(0x3, 0x1, 0x4, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x48}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d5}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x11a0, @empty, 0x2c}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb5ed, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffb, @private0, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6f1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x65b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x148}}, 0x8000) (async)
getpeername$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10)

11:42:51 executing program 1:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000000)="198d44db457d384638ca8655a3")

[ 2300.040398][T23590]  copy_page_from_iter_atomic+0x229/0xb30
[ 2300.040443][T23590]  ? PageHeadHuge+0x3f/0x80
[ 2300.040466][T23590]  ? shmem_write_begin+0x135/0x1e0
[ 2300.040496][T23590]  generic_perform_write+0x203/0x3d0
11:42:51 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9)

11:42:51 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208100, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2300.040524][T23590]  ? shmem_write_begin+0x1e0/0x1e0
[ 2300.040577][T23590]  __generic_file_write_iter+0xe6/0x290
[ 2300.040605][T23590]  generic_file_write_iter+0x7d/0x1c0
[ 2300.040687][T23590]  vfs_write+0x45a/0x750
[ 2300.040724][T23590]  ksys_write+0xeb/0x1a0
[ 2300.040756][T23590]  __x64_sys_write+0x42/0x50
[ 2300.040785][T23590]  do_syscall_64+0x41/0xc0
[ 2300.040811][T23590]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2300.040918][T23590] RIP: 0033:0x7f73579e80f9
[ 2300.040936][T23590] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2300.040955][T23590] RSP: 002b:00007f7356d5b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2300.040979][T23590] RAX: ffffffffffffffda RBX: 00007f7357b07f80 RCX: 00007f73579e80f9
[ 2300.040994][T23590] RDX: 00000000fffffdef RSI: 0000000020000000 RDI: 0000000000000003
[ 2300.041009][T23590] RBP: 00007f7356d5b1d0 R08: 0000000000000000 R09: 0000000000000000
11:42:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 54)

11:42:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9)

11:42:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208100, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208100, 0x0) (async)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3") (async)

11:42:52 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xd6, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
connect$llc(r1, &(0x7f0000000140)={0x1a, 0x20, 0x6, 0x0, 0xc7, 0x5, @broadcast}, 0x10)
r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3d50, 0x408000)
ioctl$PPPIOCDISCONN(r2, 0x7439)
connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x339, 0x81, 0x0, 0xa5, 0x8c, @link_local}, 0x10)
read$qrtrtun(r0, &(0x7f0000000080)=""/111, 0x6f)

11:42:52 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0) (async)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'mem'}, 0x9) (async)

[ 2300.041023][T23590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2300.041069][T23590] R13: 00007fff802e7a1f R14: 00007f7356d5b300 R15: 0000000000022000
[ 2300.041087][T23590]  </TASK>
11:42:52 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x775c41, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}})

11:42:52 executing program 2:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x80)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x44}], &(0x7f0000000380)='GPL\x00', 0x2, 0x50, &(0x7f0000000300)=""/80, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x8, 0x0, 0x7548}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r1]}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="002d01000000080007000000000000000000", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000011)
pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0))

11:42:52 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x208100, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2300.358823][T23645] FAULT_INJECTION: forcing a failure.
[ 2300.358823][T23645] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2300.372352][T23645] CPU: 1 PID: 23645 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13115-gee3f96b16468-dirty #0
[ 2300.383009][T23645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
[ 2300.383026][T23645] Call Trace:
[ 2300.383033][T23645]  <TASK>
[ 2300.399310][T23645]  dump_stack_lvl+0xda/0x130
11:42:52 executing program 1:
timer_create(0x2, &(0x7f0000000000)={0x0, 0x1d, 0x1, @thr={&(0x7f00000000c0)="eb8f0e6c861304840744e00e308cd82d9a717be67699e47e80c0c576fde26589a50524d2a4ba27383294f4335dc7ec28991f12f6ec1d81489f818cded01943ea102a0e3383c338544b", &(0x7f0000000140)="b44abbff1f95cefd32d0969ec1f9b8971e85b6b75415d78bb00903d66db82acdaf7b00d987783c776ea2a931880c305f85c4028ac9c4083d8be250ec4ec3d8cb3ef3a262e9a16cf5b71e02b37145713637378b8f8f5777b5857dd4d80bf76ba43eab56db3009e8d0e447fdaf61ef21a80b413f4ed59fcf24888056646e40078ff7ec3f5575e444d0e7bcca580d9812436a7038d76de625a7555b7da7a3a95d94b53f762443"}}, &(0x7f0000000200)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000240))
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

11:42:52 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x775c41, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}})
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x775c41, 0x0) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}) (async)

11:42:52 executing program 2:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x80) (async)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1, &(0x7f0000000780)=@raw=[@call={0x85, 0x0, 0x0, 0x44}], &(0x7f0000000380)='GPL\x00', 0x2, 0x50, &(0x7f0000000300)=""/80, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x8, 0x0, 0x7548}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r1]}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0) (async)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010009bd7000fedbdf2501"], 0x24}}, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="002d01000000080007000000000000000000", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000011)
pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x401c5820, &(0x7f00000002c0))

11:42:52 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x470a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xfffffdef) (fail_nth: 55)

11:42:52 executing program 5:
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000048}, 0x44)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x571a81, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xf)

11:42:52 executing program 1:
timer_create(0x2, &(0x7f0000000000)={0x0, 0x1d, 0x1, @thr={&(0x7f00000000c0)="eb8f0e6c861304840744e00e308cd82d9a717be67699e47e80c0c576fde26589a50524d2a4ba27383294f4335dc7ec28991f12f6ec1d81489f818cded01943ea102a0e3383c338544b", &(0x7f0000000140)="b44abbff1f95cefd32d0969ec1f9b8971e85b6b75415d78bb00903d66db82acdaf7b00d987783c776ea2a931880c305f85c4028ac9c4083d8be250ec4ec3d8cb3ef3a262e9a16cf5b71e02b37145713637378b8f8f5777b5857dd4d80bf76ba43eab56db3009e8d0e447fdaf61ef21a80b413f4ed59fcf24888056646e40078ff7ec3f5575e444d0e7bcca580d9812436a7038d76de625a7555b7da7a3a95d94b53f762443"}}, &(0x7f0000000200)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000240)) (async)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x472a83, 0x0)
ioctl$PIO_UNISCRNMAP(r1, 0x401c5820, &(0x7f0000000080)="198d44db457d384638ca8655a3")

[ 2300.403996][T23645]  dump_stack+0x15/0x20
[ 2300.404029][T23645]  should_fail_ex+0x21f/0x230
[ 2300.404056][T23645]  __alloc_pages+0x108/0x340
11:42:52 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x775c41, 0x0) (async)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10000}, @generic={0x0, 0x0, 0x3, 0x8000}]}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x48, &(0x7f0000000800)=""/72, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x0, 0x754c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff]}, 0x80) (async)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}})