8b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:52 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:52 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:52 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:52 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:52 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:52 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:52 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:52 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:52 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:52 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:52 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:52 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:52 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:53 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:53 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:53 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:53 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:53 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:53 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:53 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:53 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:53 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:53 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:53 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:53 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:53 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:54 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:54 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:54 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:54 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:54 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32", 0x8)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:54 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:54 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:54 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:54 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:54 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32", 0x8)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:54 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0), 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:54 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:54 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:54 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

10:28:55 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:28:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

10:28:55 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0), 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:55 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

10:28:55 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:28:55 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32", 0x8)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:55 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:55 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0), 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:55 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:55 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:28:55 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:28:56 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:56 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:56 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:56 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32", 0x8)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:28:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000180)=""/16}, 0x20)

10:28:56 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae", 0x67, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:56 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000180)=""/16}, 0x20)

10:28:56 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:56 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000180)=""/16}, 0x20)

10:28:56 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

10:28:57 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080))
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:28:57 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:57 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:57 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20)

10:28:57 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

10:28:57 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20)

10:28:57 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:57 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:57 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080))
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:28:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), 0x0}, 0x20)

10:28:57 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:57 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:58 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:58 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:58 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:58 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:58 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d073293", 0x37, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:58 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:58 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:58 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:58 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d073293", 0x37, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:58 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:58 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d073293", 0x37, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:58 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:59 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:59 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:59 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:28:59 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:59 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:28:59 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:28:59 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:28:59 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x0)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:28:59 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:29:00 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:29:00 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:00 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:00 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:00 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:00 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x0)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:00 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:29:00 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:00 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:00 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r2, r1, 0x0)

10:29:00 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:00 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:00 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:00 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:01 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x0)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:01 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:01 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:01 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:01 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:01 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:01 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:01 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:01 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:01 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:01 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:02 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:02 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:02 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:02 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:02 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:03 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:03 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:03 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:03 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:03 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:03 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:03 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:03 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:03 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:03 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:03 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:03 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:03 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:04 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:04 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:04 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:04 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:04 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:04 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:04 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:04 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:04 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:04 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:04 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07", 0x35, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:05 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:05 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:05 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:05 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:05 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:05 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07", 0x35, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:05 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:05 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:05 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:05 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:05 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:05 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:05 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:06 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07", 0x35, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:06 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:06 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:06 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:06 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:06 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:06 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:06 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08", 0x50, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:06 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:06 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:06 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:06 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:07 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:07 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:07 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08", 0x50, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:07 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:07 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:07 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)

10:29:07 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08", 0x50, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  797.653687][T27982] devpts: called with bogus options
10:29:07 executing program 4:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000004105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700000000000000ba90a27854bb86020000ff00000000"], 0x80}}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0)

10:29:07 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, 0x0, 0x0)
dup3(r1, r0, 0x0)

10:29:07 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:07 executing program 1:
clone3(&(0x7f0000000340)={0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x50)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)

10:29:07 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, 0x0, 0x0)
dup3(r1, r0, 0x0)

10:29:08 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c", 0x5d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:08 executing program 1:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stau\x00<#\xfbW*\x1f\x02\x94\xe6\xf3\x1dS\xd1\xe5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x93n,e+:G\x1bJ\x7f\xa2\xf6\xe04\x8c\x04\xe5\xf0\xdfK\x1d\xee\xc8;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\x00\x00a.\xfd\x1d\xf5\x86\xa7\xec]\xe8\x04\x00\x00\x00\x9c f\x11\x9ay0U\x10\xae\x0es\x96\xd0\xbf\xa0f\xfb4\xbbB\xc6b\xaa\xbc\x82\x99\xff\xf9\xe1\x82.\xd2\xac\xb1\xa5\xa0\xdf.\xaaO\x03\xa1\xa0j\xaf4\xc4Y\x94\xe3\x90\xfe\x04(dl\x90\x8fCqwc2\xc4\x951\x1e\x8e\xb6|s\xfb\x06+w^\x98N>sr\xcal\x18\x9c\xed\x1dC\x8a4\b\xcc\v\x1e@\xe4x5', 0x2761, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0x7ffffffc})
socket$inet_tcp(0x2, 0x1, 0x0)

10:29:08 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, 0x0, 0x0)
dup3(r1, r0, 0x0)

10:29:08 executing program 4:
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x2bb19afb0fa4f39f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10001}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)
socket(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)

10:29:08 executing program 1:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
tkill(0x0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
dup2(0xffffffffffffffff, r1)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x7ff, 0x8, 0x8, 0x80000000, 0x3d37})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='mem\x00\x00\x00\x00\xa9\xc8<s\x8c\')tU\x19\x9a)S\xa7b\xce\xd8\xde\x95\xf6\xc3\\n\xc1\xa2)o\xee\x97\xdf\xe9\x11\xfdJ\xe8`7iY\x86~\xd8\xecy\xc00.\x90\xfc\xac\xa0\xb8\x1d\x1a\x00\x10\x00\x00\x00\x00\x00\x00\xb5\xc3\xc7w%\x16a~]P\x04\xc7 \xf7\x92\x8b\x8f\x9d&\\\xf9\xa3\x96G<\xd4\x80\x16\xff\x7f\xe7(\x8b\xde9]\xaf\xbc\xb0\r}Ne\xfaX\xb0\x8a\xbd\x1d\xfc\xd4\x91\x95\x00\v\x14a0_\xd9\x1f\xc7\xb5\xc3FS\x16\x03~\xbbc*\xa3\xab`\x06\xf0\xbc\xacJY\xe7\xb2\x8cw\xa4U.\xa4\xe2u\x1d!jVL}#O\t\xf2`\x0e\xe9\xc6*\xf7\xfdUh\x8e\x01\xf1b\xf5;\x8a\x17\x9a\x0fq\x01\x91pSR\x82-H\n\x1fP\xb6*\xc9\xfd\x89\xb5\x7f\x87m\"\xaa\xce\xed\a\xf2\xfd<\x10\xb8\xcf\xfac\xcc\x0f\xd2\xdd\xcd#8\"\x8b\xf2\xccA\v\xdf\xf5\x8d\xa5-\x02\xaa|\xdd\xd0a\x89\xc8,)\xedf\x89x>\a\x13\xbe-\xe5\x86\xd5^\x83\x888aqz\xab\xb7D\x81\xedF\xf4\x00\x00\x00\x00\xb4\xff\xe3\xd7\xfa\xc0A\xb9b\x96i\xea\xd7\xe2,\xfd\x80[\xd7\xf6\xd9\xd2\x85\x8b\x95{\xb8\xaa\x8e\xd5\b\xa6.\xb9\xca\b\'~\xcck y\xef\b\x95\\\xf9\xe6F\xc31\xe4)\xe0\xb1\r\xc7\xa8w\x8aH\xc3\xd7n\xb7\xf8^\x11\a\a,\xcb^e\xcbe\x8a\xa1\x0e\xe6\x81\a\xc0D\xcc<AS\xd0-a\xe59\xfb}\xc6\xee\x87\x81\x9aV\x14\a\xe0\xf6P~zC\xea\x8ci\xac\x1f\xdd\x99\xe3\x90\x92\xcc\xd6\xe2\xfc^\xf3\x8cA\x83\xefg\xafX\xa0${\xf2\x05`GN\xeb\x8b\xe2\xad\xaai\xe6\x11VE\xd8?ul^7b\xcb\x17@\xb9q\r\xd0\xe6LX\xdc\x15T\xc5\xdf\x01\xe0\xc4\xb5f\"\xca\x82\xb7\xb2dX\t\x14-/\x9b\xfb?\x8c\x82\xce\x7fX\xa2O\xee\xb8\x15GD\xdf*\x7f\x13(\xa9l\xbf)$6\xf8?E\xa9h\xe4G\xbc\\\xd0\x13\xaa\xf7\xa5d\xe9\x9bB\x19k*\xff\xcfg\x83,\xa4zx{,\x19m\x97\xc3\xda\xb1O?=\xd0c\"s\x95p\xe5@\xb8\xb3\xfc\x91n \x05\xb4\x9b\xech\xfeM\x8e\xe8\xf5TD\x8b\xd7\x96\xd4\x1d\xe5\x02WW\x91[\xf6\x15\xd5T\x8d<\x18x\'\a\xf9k\x84x0\x16\xe2\xb1\xea;\xc9\xbb\x03/\xdc\x16ST\xe7\nG', 0x275a, 0x0)

[  798.444354][T27994] devpts: called with bogus options
10:29:08 executing program 5:
getpid()
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
accept(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x40000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

10:29:08 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:08 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000), 0x0)
dup3(r1, r0, 0x0)

10:29:08 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c", 0x5d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:08 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
syncfs(0xffffffffffffffff)

[  798.716315][T28051] IPVS: ftp: loaded support on port[0] = 21
10:29:08 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000), 0x0)
dup3(r1, r0, 0x0)

[  799.004375][   T27] audit: type=1326 audit(1575800948.955:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28063 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:09 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000), 0x0)
dup3(r1, r0, 0x0)

10:29:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids\xff\x91ventq\x00\x8c+d..\xb1\x88[\x87\xb8\x8e\x80\xf9\x1cV\xcb\x7f\x96\xfd\xbd\x06\xf1\xc5\x8ap\x00\x9ays7\n\xbc\xb7\\\x16\xedk\xdf\rS>UC\xb0Z\xa7\xd5\xc3\xab\xef\xb6n\x9e\x86\x9c\x1f\xa2\xd6r\x12\xa0\xb4\xb5!\xedA\x81\xa7\xccV\x03\xd1<\x92m\b\xcb\xe8\xa4D p\xf7\x99E\xb8\xbc\x06\x7f1N\xff\x96\x00\xe6rS\xf1\xae\xa0\x03\xa4~\xaf\xae\xbc\\\"?7\xca3Qd\xdd\x1a\xe5\xff\x80\xfe\xd9o\x8f\xd1\xd2\xb8%+\xcb\x12KT\x8d\x9f\x82\xbas\x15\x83\x9e\xf8\xac\x8d\xf4*g\x0efu\xba\xd2;\xdb\xbe\xd3{k\xf8Z\x03>\x8cB\xda\xd4\xe8\x91\x02\xfc\x0ep\x05W\x15\x980E\x16\xfe\xa5\xac8R\x96\xc1\x11\xbf\x81\xed\x8eM\xa8', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
clock_getres(0x0, &(0x7f00000001c0))

10:29:09 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c", 0x5d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:09 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x0, 0x7ff, 0x8, 0x8, 0x80000000, 0x3d37})

10:29:09 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r0, 0x0)

[  799.250873][T28082] devpts: called with bogus options
[  799.258810][T24749] tipc: TX() has been purged, node left!
10:29:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2)
syz_open_procfs(0x0, 0x0)
r1 = shmget(0x2, 0x4000, 0x20, &(0x7f0000701000/0x4000)=nil)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/198)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
dup2(r2, r0)

10:29:09 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000000)='dummy0\x00', 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0)

[  799.418124][T28040] cgroup: fork rejected by pids controller in /syz1
10:29:09 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d6616", 0x64, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:09 executing program 0:
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e0130235de31ebf17ee220718108d6a033ed1cfdbb1a64cc868d5ed8cf3f5b8aee2fd70131bfc4af6e84382e29702a2a7b1fb63646438c8ce7ee3b8fea6578e", "cba28dde33243df05457060f26b3b8712f9e7c4b70daa6dc1b4a9d572ad8acc6"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000200)=""/212)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xb96}}], 0x1, 0x0)

[  799.677687][   T27] audit: type=1326 audit(1575800949.625:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28063 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:09 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stau\x00<#\xfbW*\x1f\x02\x94\xe6\xf3\x1dS\xd1\xe5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x93n,e+:G\x1bJ\x7f\xa2\xf6\xe04\x8c\x04\xe5\xf0\xdfK\x1d\xee\xc8;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\x00\x00a.\xfd\x1d\xf5\x86\xa7\xec]\xe8\x04\x00\x00\x00\x9c f\x11\x9ay0U\x10\xae\x0es\x96\xd0\xbf\xa0f\xfb4\xbbB\xc6b\xaa\xbc\x82\x99\xff\xf9\xe1\x82.\xd2\xac\xb1\xa5\xa0\xdf.\xaaO\x03\xa1\xa0j\xaf4\xc4Y\x94\xe3\x90\xfe\x04(dl\x90\x8fCqwc2\xc4\x951\x1e\x8e\xb6|s\xfb\x06+w^\x98N>sr\xcal\x18\x9c\xed\x1dC\x8a4\b\xcc\v\x1e@\xe4x5', 0x2761, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0x7ffffffc})
socket$inet_tcp(0x2, 0x1, 0x0)

10:29:09 executing program 4:
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000200)={'tunl0\x00', @ifru_flags})
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

10:29:09 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d6616", 0x64, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:09 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETS2(r0, 0x4b66, &(0x7f0000000000))

10:29:10 executing program 0:
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7')
fcntl$setstatus(r0, 0x4, 0x64600)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0)
read(r0, &(0x7f0000000200)=""/17, 0xfffffd37)

[  800.052057][T28093] devpts: called with bogus options
10:29:10 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r0, 0x0)

10:29:10 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000080))
timer_gettime(0x0, 0xffffffffffffffff)

10:29:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x2bb19afb0fa4f39f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10001}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)

10:29:10 executing program 0:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

10:29:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)

10:29:10 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
dup(0xffffffffffffffff)

10:29:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0xd8}]}, &(0x7f00000003c0)='6PL\x00\x11\xbf\x1e\xa2\xec\xfb\x1e\xc96\x96F\x97\x04\x7fguD=wI;\xf4\x95\x0e\xdal\x98\x8e\xee\xdat\x02`\"\xe8\x84<\x810 \xd4\xf2\x92\x81L\xd4\xb9\xfbgB_\x13\xfd\xfd\x89\x10\xec@\xf5\xd7\x0e\x1b\xceG\xfd\xb3D\x80l\\\xe4Dl\xc3\r\xadC\x1d\xf8[\x16{\"\x8c\xf9DcQ\x9e\x13\x89\xffJ\x1e\x9e\xa3\xbd<\x0e9\xf6\xbb\xad\"E\xe7F\xe5\xd5%\x92\x8aa\v\xfb\x18\x1fY\xe3&\x95\xa6\xc3\x81_R}<\xa5\t\xe7L\xe3\x7f\xad:\xe7NO\x8d\xef\xc8\x1a\xb6a\xc3\xb39_{\xe0\x92\x93\x11F@-s\"w\x810\b\xa6\x1fF\xe4\xec%\xedR\x04\x01\x9a\xe1T(\x0f\xd0\xaf\xa3\x94\xd4\xf1v\xfa\xc0\x11l\xb5\x8eB\x82\f\x04\x9d}\x062\xad\xdd\xedt\xd1\x02\xc6rM\\\x8d\xc8!\x81\x9e\xe5\xd3\xfa\xb3\xf7\xe5\xafa\xd7\xa0.u\xc2{\x8d\x17\xf7\x10\x00\xa7\xbd\x84\xd5E\x1ei\x92[k=j\x9f\xcc\xa73\x9f\xca\xa8\xbcc\x8e\xb9\xb5\xdf\xdd\xbf\x8b\xd9\xeb\xc2\xbd\xf8R\x0f\x00\x00\x00\x00', 0x100000000004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

10:29:10 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r0, 0x0)

10:29:10 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d6616", 0x64, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  800.459773][   T27] audit: type=1326 audit(1575800950.415:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28253 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:10 executing program 4:
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00\x02\x17\x87:\x1d\xe3\xa1\xac\xfc:)[\xc5\x0f`\x1eNu\xe2\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-\x04\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7')
fcntl$setstatus(r0, 0x4, 0x64600)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0)
read(r0, &(0x7f0000000200)=""/17, 0xfffffd37)

10:29:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
socket$alg(0x26, 0x5, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x20002200b, 0x2, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))

[  800.625258][   T27] audit: type=1326 audit(1575800950.465:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28258 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:10 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae", 0x67, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:10 executing program 4:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x48002)
writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000300)="b9", 0x1}], 0x1)

10:29:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
timer_gettime(0x0, 0x0)

[  801.092557][   T27] audit: type=1326 audit(1575800951.045:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28294 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:11 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae", 0x67, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  801.210590][   T27] audit: type=1326 audit(1575800951.165:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28253 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="440f20c0663503000000440f22c0baf80cf30f01bf9e4766efbafc0c66ed2e0f210e0f01c20f41f7660fc775d80f0094d1bbba4100b035ee440f20c066f922350d000000000022c0baa1000f20d86635200000000f22d866ef", 0x59}], 0x390, 0x0, 0x0, 0xfffffffffffffeae)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
io_submit(0x0, 0x1, &(0x7f0000001700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  801.292635][   T27] audit: type=1326 audit(1575800951.245:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28258 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:11 executing program 5:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
dup3(r1, r0, 0x0)

10:29:11 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, 0xffffffffffffffff, 0x0)

10:29:11 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae", 0x67, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:11 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88682, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stau\x00<#\xfbW*\x1f\x02\x94\xe6\xf3\x1dS\xd1\xe5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x93n,e+:G\x1bJ\x7f\xa2\xf6\xe04\x8c\x04\xe5\xf0\xdfK\x1d\xee\xc8;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\x00\x00a.\xfd\x1d\xf5\x86\xa7\xec]\xe8\x04\x00\x00\x00\x9c f\x11\x9ay0U\x10\xae\x0es\x96\xd0\xbf\xa0f\xfb4\xbbB\xc6b\xaa\xbc\x82\x99\xff\xf9\xe1\x82.\xd2\xac\xb1\xa5\xa0\xdf.\xaaO\x03\xa1\xa0j\xaf4\xc4Y\x94\xe3\x90\xfe\x04(dl\x90\x8fCqwc2\xc4\x951\x1e\x8e\xb6|s\xfb\x06+w^\x98N>sr\xcal\x18\x9c\xed\x1dC\x8a4\b\xcc\v\x1e@\xe4x5', 0x2761, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x0, 0x7ffffffc})
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

10:29:11 executing program 1:
syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @local, [{}], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @rand_addr, {[@rr={0x7, 0x0, 0x0, [@local]}]}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0)

10:29:11 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x4b4b, 0x0)

10:29:11 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x1850c6, 0x0)
r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  801.877814][   T27] audit: type=1326 audit(1575800951.825:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28294 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:11 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setresuid(0x0, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000))
syz_open_procfs(0x0, 0x0)
inotify_init1(0x800)
getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340))
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001000)=@get={0x1, &(0x7f0000000000)=""/4096})

10:29:11 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:11 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246)

10:29:12 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = semget$private(0x0, 0xd, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x200])
semop(r2, &(0x7f0000000100), 0x2d)
semctl$IPC_RMID(r2, 0x0, 0x0)

10:29:12 executing program 5:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000670000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000800"/240], 0x138}}, 0x0)
semctl$SEM_INFO(0x0, 0x5ce66ecf4009d793, 0x13, &(0x7f0000000380)=""/4096)
semctl$IPC_RMID(0x0, 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000001380)='security.evm\x00', &(0x7f00000013c0)=@md5={0x1, "b50db837aa307d11753ceb8c8497e503"}, 0x11, 0x3)

10:29:12 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = memfd_create(&(0x7f0000000000)='dummy0\x00', 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [], {}, [{}]}, 0x2c, 0x0)
fgetxattr(r2, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000001680)=""/158, 0x1da)

[  802.229371][T28355] devpts: called with bogus options
10:29:12 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, 0xffffffffffffffff, 0x0)

10:29:12 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, 0x0, 0x219, 0x0, 0x0, 0xffffffffffffff91)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10:29:12 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)

10:29:12 executing program 1:
r0 = socket(0x11, 0x3, 0x81)
bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_aout(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="1c7de2a1e2a8d510000000000000000088caffff000000000021000000000000"], 0xfdef)

[  802.472208][   T27] audit: type=1326 audit(1575800952.425:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28366 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:12 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:12 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffc}]})
removexattr(0x0, 0x0)

10:29:12 executing program 1:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)

10:29:12 executing program 4:

10:29:12 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:12 executing program 4:

[  802.951883][   T27] audit: type=1326 audit(1575800952.905:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28388 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0xffff0000
10:29:13 executing program 1:

10:29:13 executing program 4:

10:29:13 executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, 0xffffffffffffffff, 0x0)

10:29:13 executing program 4:

10:29:13 executing program 1:

10:29:13 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:13 executing program 0:

10:29:13 executing program 5:

10:29:13 executing program 4:

10:29:13 executing program 0:

10:29:13 executing program 1:

10:29:13 executing program 2:

10:29:13 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:13 executing program 1:

10:29:13 executing program 2:

10:29:13 executing program 0:

10:29:13 executing program 4:

10:29:14 executing program 5:

10:29:14 executing program 2:

10:29:14 executing program 4:

10:29:14 executing program 0:

10:29:14 executing program 1:

10:29:14 executing program 5:

10:29:14 executing program 2:

10:29:14 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:14 executing program 1:

10:29:14 executing program 4:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, 0x0)

10:29:14 executing program 0:

10:29:14 executing program 5:

10:29:14 executing program 2:

10:29:14 executing program 0:

10:29:14 executing program 1:

10:29:14 executing program 5:

10:29:14 executing program 2:

10:29:14 executing program 1:

10:29:14 executing program 4:

10:29:14 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:14 executing program 0:

10:29:14 executing program 1:

10:29:14 executing program 5:

10:29:14 executing program 2:

10:29:14 executing program 4:

10:29:15 executing program 0:

10:29:15 executing program 5:

10:29:15 executing program 1:

10:29:15 executing program 2:

10:29:15 executing program 4:

10:29:15 executing program 5:

10:29:15 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x0, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:15 executing program 0:

10:29:15 executing program 2:

10:29:15 executing program 1:

10:29:15 executing program 4:

10:29:15 executing program 5:

10:29:15 executing program 1:

10:29:15 executing program 0:

10:29:15 executing program 2:

10:29:15 executing program 5:

10:29:15 executing program 4:

10:29:15 executing program 1:

10:29:15 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x0, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:15 executing program 0:

10:29:15 executing program 4:

10:29:15 executing program 2:

10:29:15 executing program 5:

10:29:16 executing program 1:

10:29:16 executing program 4:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/84], 0x3}}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_procfs(0x0, 0x0)
readv(r4, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
readv(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf0d)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001400)=ANY=[@ANYBLOB="050000000054c0f068572fd9ec12cfbcfa10e5723f0a0000010000000000000008b8ad82a9ad71dc99854507267f0000090000000000000000000000000000000000000000000000001000000072c2d2002fbd8f1d309bbdebaac0cff68fe9"])
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00')
preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0)
socket(0x0, 0x0, 0x0)

10:29:16 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]})
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)

10:29:16 executing program 5:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x2bb19afb0fa4f39f, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x10001}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)

10:29:16 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
creat(0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)

10:29:16 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x0, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:16 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:16 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x0, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:16 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:16 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:16 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:16 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:17 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x0)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:17 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:17 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:17 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:17 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:17 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:17 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x0)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:17 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd", 0x69, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:17 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
syz_open_pts(0xffffffffffffffff, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:17 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:18 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
ftruncate(r4, 0x800484007ffc)

10:29:18 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:18 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x0)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:18 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

[  808.377674][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  808.377689][   T27] audit: type=1804 audit(1575800958.325:85): pid=28639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/771/file0/bus" dev="ramfs" ino=128085 res=1
10:29:18 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:18 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:18 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x0, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:18 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:18 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:18 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:19 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x0, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:19 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:19 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:19 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:19 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x0, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:19 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:19 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:19 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:19 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x0, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  809.881057][   T27] audit: type=1804 audit(1575800959.835:86): pid=28699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/954/file0/bus" dev="ramfs" ino=128219 res=1
10:29:19 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:19 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
ftruncate(r6, 0x800484007ffc)

[  810.080140][   T27] audit: type=1804 audit(1575800960.035:87): pid=28732 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/801/file0/bus" dev="ramfs" ino=128240 res=1
10:29:20 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:20 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x0, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:20 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  810.356244][   T27] audit: type=1804 audit(1575800960.305:88): pid=28756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/774/file0/bus" dev="ramfs" ino=128272 res=1
10:29:20 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:20 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:20 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:20 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x0, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  810.939735][   T27] audit: type=1804 audit(1575800960.885:89): pid=28859 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/802/file0/bus" dev="ramfs" ino=128314 res=1
[  810.986961][   T27] audit: type=1804 audit(1575800960.895:90): pid=28849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/770/file0/bus" dev="ramfs" ino=127764 res=1
10:29:21 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:21 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
syz_open_pts(r4, 0x1)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:21 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:21 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:21 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:21 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  811.636405][   T27] audit: type=1804 audit(1575800961.585:91): pid=28865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/771/file0/bus" dev="ramfs" ino=128382 res=1
10:29:21 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:21 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:21 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:21 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:21 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  811.880227][   T27] audit: type=1804 audit(1575800961.835:92): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/803/file0/bus" dev="ramfs" ino=127857 res=1
10:29:21 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:22 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:22 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  812.528181][   T27] audit: type=1804 audit(1575800962.475:93): pid=28913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/804/file0/bus" dev="ramfs" ino=128470 res=1
10:29:22 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:22 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, 0x0)
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  812.611041][   T27] audit: type=1804 audit(1575800962.565:94): pid=28898 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/777/file0/bus" dev="ramfs" ino=127930 res=1
10:29:22 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:22 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:22 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:23 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:23 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, 0x0)
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:23 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:23 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, 0x0)
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:23 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:23 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:23 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  813.565241][   T27] audit: type=1804 audit(1575800963.515:95): pid=28954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/827/file0/bus" dev="ramfs" ino=129045 res=1
10:29:23 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:23 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  813.904540][   T27] audit: type=1804 audit(1575800963.855:96): pid=29072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/960/file0/bus" dev="ramfs" ino=128622 res=1
10:29:23 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:24 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:24 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:24 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:24 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:24 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  814.447174][   T27] audit: type=1804 audit(1575800964.395:97): pid=29096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/961/file0/bus" dev="ramfs" ino=128663 res=1
10:29:24 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(0xffffffffffffffff, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:24 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:24 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:24 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  814.870596][   T27] audit: type=1804 audit(1575800964.825:98): pid=29090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/807/file0/bus" dev="ramfs" ino=129188 res=1
10:29:24 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:25 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:25 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:25 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:25 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:25 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:25 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:25 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:25 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  815.790369][   T27] audit: type=1804 audit(1575800965.745:99): pid=29128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/963/file0/bus" dev="ramfs" ino=128756 res=1
10:29:25 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:26 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:26 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:26 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:26 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:26 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:26 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:26 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:26 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:27 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:27 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:27 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:27 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:27 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:27 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:27 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(0x0)
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:27 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

[  817.774096][   T27] audit: type=1804 audit(1575800967.725:100): pid=29300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/811/file0/bus" dev="ramfs" ino=128959 res=1
10:29:27 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

10:29:27 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:28 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:28 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
ftruncate(r7, 0x800484007ffc)

10:29:28 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
ftruncate(r7, 0x800484007ffc)

10:29:28 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

[  818.495702][   T27] audit: type=1804 audit(1575800968.445:101): pid=29327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/812/file0/bus" dev="ramfs" ino=130057 res=1
10:29:28 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:28 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:28 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:28 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
ftruncate(r7, 0x800484007ffc)

10:29:29 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

10:29:29 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
ftruncate(r7, 0x800484007ffc)

10:29:29 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:29 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
dup3(0xffffffffffffffff, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  819.307677][   T27] audit: type=1804 audit(1575800969.255:102): pid=29356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/813/file0/bus" dev="ramfs" ino=129625 res=1
10:29:29 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

10:29:29 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

10:29:29 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={0x0, 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  819.963128][   T27] audit: type=1804 audit(1575800969.915:103): pid=29384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/836/file0/bus" dev="ramfs" ino=129688 res=1
10:29:30 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:30 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:30 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:30 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={0x0, 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:30 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)

10:29:30 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

[  820.607769][   T27] audit: type=1804 audit(1575800970.555:104): pid=29404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/788/file0/bus" dev="ramfs" ino=130259 res=1
10:29:30 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={0x0, 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:30 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:30 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  820.719453][   T27] audit: type=1804 audit(1575800970.635:105): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/837/file0/bus" dev="ramfs" ino=129748 res=1
10:29:30 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:30 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:31 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:31 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:31 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:31 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:31 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  821.556005][   T27] audit: type=1804 audit(1575800971.505:106): pid=29437 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/838/file0/bus" dev="ramfs" ino=129810 res=1
10:29:31 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  821.701449][   T27] audit: type=1804 audit(1575800971.555:107): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/816/file0/bus" dev="ramfs" ino=130341 res=1
10:29:31 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  821.859097][   T27] audit: type=1804 audit(1575800971.805:108): pid=29452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/971/file0/bus" dev="ramfs" ino=130361 res=1
10:29:32 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:32 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

10:29:32 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00'}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:32 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

[  822.358033][   T27] audit: type=1804 audit(1575800972.305:109): pid=29464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/newroot/839/file0/bus" dev="ramfs" ino=129901 res=1
10:29:32 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:32 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

[  822.585038][   T27] audit: type=1804 audit(1575800972.535:110): pid=29479 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/817/file0/bus" dev="ramfs" ino=129914 res=1
10:29:32 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

[  822.706392][   T27] audit: type=1804 audit(1575800972.655:111): pid=29480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/791/file0/bus" dev="ramfs" ino=129930 res=1
10:29:32 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:32 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:32 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:29:33 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:33 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:33 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(0x0, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:29:33 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:33 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:33 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:33 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:33 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:34 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:34 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:34 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:34 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:34 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:34 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:34 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

10:29:34 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:34 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040), &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:29:34 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

10:29:35 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)

10:29:35 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040), &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

10:29:35 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  825.461571][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  825.461583][   T27] audit: type=1804 audit(1575800975.415:115): pid=29588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/976/file0/bus" dev="ramfs" ino=130719 res=1
10:29:35 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

10:29:35 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

[  825.630953][   T27] audit: type=1804 audit(1575800975.565:116): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/795/file0/bus" dev="ramfs" ino=131204 res=1
10:29:35 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:35 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)

10:29:35 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040), &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc))
r3 = syz_open_pts(r2, 0x1)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3)
dup3(r3, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
ftruncate(r5, 0x800484007ffc)

[  825.973961][   T27] audit: type=1804 audit(1575800975.925:117): pid=29601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/790/file0/bus" dev="ramfs" ino=130750 res=1
10:29:36 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

[  826.203557][   T27] audit: type=1804 audit(1575800976.155:118): pid=29624 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/977/file0/bus" dev="ramfs" ino=130780 res=1
[  826.242347][   T27] audit: type=1804 audit(1575800976.165:119): pid=29625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/796/file0/bus" dev="ramfs" ino=131309 res=1
10:29:36 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)

10:29:36 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:36 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:36 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:36 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)

[  826.534793][   T27] audit: type=1804 audit(1575800976.485:120): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/791/file0/bus" dev="ramfs" ino=131323 res=1
10:29:36 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:36 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:36 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:37 executing program 2:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

10:29:37 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  827.086057][   T27] audit: type=1804 audit(1575800977.035:121): pid=29646 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/797/file0/bus" dev="ramfs" ino=131379 res=1
10:29:37 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, 0x0)
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:37 executing program 4:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

[  827.309825][   T27] audit: type=1804 audit(1575800977.265:122): pid=29669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/newroot/792/file0/bus" dev="ramfs" ino=131414 res=1
10:29:37 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

[  827.544519][   T27] audit: type=1804 audit(1575800977.485:123): pid=29666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/979/file0/bus" dev="ramfs" ino=130888 res=1
10:29:37 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100))
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d)
getpgrp(0x0)
capget(0x0, 0x0)
getpgid(0x0)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=ANY=[], 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
gettid()
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
writev(0xffffffffffffffff, 0x0, 0xffffffb9)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x2b5)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010100"/20, @ANYRES32=0x0, @ANYBLOB="00000000108900001400140076657468315f746f5f6873720000000008001b00000000009c1149da00f53964bf16ec5976e110c191568578766f941c087875ad9f46530d4e62711858ff280e2297299c4758f989c068daaa0231bb18eeec59b07d7ec89d87d79e1c725dd39a64b52fb068ed160e8a2e2ef92fe0d05c5fd2914399514825edd15edda61634f7159f52f75e"], 0x3c}}, 0x0)

10:29:37 executing program 2 (fault-call:8 fault-nth:0):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:37 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:37 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  827.856904][T29697] FAULT_INJECTION: forcing a failure.
[  827.856904][T29697] name failslab, interval 1, probability 0, space 0, times 1
[  827.950584][T29697] CPU: 0 PID: 29697 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  827.958959][T29697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  827.969969][T29697] Call Trace:
[  827.973383][T29697]  dump_stack+0x197/0x210
[  827.977783][T29697]  should_fail.cold+0xa/0x15
[  827.982394][T29697]  ? fault_create_debugfs_attr+0x180/0x180
[  827.988253][T29697]  ? ___might_sleep+0x163/0x2c0
[  827.993170][T29697]  __should_failslab+0x121/0x190
[  827.998241][T29697]  should_failslab+0x9/0x14
[  828.003008][T29697]  __kmalloc+0x2e0/0x770
[  828.007299][T29697]  ? mutex_trylock+0x264/0x2f0
[  828.012101][T29697]  ? tty_write_lock+0x23/0x90
[  828.016782][T29697]  ? tty_write+0x58e/0x7f0
[  828.021207][T29697]  tty_write+0x58e/0x7f0
[  828.025531][T29697]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  828.025822][T29694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  828.032068][T29697]  ? n_tty_read+0x1bf0/0x1bf0
[  828.032124][T29697]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  828.032165][T29697]  __vfs_write+0x8a/0x110
[  828.032182][T29697]  ? put_tty_driver+0x20/0x20
[  828.058367][T29697]  vfs_write+0x268/0x5d0
[  828.062620][T29697]  ksys_write+0x14f/0x290
[  828.066959][T29697]  ? __ia32_sys_read+0xb0/0xb0
[  828.071764][T29697]  ? do_syscall_64+0x26/0x790
[  828.076444][T29697]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.082529][T29697]  ? do_syscall_64+0x26/0x790
[  828.087215][T29697]  __x64_sys_write+0x73/0xb0
[  828.091809][T29697]  do_syscall_64+0xfa/0x790
[  828.096317][T29697]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.102212][T29697] RIP: 0033:0x45a6f9
[  828.106109][T29697] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  828.125716][T29697] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  828.134230][T29697] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  828.142218][T29697] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  828.150223][T29697] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  828.158202][T29697] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  828.166179][T29697] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
[  828.174681][   T27] audit: type=1804 audit(1575800977.905:124): pid=29678 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/newroot/798/file0/bus" dev="ramfs" ino=130918 res=1
10:29:38 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
fcntl$setstatus(r7, 0x4, 0x102800)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  828.188533][T29694] device batadv0 left promiscuous mode
10:29:38 executing program 4 (fault-call:4 fault-nth:0):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

[  828.276953][T29694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
10:29:38 executing program 1 (fault-call:28 fault-nth:0):
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

10:29:38 executing program 2 (fault-call:8 fault-nth:1):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

[  828.472383][T29694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
10:29:38 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  828.592362][T29711] FAULT_INJECTION: forcing a failure.
[  828.592362][T29711] name failslab, interval 1, probability 0, space 0, times 0
[  828.678358][T29711] CPU: 0 PID: 29711 Comm: syz-executor.4 Not tainted 5.4.0-syzkaller #0
[  828.686782][T29711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  828.696853][T29711] Call Trace:
[  828.700168][T29711]  dump_stack+0x197/0x210
[  828.704521][T29711]  should_fail.cold+0xa/0x15
[  828.709136][T29711]  ? fault_create_debugfs_attr+0x180/0x180
[  828.714960][T29711]  ? ___might_sleep+0x163/0x2c0
[  828.716287][T29721] FAULT_INJECTION: forcing a failure.
[  828.716287][T29721] name failslab, interval 1, probability 0, space 0, times 0
[  828.719816][T29711]  __should_failslab+0x121/0x190
[  828.719832][T29711]  should_failslab+0x9/0x14
[  828.719843][T29711]  __kmalloc_track_caller+0x2dc/0x760
[  828.719855][T29711]  ? lock_downgrade+0x920/0x920
[  828.719924][T29711]  ? map_lookup_elem+0x3bb/0xf70
[  828.719961][T29711]  memdup_user+0x26/0xd0
[  828.719974][T29711]  map_lookup_elem+0x3bb/0xf70
[  828.719991][T29711]  __do_sys_bpf+0x8a4/0x3810
[  828.720005][T29711]  ? bpf_prog_load+0x18f0/0x18f0
[  828.720037][T29711]  ? __kasan_check_write+0x14/0x20
[  828.720053][T29711]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  828.720068][T29711]  ? rcu_read_lock_bh_held+0xb0/0xb0
[  828.720083][T29711]  ? wait_for_completion+0x440/0x440
[  828.720101][T29711]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  828.720121][T29711]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  828.720135][T29711]  ? do_syscall_64+0x26/0x790
[  828.720148][T29711]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.720161][T29711]  ? do_syscall_64+0x26/0x790
[  828.720176][T29711]  __x64_sys_bpf+0x73/0xb0
[  828.720189][T29711]  do_syscall_64+0xfa/0x790
[  828.720201][T29711]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.720210][T29711] RIP: 0033:0x45a6f9
[  828.720223][T29711] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  828.720229][T29711] RSP: 002b:00007fa6f97a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  828.720240][T29711] RAX: ffffffffffffffda RBX: 00007fa6f97a9c90 RCX: 000000000045a6f9
[  828.720246][T29711] RDX: 0000000000000018 RSI: 0000000020000600 RDI: 0000000000000001
[  828.720252][T29711] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  828.720258][T29711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6f97aa6d4
[  828.720266][T29711] R13: 00000000004c0d1d R14: 00000000004d48d8 R15: 0000000000000005
[  828.833983][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  828.839651][T29721] CPU: 1 PID: 29721 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
10:29:38 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:38 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000100))
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x26d)
getpgrp(0x0)
capget(0x0, 0x0)
getpgid(0x0)
memfd_create(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040))
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=ANY=[], 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
gettid()
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
writev(0xffffffffffffffff, 0x0, 0xffffffb9)
kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x2b5)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010100"/20, @ANYRES32=0x0, @ANYBLOB="00000000108900001400140076657468315f746f5f6873720000000008001b00000000009c1149da00f53964bf16ec5976e110c191568578766f941c087875ad9f46530d4e62711858ff280e2297299c4758f989c068daaa0231bb18eeec59b07d7ec89d87d79e1c725dd39a64b52fb068ed160e8a2e2ef92fe0d05c5fd2914399514825edd15edda61634f7159f52f75e"], 0x3c}}, 0x0)

10:29:38 executing program 4 (fault-call:4 fault-nth:1):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

[  828.839659][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  828.839663][T29721] Call Trace:
[  828.839686][T29721]  dump_stack+0x197/0x210
[  828.839706][T29721]  should_fail.cold+0xa/0x15
[  828.839723][T29721]  ? fault_create_debugfs_attr+0x180/0x180
[  828.839740][T29721]  ? __kasan_check_read+0x11/0x20
[  828.839755][T29721]  __should_failslab+0x121/0x190
[  828.839770][T29721]  should_failslab+0x9/0x14
[  828.839781][T29721]  __kmalloc+0x71/0x770
[  828.839796][T29721]  ? mark_held_locks+0xf0/0xf0
[  828.839813][T29721]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  828.839829][T29721]  __tty_buffer_request_room+0x1fb/0x5c0
[  828.839847][T29721]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  828.839863][T29721]  pty_write+0x133/0x200
[  828.839877][T29721]  n_tty_write+0x40e/0x1080
[  828.839896][T29721]  ? n_tty_read+0x1bf0/0x1bf0
[  828.839911][T29721]  ? prepare_to_wait_exclusive+0x320/0x320
[  828.839927][T29721]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  828.839942][T29721]  ? _copy_from_user+0x12c/0x1a0
[  828.839954][T29721]  tty_write+0x496/0x7f0
[  828.839968][T29721]  ? n_tty_read+0x1bf0/0x1bf0
[  828.839984][T29721]  __vfs_write+0x8a/0x110
[  828.839995][T29721]  ? put_tty_driver+0x20/0x20
[  828.840025][T29721]  vfs_write+0x268/0x5d0
[  828.840038][T29721]  ksys_write+0x14f/0x290
[  828.840050][T29721]  ? __ia32_sys_read+0xb0/0xb0
[  828.840065][T29721]  ? do_syscall_64+0x26/0x790
[  828.840078][T29721]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840090][T29721]  ? do_syscall_64+0x26/0x790
[  828.840103][T29721]  __x64_sys_write+0x73/0xb0
[  828.840116][T29721]  do_syscall_64+0xfa/0x790
[  828.840130][T29721]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840140][T29721] RIP: 0033:0x45a6f9
[  828.840155][T29721] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  828.840162][T29721] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  828.840174][T29721] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
10:29:39 executing program 2 (fault-call:8 fault-nth:2):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

[  828.840181][T29721] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  828.840187][T29721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  828.840195][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  828.840201][T29721] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
[  828.840225][    C1] 
[  828.840230][    C1] ======================================================
[  828.840235][    C1] WARNING: possible circular locking dependency detected
[  828.840239][    C1] 5.4.0-syzkaller #0 Not tainted
[  828.840244][    C1] ------------------------------------------------------
[  828.840249][    C1] syz-executor.2/29721 is trying to acquire lock:
[  828.840263][    C1] ffffffff8999aa80 (console_owner){-.-.}, at: vprintk_emit+0x3fd/0x700
[  828.840274][    C1] 
[  828.840277][    C1] but task is already holding lock:
[  828.840279][    C1] ffff888095515940 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200
[  828.840290][    C1] 
[  828.840295][    C1] which lock already depends on the new lock.
[  828.840297][    C1] 
[  828.840299][    C1] 
[  828.840303][    C1] the existing dependency chain (in reverse order) is:
[  828.840305][    C1] 
[  828.840307][    C1] -> #2 (&(&port->lock)->rlock){-.-.}:
[  828.840320][    C1]        _raw_spin_lock_irqsave+0x95/0xcd
[  828.840324][    C1]        tty_port_tty_get+0x24/0x100
[  828.840327][    C1]        tty_port_default_wakeup+0x16/0x40
[  828.840331][    C1]        tty_port_tty_wakeup+0x57/0x70
[  828.840335][    C1]        uart_write_wakeup+0x46/0x70
[  828.840339][    C1]        serial8250_tx_chars+0x495/0xaf0
[  828.840344][    C1]        serial8250_handle_irq.part.0+0x2a2/0x330
[  828.840348][    C1]        serial8250_default_handle_irq+0xc0/0x150
[  828.840351][    C1]        serial8250_interrupt+0xf1/0x1a0
[  828.840356][    C1]        __handle_irq_event_percpu+0x15d/0x970
[  828.840359][    C1]        handle_irq_event_percpu+0x74/0x160
[  828.840363][    C1]        handle_irq_event+0xa7/0x134
[  828.840366][    C1]        handle_edge_irq+0x25e/0x8d0
[  828.840370][    C1]        do_IRQ+0xde/0x280
[  828.840373][    C1]        ret_from_intr+0x0/0x36
[  828.840377][    C1]        _raw_spin_unlock_irqrestore+0x90/0xe0
[  828.840380][    C1]        uart_write+0x3b6/0x6f0
[  828.840383][    C1]        n_tty_write+0x40e/0x1080
[  828.840387][    C1]        tty_write+0x496/0x7f0
[  828.840390][    C1]        redirected_tty_write+0xb2/0xc0
[  828.840393][    C1]        __vfs_write+0x8a/0x110
[  828.840397][    C1]        vfs_write+0x268/0x5d0
[  828.840400][    C1]        ksys_write+0x14f/0x290
[  828.840403][    C1]        __x64_sys_write+0x73/0xb0
[  828.840407][    C1]        do_syscall_64+0xfa/0x790
[  828.840411][    C1]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840413][    C1] 
[  828.840415][    C1] -> #1 (&port_lock_key){-.-.}:
[  828.840427][    C1]        _raw_spin_lock_irqsave+0x95/0xcd
[  828.840431][    C1]        serial8250_console_write+0x253/0x9a0
[  828.840435][    C1]        univ8250_console_write+0x5f/0x70
[  828.840438][    C1]        console_unlock+0xb7a/0xf00
[  828.840442][    C1]        vprintk_emit+0x2a0/0x700
[  828.840445][    C1]        vprintk_default+0x28/0x30
[  828.840448][    C1]        vprintk_func+0x7e/0x189
[  828.840452][    C1]        printk+0xba/0xed
[  828.840455][    C1]        register_console+0x745/0xb50
[  828.840459][    C1]        univ8250_console_init+0x3e/0x4b
[  828.840462][    C1]        console_init+0x461/0x67b
[  828.840466][    C1]        start_kernel+0x653/0x943
[  828.840469][    C1]        x86_64_start_reservations+0x29/0x2b
[  828.840473][    C1]        x86_64_start_kernel+0x77/0x7b
[  828.840477][    C1]        secondary_startup_64+0xa4/0xb0
[  828.840479][    C1] 
[  828.840481][    C1] -> #0 (console_owner){-.-.}:
[  828.840493][    C1]        __lock_acquire+0x2596/0x4a00
[  828.840496][    C1]        lock_acquire+0x190/0x410
[  828.840500][    C1]        vprintk_emit+0x43a/0x700
[  828.840503][    C1]        vprintk_default+0x28/0x30
[  828.840506][    C1]        vprintk_func+0x7e/0x189
[  828.840509][    C1]        printk+0xba/0xed
[  828.840513][    C1]        should_fail+0x708/0x852
[  828.840522][    C1]        __should_failslab+0x121/0x190
[  828.840526][    C1]        should_failslab+0x9/0x14
[  828.840529][    C1]        __kmalloc+0x71/0x770
[  828.840533][    C1]        __tty_buffer_request_room+0x1fb/0x5c0
[  828.840537][    C1]        tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  828.840541][    C1]        pty_write+0x133/0x200
[  828.840544][    C1]        n_tty_write+0x40e/0x1080
[  828.840548][    C1]        tty_write+0x496/0x7f0
[  828.840551][    C1]        __vfs_write+0x8a/0x110
[  828.840554][    C1]        vfs_write+0x268/0x5d0
[  828.840557][    C1]        ksys_write+0x14f/0x290
[  828.840561][    C1]        __x64_sys_write+0x73/0xb0
[  828.840564][    C1]        do_syscall_64+0xfa/0x790
[  828.840568][    C1]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840570][    C1] 
[  828.840574][    C1] other info that might help us debug this:
[  828.840576][    C1] 
[  828.840579][    C1] Chain exists of:
[  828.840581][    C1]   console_owner --> &port_lock_key --> &(&port->lock)->rlock
[  828.840597][    C1] 
[  828.840600][    C1]  Possible unsafe locking scenario:
[  828.840602][    C1] 
[  828.840606][    C1]        CPU0                    CPU1
[  828.840609][    C1]        ----                    ----
[  828.840612][    C1]   lock(&(&port->lock)->rlock);
[  828.840620][    C1]                                lock(&port_lock_key);
[  828.840629][    C1]                                lock(&(&port->lock)->rlock);
[  828.840636][    C1]   lock(console_owner);
[  828.840643][    C1] 
[  828.840645][    C1]  *** DEADLOCK ***
[  828.840647][    C1] 
[  828.840651][    C1] 5 locks held by syz-executor.2/29721:
[  828.840653][    C1]  #0: ffff88809f3b7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  828.840668][    C1]  #1: ffff88809f3b7118 (&tty->atomic_write_lock){+.+.}, at: tty_write_lock+0x23/0x90
[  828.840683][    C1]  #2: ffff88809f3b72a0 (&o_tty->termios_rwsem/1){++++}, at: n_tty_write+0x1b5/0x1080
[  828.840699][    C1]  #3: ffffc9000a313360 (&ldata->output_lock){+.+.}, at: n_tty_write+0x548/0x1080
[  828.840714][    C1]  #4: ffff888095515940 (&(&port->lock)->rlock){-.-.}, at: pty_write+0xff/0x200
[  828.840729][    C1] 
[  828.840731][    C1] stack backtrace:
[  828.840736][    C1] CPU: 1 PID: 29721 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  828.840743][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  828.840745][    C1] Call Trace:
[  828.840748][    C1]  dump_stack+0x197/0x210
[  828.840752][    C1]  print_circular_bug.isra.0.cold+0x163/0x172
[  828.840755][    C1]  check_noncircular+0x32e/0x3e0
[  828.840759][    C1]  ? print_circular_bug.isra.0+0x230/0x230
[  828.840763][    C1]  ? print_circular_bug.isra.0+0x230/0x230
[  828.840766][    C1]  ? alloc_list_entry+0xc0/0xc0
[  828.840771][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  828.840774][    C1]  ? find_first_zero_bit+0x9a/0xc0
[  828.840777][    C1]  __lock_acquire+0x2596/0x4a00
[  828.840781][    C1]  ? mark_held_locks+0xf0/0xf0
[  828.840784][    C1]  lock_acquire+0x190/0x410
[  828.840787][    C1]  ? vprintk_emit+0x3fd/0x700
[  828.840790][    C1]  vprintk_emit+0x43a/0x700
[  828.840794][    C1]  ? vprintk_emit+0x3fd/0x700
[  828.840797][    C1]  vprintk_default+0x28/0x30
[  828.840800][    C1]  vprintk_func+0x7e/0x189
[  828.840803][    C1]  printk+0xba/0xed
[  828.840806][    C1]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[  828.840810][    C1]  ? __lock_acquire+0x16f2/0x4a00
[  828.840813][    C1]  ? kernel_text_address+0x73/0xf0
[  828.840817][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  828.840820][    C1]  ? ___ratelimit+0x60/0x595
[  828.840824][    C1]  should_fail+0x708/0x852
[  828.840827][    C1]  ? fault_create_debugfs_attr+0x180/0x180
[  828.840831][    C1]  ? __kasan_check_read+0x11/0x20
[  828.840834][    C1]  __should_failslab+0x121/0x190
[  828.840837][    C1]  should_failslab+0x9/0x14
[  828.840840][    C1]  __kmalloc+0x71/0x770
[  828.840843][    C1]  ? mark_held_locks+0xf0/0xf0
[  828.840847][    C1]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  828.840851][    C1]  __tty_buffer_request_room+0x1fb/0x5c0
[  828.840855][    C1]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  828.840858][    C1]  pty_write+0x133/0x200
[  828.840861][    C1]  n_tty_write+0x40e/0x1080
[  828.840864][    C1]  ? n_tty_read+0x1bf0/0x1bf0
[  828.840868][    C1]  ? prepare_to_wait_exclusive+0x320/0x320
[  828.840872][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  828.840875][    C1]  ? _copy_from_user+0x12c/0x1a0
[  828.840878][    C1]  tty_write+0x496/0x7f0
[  828.840882][    C1]  ? n_tty_read+0x1bf0/0x1bf0
[  828.840885][    C1]  __vfs_write+0x8a/0x110
[  828.840888][    C1]  ? put_tty_driver+0x20/0x20
[  828.840891][    C1]  vfs_write+0x268/0x5d0
[  828.840894][    C1]  ksys_write+0x14f/0x290
[  828.840897][    C1]  ? __ia32_sys_read+0xb0/0xb0
[  828.840900][    C1]  ? do_syscall_64+0x26/0x790
[  828.840904][    C1]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840908][    C1]  ? do_syscall_64+0x26/0x790
[  828.840911][    C1]  __x64_sys_write+0x73/0xb0
[  828.840914][    C1]  do_syscall_64+0xfa/0x790
[  828.840918][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  828.840921][    C1] RIP: 0033:0x45a6f9
[  828.840931][    C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  828.840935][    C1] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  828.840944][    C1] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  828.840949][    C1] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  828.840953][    C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  828.840958][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  828.840963][    C1] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
[  828.849291][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
[  828.944261][T29728] FAULT_INJECTION: forcing a failure.
[  828.944261][T29728] name failslab, interval 1, probability 0, space 0, times 0
[  828.952256][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  828.972805][T29728] CPU: 0 PID: 29728 Comm: syz-executor.4 Not tainted 5.4.0-syzkaller #0
[  828.979480][T29723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  828.979720][T29728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  828.979734][T29728] Call Trace:
[  828.990043][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  828.991157][T29728]  dump_stack+0x197/0x210
[  828.991182][T29728]  should_fail.cold+0xa/0x15
[  829.009030][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
[  829.010776][T29728]  ? fault_create_debugfs_attr+0x180/0x180
[  829.016574][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  829.022764][T29728]  ? fault_create_debugfs_attr+0x180/0x180
[  829.022776][T29728]  ? lock_downgrade+0x920/0x920
[  829.022785][T29728]  ? lock_acquire+0x190/0x410
[  829.022798][T29728]  ? ___might_sleep+0x163/0x2c0
[  829.022814][T29728]  __should_failslab+0x121/0x190
[  829.022835][T29728]  should_failslab+0x9/0x14
[  829.049314][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  829.049821][T29728]  kmem_cache_alloc_trace+0x2d3/0x790
[  829.061897][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  829.063538][T29728]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  829.063554][T29728]  ? _copy_from_user+0x12c/0x1a0
[  829.063571][T29728]  map_lookup_elem+0x8f9/0xf70
[  829.063589][T29728]  __do_sys_bpf+0x8a4/0x3810
[  829.154961][ T4087] kobject: 'loop2' (0000000087b01886): kobject_uevent_env
[  829.161261][T29728]  ? bpf_prog_load+0x18f0/0x18f0
[  829.161275][T29728]  ? __kasan_check_write+0x14/0x20
[  829.161299][T29728]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  829.168142][ T4087] kobject: 'loop2' (0000000087b01886): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  829.170648][T29728]  ? wait_for_completion+0x440/0x440
[  829.170673][T29728]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  829.199041][T29734] FAULT_INJECTION: forcing a failure.
[  829.199041][T29734] name failslab, interval 1, probability 0, space 0, times 0
[  829.204650][T29728]  ? switch_fpu_return+0x1f9/0x4f0
[  830.302856][T29728]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  830.308932][T29728]  __x64_sys_bpf+0x73/0xb0
[  830.313340][T29728]  do_syscall_64+0xfa/0x790
[  830.317827][T29728]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  830.323716][T29728] RIP: 0033:0x45a6f9
[  830.327600][T29728] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  830.347192][T29728] RSP: 002b:00007fa6f9788c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  830.355590][T29728] RAX: ffffffffffffffda RBX: 00007fa6f9788c90 RCX: 000000000045a6f9
[  830.363547][T29728] RDX: 0000000000000018 RSI: 0000000020000600 RDI: 0000000000000001
[  830.371502][T29728] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  830.379454][T29728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6f97896d4
[  830.387409][T29728] R13: 00000000004c0d1d R14: 00000000004d48d8 R15: 0000000000000005
[  830.395396][T29734] CPU: 1 PID: 29734 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  830.403729][T29734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  830.413814][T29734] Call Trace:
[  830.413857][T29713] FAULT_INJECTION: forcing a failure.
[  830.413857][T29713] name failslab, interval 1, probability 0, space 0, times 0
[  830.417122][T29734]  dump_stack+0x197/0x210
[  830.417151][T29734]  should_fail.cold+0xa/0x15
[  830.438614][T29734]  ? fault_create_debugfs_attr+0x180/0x180
[  830.444427][T29734]  ? lock_acquire+0x190/0x410
[  830.449113][T29734]  __should_failslab+0x121/0x190
[  830.454064][T29734]  should_failslab+0x9/0x14
[  830.458566][T29734]  __kmalloc+0x71/0x770
[  830.462727][T29734]  ? __mutex_lock+0x458/0x13c0
[  830.467496][T29734]  ? mark_held_locks+0xf0/0xf0
[  830.472268][T29734]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  830.478064][T29734]  __tty_buffer_request_room+0x1fb/0x5c0
[  830.483697][T29734]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  830.489937][T29734]  pty_write+0x133/0x200
[  830.494176][T29734]  n_tty_write+0x40e/0x1080
[  830.498665][T29734]  ? n_tty_read+0x1bf0/0x1bf0
[  830.503342][T29734]  ? prepare_to_wait_exclusive+0x320/0x320
[  830.509136][T29734]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  830.515357][T29734]  ? _copy_from_user+0x12c/0x1a0
[  830.520297][T29734]  tty_write+0x496/0x7f0
[  830.524524][T29734]  ? n_tty_read+0x1bf0/0x1bf0
[  830.529245][T29734]  __vfs_write+0x8a/0x110
[  830.533564][T29734]  ? put_tty_driver+0x20/0x20
[  830.538241][T29734]  vfs_write+0x268/0x5d0
[  830.542489][T29734]  ksys_write+0x14f/0x290
[  830.546810][T29734]  ? __ia32_sys_read+0xb0/0xb0
[  830.551559][T29734]  ? switch_fpu_return+0x1f9/0x4f0
[  830.556658][T29734]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  830.562804][T29734]  __x64_sys_write+0x73/0xb0
[  830.567379][T29734]  do_syscall_64+0xfa/0x790
[  830.571881][T29734]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  830.577773][T29734] RIP: 0033:0x45a6f9
[  830.581660][T29734] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  830.602300][T29734] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  830.610703][T29734] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  830.618679][T29734] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  830.626636][T29734] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  830.634594][T29734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  830.642547][T29734] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
[  830.652779][T29713] CPU: 0 PID: 29713 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0
[  830.661132][T29713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  830.671190][T29713] Call Trace:
[  830.674493][T29713]  dump_stack+0x197/0x210
[  830.678938][T29713]  should_fail.cold+0xa/0x15
10:29:40 executing program 2 (fault-call:8 fault-nth:3):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

[  830.683553][T29713]  ? fault_create_debugfs_attr+0x180/0x180
[  830.689380][T29713]  ? lock_downgrade+0x920/0x920
[  830.694376][T29713]  ? lock_acquire+0x190/0x410
[  830.699060][T29713]  ? ___might_sleep+0x163/0x2c0
[  830.702337][ T4087] kobject: 'loop2' (0000000087b01886): kobject_uevent_env
[  830.703920][T29713]  __should_failslab+0x121/0x190
[  830.715552][ T4087] kobject: 'loop2' (0000000087b01886): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  830.715949][T29713]  should_failslab+0x9/0x14
[  830.730572][T29713]  __kmalloc+0x2e0/0x770
[  830.734831][T29713]  ? mutex_trylock+0x264/0x2f0
[  830.736616][T29740] FAULT_INJECTION: forcing a failure.
[  830.736616][T29740] name failslab, interval 1, probability 0, space 0, times 0
[  830.739597][T29713]  ? tty_write_lock+0x23/0x90
[  830.756815][T29713]  ? tty_write+0x58e/0x7f0
[  830.761221][T29713]  tty_write+0x58e/0x7f0
[  830.765632][T29713]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  830.771872][T29713]  ? n_tty_read+0x1bf0/0x1bf0
[  830.776533][T29713]  __vfs_write+0x8a/0x110
[  830.780842][T29713]  ? put_tty_driver+0x20/0x20
[  830.785501][T29713]  vfs_write+0x268/0x5d0
[  830.789729][T29713]  ksys_write+0x14f/0x290
[  830.794043][T29713]  ? __ia32_sys_read+0xb0/0xb0
[  830.798805][T29713]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  830.805912][T29713]  __x64_sys_write+0x73/0xb0
[  830.810487][T29713]  do_syscall_64+0xfa/0x790
[  830.814985][T29713]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  830.820861][T29713] RIP: 0033:0x45a6f9
[  830.824741][T29713] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  830.844323][T29713] RSP: 002b:00007fb0b23f7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  830.852714][T29713] RAX: ffffffffffffffda RBX: 00007fb0b23f7c90 RCX: 000000000045a6f9
[  830.860667][T29713] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 000000000000000a
[  830.868617][T29713] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  830.876571][T29713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0b23f86d4
[  830.884528][T29713] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 000000000000000b
[  830.892501][T29740] CPU: 1 PID: 29740 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  830.900830][T29740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  830.910889][T29740] Call Trace:
[  830.914184][T29740]  dump_stack+0x197/0x210
[  830.918525][T29740]  should_fail.cold+0xa/0x15
[  830.923159][T29740]  ? trace_hardirqs_on+0x67/0x240
[  830.928183][T29740]  ? fault_create_debugfs_attr+0x180/0x180
[  830.933998][T29740]  ? lock_acquire+0x190/0x410
[  830.938679][T29740]  __should_failslab+0x121/0x190
[  830.943612][T29740]  should_failslab+0x9/0x14
[  830.948114][T29740]  __kmalloc+0x71/0x770
[  830.952253][T29740]  ? __mutex_lock+0x458/0x13c0
[  830.956995][T29740]  ? mark_held_locks+0xf0/0xf0
[  830.961745][T29740]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  830.967531][T29740]  __tty_buffer_request_room+0x1fb/0x5c0
[  830.973149][T29740]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  830.979371][T29740]  pty_write+0x133/0x200
[  830.983941][T29740]  n_tty_write+0x40e/0x1080
[  830.988450][T29740]  ? n_tty_read+0x1bf0/0x1bf0
[  830.993218][T29740]  ? prepare_to_wait_exclusive+0x320/0x320
[  830.999010][T29740]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  831.005247][T29740]  ? _copy_from_user+0x12c/0x1a0
[  831.010168][T29740]  tty_write+0x496/0x7f0
[  831.014395][T29740]  ? n_tty_read+0x1bf0/0x1bf0
[  831.019056][T29740]  __vfs_write+0x8a/0x110
[  831.023371][T29740]  ? put_tty_driver+0x20/0x20
[  831.028039][T29740]  vfs_write+0x268/0x5d0
[  831.032274][T29740]  ksys_write+0x14f/0x290
[  831.036595][T29740]  ? __ia32_sys_read+0xb0/0xb0
[  831.041355][T29740]  ? switch_fpu_return+0x1f9/0x4f0
[  831.046452][T29740]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  831.052502][T29740]  __x64_sys_write+0x73/0xb0
[  831.057080][T29740]  do_syscall_64+0xfa/0x790
[  831.061590][T29740]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  831.067457][T29740] RIP: 0033:0x45a6f9
10:29:40 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

10:29:40 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  831.071336][T29740] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  831.090920][T29740] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  831.099310][T29740] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  831.107263][T29740] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  831.115214][T29740] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  831.123181][T29740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  831.131134][T29740] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
10:29:41 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:41 executing program 4 (fault-call:4 fault-nth:2):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:41 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

[  831.164530][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  831.188385][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
10:29:41 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x0, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:41 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

[  831.247509][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  831.277006][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  831.335215][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
10:29:41 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
r7 = syz_open_pts(r6, 0x1)
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r7, r6, 0x0)
ftruncate(r7, 0x800484007ffc)

[  831.380403][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  831.417252][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
10:29:41 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:41 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x0, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  831.429544][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  831.454640][ T4087] kobject: 'loop1' (00000000f403ea1c): kobject_uevent_env
10:29:41 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:41 executing program 2 (fault-call:8 fault-nth:4):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:41 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x0, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  831.486614][ T4087] kobject: 'loop1' (00000000f403ea1c): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  831.518981][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
[  831.553259][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  831.573133][T29869] FAULT_INJECTION: forcing a failure.
[  831.573133][T29869] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  831.586368][T29869] CPU: 0 PID: 29869 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  831.594414][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  831.594724][T29869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  831.611903][T29869] Call Trace:
[  831.615204][T29869]  dump_stack+0x197/0x210
[  831.618756][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  831.619550][T29869]  should_fail.cold+0xa/0x15
[  831.619658][T29869]  ? native_smp_send_reschedule+0x7d/0xc0
[  831.640012][T29869]  ? fault_create_debugfs_attr+0x180/0x180
[  831.645899][T29869]  ? try_to_wake_up+0x756/0x1a80
10:29:41 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  831.650850][T29869]  ? __kasan_check_read+0x11/0x20
[  831.653425][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
[  831.655962][T29869]  should_fail_alloc_page+0x50/0x60
[  831.655980][T29869]  __alloc_pages_nodemask+0x1a1/0x910
[  831.667090][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  831.668408][T29869]  ? __alloc_pages_slowpath+0x2920/0x2920
[  831.668428][T29869]  ? fault_create_debugfs_attr+0x180/0x180
[  831.668440][T29869]  cache_grow_begin+0x90/0xc60
[  831.668455][T29869]  ? trace_hardirqs_off+0x62/0x240
[  831.668471][T29869]  __kmalloc+0x6b2/0x770
[  831.683954][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
[  831.684089][T29869]  ? __mutex_lock+0x458/0x13c0
[  831.697900][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  831.700330][T29869]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  831.700347][T29869]  __tty_buffer_request_room+0x1fb/0x5c0
[  831.700363][T29869]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  831.700380][T29869]  pty_write+0x133/0x200
[  831.712322][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  831.717092][T29869]  n_tty_write+0x40e/0x1080
[  831.717112][T29869]  ? n_tty_read+0x1bf0/0x1bf0
[  831.737312][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  831.737784][T29869]  ? prepare_to_wait_exclusive+0x320/0x320
[  831.737806][T29869]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  831.754367][ T4087] kobject: 'loop2' (0000000087b01886): kobject_uevent_env
[  831.760998][T29869]  ? _copy_from_user+0x12c/0x1a0
[  831.761018][T29869]  tty_write+0x496/0x7f0
[  831.761032][T29869]  ? n_tty_read+0x1bf0/0x1bf0
[  831.761053][T29869]  __vfs_write+0x8a/0x110
[  831.775954][ T4087] kobject: 'loop2' (0000000087b01886): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  831.780458][T29869]  ? put_tty_driver+0x20/0x20
[  831.780476][T29869]  vfs_write+0x268/0x5d0
[  831.780488][T29869]  ksys_write+0x14f/0x290
[  831.780506][T29869]  ? __ia32_sys_read+0xb0/0xb0
[  831.802335][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
10:29:41 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)

[  831.805541][T29869]  ? switch_fpu_return+0x1f9/0x4f0
[  831.827191][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  831.829289][T29869]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  831.829308][T29869]  __x64_sys_write+0x73/0xb0
[  831.829330][T29869]  do_syscall_64+0xfa/0x790
[  831.884739][T29869]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  831.890634][T29869] RIP: 0033:0x45a6f9
[  831.894535][T29869] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  831.914147][T29869] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  831.917644][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
[  831.922564][T29869] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  831.922571][T29869] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  831.922577][T29869] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
10:29:41 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="bb", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

[  831.922584][T29869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  831.922590][T29869] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
10:29:42 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x0, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:42 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)

[  832.166220][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  832.214967][ T4087] kobject: 'loop1' (00000000f403ea1c): kobject_uevent_env
[  832.222798][ T4087] kobject: 'loop1' (00000000f403ea1c): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  832.236852][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  832.255811][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
10:29:42 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:42 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="bb", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

[  832.295809][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
10:29:42 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)

[  832.344962][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  832.374235][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  832.392171][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  832.442779][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  832.469888][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  832.494505][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
[  832.505213][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  832.583847][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
[  832.594374][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  832.616464][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  832.625304][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
10:29:42 executing program 2 (fault-call:8 fault-nth:5):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:42 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x0, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:42 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)

10:29:42 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:42 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0x11ffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

[  832.712708][ T4087] kobject: 'loop2' (0000000087b01886): kobject_uevent_env
[  832.728937][ T4087] kobject: 'loop2' (0000000087b01886): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  832.794378][ T4087] kobject: 'loop1' (00000000f403ea1c): kobject_uevent_env
[  832.810975][T30131] FAULT_INJECTION: forcing a failure.
[  832.810975][T30131] name failslab, interval 1, probability 0, space 0, times 0
[  832.823612][T30131] CPU: 0 PID: 30131 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  832.831940][T30131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
10:29:42 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x0, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  832.842003][T30131] Call Trace:
[  832.845310][T30131]  dump_stack+0x197/0x210
[  832.849663][T30131]  should_fail.cold+0xa/0x15
[  832.854271][T30131]  ? fault_create_debugfs_attr+0x180/0x180
[  832.860085][T30131]  ? lock_acquire+0x190/0x410
[  832.864779][T30131]  __should_failslab+0x121/0x190
[  832.869733][T30131]  should_failslab+0x9/0x14
[  832.874240][T30131]  __kmalloc+0x71/0x770
[  832.878492][T30131]  ? __mutex_lock+0x458/0x13c0
[  832.883357][T30131]  ? mark_held_locks+0xf0/0xf0
[  832.888145][T30131]  ? __tty_buffer_request_room+0x1fb/0x5c0
10:29:42 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0x0, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  832.893970][T30131]  __tty_buffer_request_room+0x1fb/0x5c0
[  832.899874][T30131]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  832.906127][T30131]  pty_write+0x133/0x200
[  832.910374][T30131]  n_tty_write+0x40e/0x1080
[  832.914883][T30131]  ? n_tty_read+0x1bf0/0x1bf0
[  832.919562][T30131]  ? prepare_to_wait_exclusive+0x320/0x320
[  832.925370][T30131]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  832.931608][T30131]  ? _copy_from_user+0x12c/0x1a0
[  832.936553][T30131]  tty_write+0x496/0x7f0
10:29:42 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0x0, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  832.940898][T30131]  ? n_tty_read+0x1bf0/0x1bf0
[  832.945583][T30131]  __vfs_write+0x8a/0x110
[  832.949911][T30131]  ? put_tty_driver+0x20/0x20
[  832.954608][T30131]  vfs_write+0x268/0x5d0
[  832.958873][T30131]  ksys_write+0x14f/0x290
[  832.963207][T30131]  ? __ia32_sys_read+0xb0/0xb0
[  832.967975][T30131]  ? switch_fpu_return+0x1f9/0x4f0
[  832.973095][T30131]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  832.979175][T30131]  __x64_sys_write+0x73/0xb0
[  832.983788][T30131]  do_syscall_64+0xfa/0x790
[  832.988905][T30131]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
10:29:43 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0x0, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  832.994799][T30131] RIP: 0033:0x45a6f9
[  832.998700][T30131] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  833.018309][T30131] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  833.026730][T30131] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  833.034705][T30131] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
10:29:43 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc))
r5 = syz_open_pts(r4, 0x1)
fcntl$setstatus(r5, 0x4, 0x102800)
write(r5, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
dup3(r5, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800)
write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(0xffffffffffffffff, r6, 0x0)
ftruncate(0xffffffffffffffff, 0x800484007ffc)

10:29:43 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x6, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

[  833.042677][T30131] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  833.050650][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  833.058621][T30131] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
10:29:43 executing program 2 (fault-call:8 fault-nth:6):
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
capget(0x0, 0x0)
creat(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
dup3(r1, r0, 0x0)

10:29:43 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)

[  833.116502][ T4087] kobject: 'loop1' (00000000f403ea1c): fill_kobj_path: path = '/devices/virtual/block/loop1'
10:29:43 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  833.197242][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  833.229539][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  833.245320][T30152] FAULT_INJECTION: forcing a failure.
[  833.245320][T30152] name failslab, interval 1, probability 0, space 0, times 0
[  833.258058][T30152] CPU: 0 PID: 30152 Comm: syz-executor.2 Not tainted 5.4.0-syzkaller #0
[  833.266907][T30152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  833.268468][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  833.276976][T30152] Call Trace:
[  833.277009][T30152]  dump_stack+0x197/0x210
[  833.277037][T30152]  should_fail.cold+0xa/0x15
10:29:43 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  833.296477][T30152]  ? trace_hardirqs_on+0x67/0x240
[  833.301513][T30152]  ? fault_create_debugfs_attr+0x180/0x180
[  833.307325][T30152]  ? lock_acquire+0x190/0x410
[  833.310033][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  833.312007][T30152]  __should_failslab+0x121/0x190
[  833.312028][T30152]  should_failslab+0x9/0x14
[  833.331630][T30152]  __kmalloc+0x71/0x770
[  833.335795][T30152]  ? __mutex_lock+0x458/0x13c0
[  833.340565][T30152]  ? mark_held_locks+0xf0/0xf0
[  833.340663][ T4087] kobject: 'loop4' (000000000ac4364a): kobject_uevent_env
[  833.345327][T30152]  ? __tty_buffer_request_room+0x1fb/0x5c0
[  833.345346][T30152]  __tty_buffer_request_room+0x1fb/0x5c0
[  833.363865][T30152]  tty_insert_flip_string_fixed_flag+0x93/0x1f0
[  833.365539][ T4087] kobject: 'loop4' (000000000ac4364a): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  833.370123][T30152]  pty_write+0x133/0x200
[  833.370139][T30152]  n_tty_write+0x40e/0x1080
[  833.370158][T30152]  ? n_tty_read+0x1bf0/0x1bf0
[  833.394959][T30152]  ? prepare_to_wait_exclusive+0x320/0x320
[  833.401499][T30152]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  833.406712][ T4087] kobject: 'loop5' (00000000ace280f5): kobject_uevent_env
[  833.407744][T30152]  ? _copy_from_user+0x12c/0x1a0
[  833.407765][T30152]  tty_write+0x496/0x7f0
[  833.424028][T30152]  ? n_tty_read+0x1bf0/0x1bf0
[  833.429148][T30152]  __vfs_write+0x8a/0x110
[  833.430103][ T4087] kobject: 'loop5' (00000000ace280f5): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  833.433474][T30152]  ? put_tty_driver+0x20/0x20
10:29:43 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x0, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

[  833.433489][T30152]  vfs_write+0x268/0x5d0
[  833.433506][T30152]  ksys_write+0x14f/0x290
[  833.456966][T30152]  ? __ia32_sys_read+0xb0/0xb0
[  833.461731][T30152]  ? switch_fpu_return+0x1f9/0x4f0
[  833.464621][ T4087] kobject: 'loop2' (0000000087b01886): kobject_uevent_env
[  833.466841][T30152]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  833.466861][T30152]  __x64_sys_write+0x73/0xb0
[  833.482759][ T4087] kobject: 'loop2' (0000000087b01886): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  833.484581][T30152]  do_syscall_64+0xfa/0x790
[  833.484602][T30152]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  833.505093][T30152] RIP: 0033:0x45a6f9
[  833.509001][T30152] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  833.528625][T30152] RSP: 002b:00007f2485a04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  833.537042][T30152] RAX: ffffffffffffffda RBX: 00007f2485a04c90 RCX: 000000000045a6f9
[  833.545019][T30152] RDX: 00000000fffffedf RSI: 0000000020000000 RDI: 0000000000000005
[  833.552996][T30152] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  833.560971][T30152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2485a056d4
[  833.568954][T30152] R13: 00000000004c7a8a R14: 00000000004e4b08 R15: 0000000000000006
[  833.641951][ T4087] kobject: 'loop3' (000000009b8ded6d): kobject_uevent_env
[  833.652711][ T4087] kobject: 'loop3' (000000009b8ded6d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  833.685220][ T4087] kobject: 'loop0' (00000000ecedb7df): kobject_uevent_env
[  833.694290][ T4087] kobject: 'loop0' (00000000ecedb7df): fill_kobj_path: path = '/devices/virtual/block/loop0'
10:29:43 executing program 1:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc))
write(0xffffffffffffffff, 0x0, 0x0)

10:29:43 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x7, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18)

10:29:43 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x1, 0x1559, 0x9, 0xa53, 0x10000})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
dup3(r6, r5, 0x0)
ftruncate(r6, 0x800484007ffc)

10:29:43 executing program 5:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r1, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56", 0x6a, 0x80, 0x0, 0x0)
open(0x0, 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mkdir(0x0, 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
r2 = gettid()
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x0, 0x4b524792ad3d1cd4}, 0x10)
capget(&(0x7f0000000040)={0x0, r2}, &(0x7f00000002c0)={0x0, 0x1559, 0x9, 0xa53, 0x10000, 0x7})
creat(&(0x7f0000000400)='./bus\x00', 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x80, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x1)
fcntl$setstatus(r4, 0x4, 0x102800)
write(r4, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3)
dup3(r4, r3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00005befdc))
r6 = syz_open_pts(r5, 0x1)
fcntl$setstatus(r6, 0x4, 0x102800)

10:29:43 executing program 0:
syz_open_dev$vcsa(0x0, 0x0, 0x982c0)
bind$inet(0xffffffffffffffff, &(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, <r0=>0x0})
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x480000, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0)
sendto(r2, &(0x7f0000000240)="f88513380a48280d05d2eaa73494f4a6cd0452c736ea3426c37183ff6bdceaf243427da19bb7c4512d713831db10a98386b3ae9d07329380c98bfd6a93637bde96aa1f7d9f519c2484e906178eeafd08bdc7a8b1c34b2c024d05c2e24c1df21fd37d66168b20ae3edd56e43213", 0x6d, 0x80, 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x180)
socketpair(0x1e, 0x1, 0xbc, &(0x7f0000000140)={0x0, 0x0})
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
mkdir(&(0x7f0000000000)='./file0\x00', 0x8)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
chdir(&(0x7f00000001c0)='./file0\x