0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x2}, @generic={0x2, 0x4, 0x9, 0x2, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x8f, &(0x7f0000000100)=""/143, 0x41100, 0x10, '\x00', r1, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x5, 0x8, 0x6b25bd95}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r6, 0xffffffffffffffff, 0x1, r7], &(0x7f0000000400)=[{0x1, 0x2, 0x3, 0x8}, {0x3, 0x4, 0x5, 0xc}], 0x10, 0x6}, 0x90) syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r8, 0x540a, 0x1ffff000) 00:50:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x20000) (async) syz_open_pts(r0, 0x20000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:28 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x401) 00:50:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x8) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:28 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x401) 00:50:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x200001fd) 00:50:28 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async, rerun: 64) syz_open_pts(0xffffffffffffffff, 0x210000) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000440)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0, &(0x7f0000000680)=[{}, {}], 0x5, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 00:50:28 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x20000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:28 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x2}, @generic={0x2, 0x4, 0x9, 0x2, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x8f, &(0x7f0000000100)=""/143, 0x41100, 0x10, '\x00', r1, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x5, 0x8, 0x6b25bd95}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r6, 0xffffffffffffffff, 0x1, r7], &(0x7f0000000400)=[{0x1, 0x2, 0x3, 0x8}, {0x3, 0x4, 0x5, 0xc}], 0x10, 0x6}, 0x90) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r8, 0x540a, 0x1ffff000) 00:50:28 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x401) 00:50:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7b6) 00:50:28 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_pts(0xffffffffffffffff, 0x210000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x6) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000440)={0x0, 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x2, 0x0, &(0x7f0000000680)=[{}, {}], 0x5, 0x0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0xb, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 00:50:28 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:28 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x64e3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x80000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa358}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x492}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x401) 00:50:28 executing program 3: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{0x80000000}}]}) r1 = syz_open_dev$media(&(0x7f0000000200), 0x28b, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000140)=[{}, {0x80000000}], &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x6, [0x7fff, 0x200]}, {r0, r3, 0x3, [0x3, 0x30]}, 0x1, [0x0, 0x10000000]}) syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000380)={r2, &(0x7f00000002c0)=[{}, {0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f00000003c0)={r5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) 00:50:28 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:28 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:28 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7b6) 00:50:28 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/locks\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xb7, r6, 0x272ad617}, 0xc) 00:50:28 executing program 3: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{0x80000000}}]}) r1 = syz_open_dev$media(&(0x7f0000000200), 0x28b, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000140)=[{}, {0x80000000}], &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x6, [0x7fff, 0x200]}, {r0, r3, 0x3, [0x3, 0x30]}, 0x1, [0x0, 0x10000000]}) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000380)={r2, &(0x7f00000002c0)=[{}, {0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f00000003c0)={r5}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f00000003c0)={r5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) 00:50:28 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:28 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x64e3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x80000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa358}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x492}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x401) 00:50:28 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7b6) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/locks\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000040)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xb7, r6, 0x272ad617}, 0xc) 00:50:29 executing program 3: ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)=[{{0x80000000}}]}) r1 = syz_open_dev$media(&(0x7f0000000200), 0x28b, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, &(0x7f0000000140)=[{}, {0x80000000}], &(0x7f0000000180)=[{}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000240)={{0x80000000, 0x0, 0x6, [0x7fff, 0x200]}, {r0, r3, 0x3, [0x3, 0x30]}, 0x1, [0x0, 0x10000000]}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000380)={r2, &(0x7f00000002c0)=[{}, {0x80000000}], &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f00000003c0)={r5}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) 00:50:29 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x64e3) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0x80000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa358}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x492}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x401) 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000000)=""/235}) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/112) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000100)='0', 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/locks\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000040)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xb7, r6, 0x272ad617}, 0xc) 00:50:29 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettaction={0x88, 0x32, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0f2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x88}}, 0x48004) ioctl$TIOCGPTPEER(r0, 0x5441, 0x13c) syz_open_pts(r0, 0x165881) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000180)) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:29 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x6) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x1, 0x13, {0xa, 0x4e22, 0x0, @remote, 0xc3fe}}}, 0x80) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x540b, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7}, 0xc) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/112) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/112) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000000)=""/235}) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:29 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettaction={0x88, 0x32, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0f2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x88}}, 0x48004) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x13c) (async) syz_open_pts(r0, 0x165881) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000180)) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/112) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f0000000000)=""/235}) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7}, 0xc) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x351}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028055}, 0x20000810) ioctl$KDDELIO(r0, 0x5407, 0x400000020000000) 00:50:29 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xfff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250e00000005002f0001000000050033000200000008002c000100010008003a000200000005002f000000000008003a000200000018b0508698012295f968cfd2e62efa2a12b2a4b2339958219826b2ab1408d2e1c52b77e7d2183cebd69358908ffbeffac1a44338b0956ae2dedf276c4cba1a109c4d65f07a7c94f6f908f24ab12bdac7c9d2322cb164efbc141286f349080f86fb424170b36fc28ff4dc4bc09a867f065779d2e278388d7baeb77f50aef637ba0eed7e3c431078634014ce694703672aeef196051956971b7c3d"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x412a40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0xd1530977e62eee3b, 0x1, 0x2, 0x2}}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x9) 00:50:29 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x6) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x1, 0x13, {0xa, 0x4e22, 0x0, @remote, 0xc3fe}}}, 0x80) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x540b, 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x7}, 0xc) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:29 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettaction={0x88, 0x32, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0f2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x88}}, 0x48004) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x13c) (async) syz_open_pts(r0, 0x165881) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000180)) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x3}) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async, rerun: 32) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x351}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028055}, 0x20000810) (async) ioctl$KDDELIO(r0, 0x5407, 0x400000020000000) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000c00)={{0x3, 0x3, 0x5, 0x2, 0x3ff}}) syz_open_pts(r1, 0x6040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000b80)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}], 0x8, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000780)=[{}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x4, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000b00)={{0x80000000, 0x0, 0x0, [0x8, 0x1]}, {r3, r4, 0x0, [0x6, 0x10001]}, 0x0, [0x100, 0x4]}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9215") 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:29 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xfff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250e00000005002f0001000000050033000200000008002c000100010008003a000200000005002f000000000008003a000200000018b0508698012295f968cfd2e62efa2a12b2a4b2339958219826b2ab1408d2e1c52b77e7d2183cebd69358908ffbeffac1a44338b0956ae2dedf276c4cba1a109c4d65f07a7c94f6f908f24ab12bdac7c9d2322cb164efbc141286f349080f86fb424170b36fc28ff4dc4bc09a867f065779d2e278388d7baeb77f50aef637ba0eed7e3c431078634014ce694703672aeef196051956971b7c3d"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x412a40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0xd1530977e62eee3b, 0x1, 0x2, 0x2}}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x9) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xfff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250e00000005002f0001000000050033000200000008002c000100010008003a000200000005002f000000000008003a000200000018b0508698012295f968cfd2e62efa2a12b2a4b2339958219826b2ab1408d2e1c52b77e7d2183cebd69358908ffbeffac1a44338b0956ae2dedf276c4cba1a109c4d65f07a7c94f6f908f24ab12bdac7c9d2322cb164efbc141286f349080f86fb424170b36fc28ff4dc4bc09a867f065779d2e278388d7baeb77f50aef637ba0eed7e3c431078634014ce694703672aeef196051956971b7c3d"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x412a40) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0xd1530977e62eee3b, 0x1, 0x2, 0x2}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDDELIO(r0, 0x540a, 0x9) (async) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x3}) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@loopback, 0x0}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x351}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1cc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24028055}, 0x20000810) (async) ioctl$KDDELIO(r0, 0x5407, 0x400000020000000) 00:50:29 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) 00:50:29 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x6) connect(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x1, 0x13, {0xa, 0x4e22, 0x0, @remote, 0xc3fe}}}, 0x80) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x540b, 0x2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000c00)={{0x3, 0x3, 0x5, 0x2, 0x3ff}}) (async) syz_open_pts(r1, 0x6040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000b80)) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}], 0x8, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000780)=[{}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x4, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000b00)={{0x80000000, 0x0, 0x0, [0x8, 0x1]}, {r3, r4, 0x0, [0x6, 0x10001]}, 0x0, [0x100, 0x4]}) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9215") 00:50:29 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) (async) 00:50:29 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xfff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250e00000005002f0001000000050033000200000008002c000100010008003a000200000005002f000000000008003a000200000018b0508698012295f968cfd2e62efa2a12b2a4b2339958219826b2ab1408d2e1c52b77e7d2183cebd69358908ffbeffac1a44338b0956ae2dedf276c4cba1a109c4d65f07a7c94f6f908f24ab12bdac7c9d2322cb164efbc141286f349080f86fb424170b36fc28ff4dc4bc09a867f065779d2e278388d7baeb77f50aef637ba0eed7e3c431078634014ce694703672aeef196051956971b7c3d"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250e00000005002f0001000000050033000200000008002c000100010008003a000200000005002f000000000008003a000200000018b0508698012295f968cfd2e62efa2a12b2a4b2339958219826b2ab1408d2e1c52b77e7d2183cebd69358908ffbeffac1a44338b0956ae2dedf276c4cba1a109c4d65f07a7c94f6f908f24ab12bdac7c9d2322cb164efbc141286f349080f86fb424170b36fc28ff4dc4bc09a867f065779d2e278388d7baeb77f50aef637ba0eed7e3c431078634014ce694703672aeef196051956971b7c3d"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x412a40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0xd1530977e62eee3b, 0x1, 0x2, 0x2}}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x9) (async) ioctl$KDDELIO(r0, 0x540a, 0x9) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)) (async, rerun: 64) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:29 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) 00:50:29 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000c00)={{0x3, 0x3, 0x5, 0x2, 0x3ff}}) syz_open_pts(r1, 0x6040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000b80)) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000300)=[{}, {}, {}], 0x7, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}], 0x8, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000780)=[{}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{}, {}], 0x4, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000780)=[{}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x4, 0x0, &(0x7f00000009c0)=[{}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000b00)={{0x80000000, 0x0, 0x0, [0x8, 0x1]}, {r3, r4, 0x0, [0x6, 0x10001]}, 0x0, [0x100, 0x4]}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9215") 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x212400, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x3203, 0x6, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'team0\x00'}) 00:50:29 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000080)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:29 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="712f2add2d14331dd432aa1c3bda9b27acda7f81da2ef32c3ca8f651d6eb5ecd0ada1a4d34f8d3552f27d781bebc7364a8b6243e2fdc9b7ed75e1f06e01ff04d09c1b7c30664a24beee612") syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080)=[{}, {0x80000000}], &(0x7f00000000c0)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, 0x0, 0x4, [0xffffffff, 0x7f]}, {0x80000000, 0x0, 0x5, [0x59b4, 0x4]}, 0x4, [0x10001, 0x4]}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x6) 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x212400, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x3203, 0x6, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'team0\x00'}) 00:50:29 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) 00:50:29 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080)=[{}, {0x80000000}], &(0x7f00000000c0)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, 0x0, 0x4, [0xffffffff, 0x7f]}, {0x80000000, 0x0, 0x5, [0x59b4, 0x4]}, 0x4, [0x10001, 0x4]}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240), &(0x7f0000000280)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)}) (async) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, 0x0, 0x4, [0xffffffff, 0x7f]}, {0x80000000, 0x0, 0x5, [0x59b4, 0x4]}, 0x4, [0x10001, 0x4]}) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x6) (async) 00:50:29 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="712f2add2d14331dd432aa1c3bda9b27acda7f81da2ef32c3ca8f651d6eb5ecd0ada1a4d34f8d3552f27d781bebc7364a8b6243e2fdc9b7ed75e1f06e01ff04d09c1b7c30664a24beee612") (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:29 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x212400, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000080)={0x3203, 0x6, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 'team0\x00'}) 00:50:29 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r2}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000039c0)={&(0x7f0000000180)=@delchain={0x3808, 0x65, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x2, 0xfff2}, {0xf, 0x7}, {0xffee, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @filter_kind_options=@f_fw={{0x7}, {0x37ac, 0x2, [@TCA_FW_ACT={0x1e20, 0x4, [@m_nat={0x130, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0xffffffffffffffff, 0x2, 0x3}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb2e, 0x20000000, 0x80, 0x7a}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x1, 0x20000000, 0x2, 0x273e5daa}, @local, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3f, 0x6, 0x400, 0x3}, @broadcast, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xffffffff, 0x7, 0x1, 0x2}, @local, @private=0xa010100}}]}, {0x3f, 0x6, "255f471893a6ea0a34874f157241a8f24f71f7ada55298cfad057ac72261ce865f5dc391893450c59b4bd3d4e453abe76b69847bd76eb3aedaa65b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1cec, 0x6, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x0, 0x3, 0x5, 0x5, 0x2}, 0xff, 0x0, [{0x5bf, 0x1, 0x101, 0x6, 0x3, 0x1}]}, [{0x8, 0x1, 0xc84, 0x7ff, 0x3, 0x9}, {0x5, 0x1, 0xfffffeff, 0x9, 0x1, 0x9}, {0x2, 0x9, 0xaa6, 0xffffffff, 0x1, 0x100}, {0x9, 0x20, 0x9, 0x7f8, 0x7, 0x7}, {0x5794, 0x7, 0x3, 0x800, 0xfffffff8, 0x401}, {0x9, 0x0, 0x1, 0x3f, 0x2, 0x9}, {0x101, 0x5, 0x7, 0x800, 0x1, 0xfffffff7}, {0x0, 0x3, 0x7, 0x1, 0x8001, 0x3}, {0x7, 0x10000, 0x81, 0x6, 0x62, 0x3f}, {0xfffffffb, 0x8, 0x6, 0x80000001, 0x3f, 0x8}, {0xd0, 0x81, 0x3f, 0x0, 0xc785, 0x5}, {0x1000, 0x4, 0x80000000, 0x6, 0x1, 0x1}, {0xffff, 0x97f1, 0x6, 0x7ff, 0x81, 0x2}, {0x6, 0x2, 0x1, 0x15, 0xfffffffe, 0x7}, {0xfffff48b, 0x1000, 0x6, 0xffffffff, 0x1, 0xcf}, {0x9dc1, 0xfffffffe, 0xfff, 0xb9b9, 0x1, 0xfffffffe}, {0x8, 0x1f, 0x5, 0x81, 0x5, 0x3}, {0x7fff, 0x3ff, 0x4, 0x3, 0xffffff81, 0x3}, {0x7, 0x1, 0x2, 0x0, 0x3, 0x1}, {0x8001, 0xd33, 0x0, 0x3dee, 0x9, 0x8}, {0x80000001, 0x2b, 0x5, 0x80000001, 0x20, 0xfffffff7}, {0x3, 0x1, 0x80000001, 0x0, 0x9, 0x6}, {0x9, 0x6, 0x4526, 0x7f, 0xdac, 0x2}, {0x2, 0x17, 0x7fff, 0x1ff, 0x5, 0x80000001}, {0x0, 0x0, 0x1a742960, 0x1ff, 0x2}, {0x9, 0x6, 0x4, 0xfffffff9, 0x5, 0x81}, {0x2, 0x9, 0x8, 0x401, 0x5, 0x10001}, {0x2, 0x9b80000, 0x3, 0x1, 0x417, 0x5}, {0x7, 0x8, 0x20, 0x9, 0xb5, 0xfffffffa}, {0x49db379f, 0x9, 0x5, 0x1, 0xfb5, 0x54}, {0x2, 0x5, 0x3, 0x0, 0x1ffe000, 0x8}, {0x3, 0xe, 0xd150, 0x3699, 0x4}, {0xf9, 0x1, 0xbace, 0x7, 0x8000, 0xffffffff}, {0xfeb, 0x1, 0x10001, 0x7, 0x5}, {0xffffff3c, 0x1, 0x7, 0x0, 0x3, 0xc}, {0x8000, 0x81, 0x40, 0x0, 0x4, 0x2}, {0x89, 0x401, 0x9865, 0x3, 0x3, 0x9}, {0x6ee6, 0x1, 0x3f, 0x9, 0x8, 0x100}, {0x200, 0x3, 0x5, 0x9, 0x94, 0x2}, {0x7df1, 0x0, 0x23, 0x2, 0x33f, 0x55}, {0x6, 0x6, 0x80000000, 0x80000000, 0x7, 0x2}, {0x5, 0xffffcb4a, 0x6, 0x9, 0xa6cd, 0x8}, {0x8, 0x3, 0x5, 0x2, 0x1, 0x9f75}, {0xd790, 0xa3a, 0x800, 0x7, 0x9, 0x7}, {0x5, 0x5, 0x20, 0x1, 0x14, 0x5}, {0x7, 0x3, 0x2, 0x2fbe, 0x4, 0x1e}, {0x5, 0x401, 0x8000, 0x400, 0x40, 0x1000}, {0x40d, 0xcb21, 0x8, 0xde64, 0x6, 0x5}, {0x8, 0x10001, 0x7fff, 0x8af0, 0x5, 0x2}, {0x6, 0x80, 0xfffffffc, 0x140000, 0x8, 0x8000}, {0x1, 0x7fff, 0x40, 0x7, 0x7fffffff, 0x6}, {0x7fff, 0xcf0a, 0x3f, 0xffffffff, 0x100, 0x5}, {0x7ff, 0x6, 0x6, 0x3, 0x200, 0x8}, {0x1, 0x4, 0xfffffffc, 0x85, 0x4, 0x5de8}, {0x0, 0x6, 0x8, 0x0, 0x0, 0x5}, {0x95a, 0x2, 0x5, 0x4, 0x1f, 0x1}, {0x200, 0x10000, 0x4, 0x3060, 0x1ff, 0x8}, {0x5, 0x8, 0x8, 0x9, 0x4}, {0x2, 0x3, 0x8001, 0x2, 0x165, 0x400}, {0x3, 0x32a94e3b, 0xfffffbff, 0x5, 0x0, 0x76a0}, {0x7, 0x4, 0x4, 0x81, 0x10001, 0x4}, {0x7, 0x7, 0x9, 0x8000, 0x2, 0x5}, {0x8b5b, 0x7, 0x8, 0x401, 0x5b3, 0x6}, {0x0, 0x3, 0x6, 0xea4, 0xc3d0, 0x7}, {0x41, 0x5, 0x99ddfef7, 0x1, 0x52, 0x3f}, {0x7, 0x2, 0x80000001, 0xbf, 0x3}, {0x3f, 0x5, 0x7, 0x7, 0x1ff, 0x8000}, {0x3611, 0x8, 0x1, 0x2, 0x1, 0x80000000}, {0x6, 0x9, 0x587, 0x9c, 0x101, 0x7c66}, {0x6, 0xfffff8af, 0x9, 0x40, 0x6, 0x7fff}, {0x1ff, 0x1, 0xfffffffd, 0xfffffff9, 0xe8ad, 0xa0}, {0x1, 0x3, 0x10001, 0xfffff001, 0x5}, {0x6, 0x5, 0x9, 0x4, 0x20, 0x6}, {0x2, 0x2, 0xeeb, 0x7, 0x9, 0xa1b}, {0x8, 0x7, 0xffffffff, 0xffff7fff, 0x80}, {0x400, 0x10000, 0x2, 0x80000000, 0x0, 0xe65c}, {0x6, 0x8, 0x14000, 0x3, 0x3, 0xfffffffc}, {0x5, 0x0, 0x7fffffff, 0xfff, 0x8, 0x9}, {0x5, 0x1, 0xcc, 0x1ff, 0x3}, {0x8, 0xbf1, 0x4, 0xaa53, 0x7, 0x6}, {0xbf, 0x9, 0x3, 0x3f, 0x2, 0x3}, {0xda5d, 0x1, 0x7f, 0x9, 0x1}, {0x401, 0x9, 0x1f, 0x80, 0x7, 0x7}, {0xa6cb, 0x1000, 0x8, 0xffffffff, 0xffffffff, 0x985}, {0x1, 0x2, 0x24, 0xfffffb90, 0xa2d65c1, 0x5b}, {0x7, 0x1f, 0x1, 0xfffffbff, 0xfff, 0x8001}, {0x7ff, 0x101, 0xffffffff, 0x401, 0xdc, 0x7}, {0x0, 0x0, 0x9, 0x7f, 0x2, 0x9}, {0x9, 0xffff, 0x2, 0x6, 0x5, 0xfffff1e9}, {0x3, 0xfffffffb, 0x4, 0x4a6, 0x1000, 0x3}, {0x59b, 0x4, 0x3e, 0x7, 0x9, 0x400}, {0x2, 0xfffffb4c, 0x4, 0x9609, 0x1, 0x7fff}, {0xb46, 0x81, 0x7, 0xe3, 0xffff0000, 0x7}, {0x80000001, 0x3, 0x1, 0x0, 0x80000000, 0xffffffff}, {0x3, 0x8001, 0x7fff, 0x8, 0x3, 0x3}, {0xffffffe1, 0x7, 0x5, 0x9, 0x7, 0x8}, {0x10001, 0x8, 0xffffffff, 0x170b1231, 0x0, 0x7f}, {0x401, 0x4, 0x81, 0x0, 0x10000, 0x5}, {0x2, 0x0, 0xff, 0x800, 0x7, 0x1}, {0x8, 0xe3b5, 0x3, 0x2, 0x1f, 0x6}, {0xfffffff7, 0x8, 0x7f, 0x3, 0x10001, 0xba4}, {0x716, 0xffffffff, 0x2, 0x6, 0x1ff, 0x100}, {0x6, 0x4, 0x81, 0xa, 0x3, 0xe7a}, {0x8, 0x4, 0x9, 0x5, 0x5, 0xff}, {0x1, 0x7fffffff, 0x80, 0x2, 0x8, 0x1}, {0x3, 0x9, 0x29a0, 0x4, 0x6, 0x3}, {0x1000, 0xd005, 0x0, 0x5, 0xfff, 0x1}, {0xfde1, 0xcb4, 0x5, 0x4, 0xd517, 0x400}, {0x1, 0x29d, 0x80000000, 0x9, 0x5}, {0x9ea9, 0x5, 0x2, 0xfff, 0x5}, {0x80, 0x3, 0x3, 0x5, 0x6, 0x5}, {0x1, 0x7a06, 0x7, 0x3, 0x7, 0x1}, {0x10000, 0x4, 0x1, 0x3ff, 0x5, 0x5}, {0x2, 0x4, 0x80000000, 0x2, 0x8000, 0x7}, {0x9, 0x0, 0x6, 0x4, 0x4, 0xfe}, {0x5, 0x4, 0x5, 0x0, 0x4, 0xda}, {0x9, 0x4, 0x13, 0x3, 0x3, 0x1}, {0xa21c394, 0x4, 0x9, 0x2, 0x4, 0x401}, {0x3, 0xe8aa, 0xfffffffc, 0x4349, 0x3, 0x1}, {0x5, 0xfffffffb, 0x200, 0x6, 0x0, 0x7}, {0xffffffff, 0xffffffe1, 0x1ff, 0x8, 0x7, 0x9}, {0x2, 0xfffff02b, 0x8, 0x7}, {0x9, 0x0, 0x20, 0x401, 0x80, 0x80000000}, {0x0, 0x1, 0x6, 0x8, 0x3ff, 0x400}, {0x1ff, 0xfffffffa, 0x1, 0x2, 0x1f, 0x8}, {0xda, 0x7f, 0x1, 0xa412ac8, 0x80000001}, {0x1c2b, 0x3, 0x7, 0x7, 0x4, 0x10000}, {0x8, 0x2, 0x6, 0x8001, 0x8, 0x5}], [{0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x97723a61f14a2a6f}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x8a71733e1e343f9c}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1b9b23cf864c2858, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x0, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0xc106f1d4ecd52aa5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0xe18c4e2a7ca67420, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffff10, 0x55, 0x3, 0x3, 0x2}, 0x42, 0x1}, [{0x400, 0x1, 0x200, 0x6, 0x8001, 0x3}, {0x1f, 0xa7, 0x0, 0x6, 0x8, 0x5}, {0x5, 0x4, 0x80000001, 0x6, 0x1f}, {0x2, 0xeb6, 0x6, 0x5, 0x80000001, 0xfffffffa}, {0xc473, 0xffff, 0x1, 0x80000001, 0x7, 0x8}, {0xffff078a, 0x4e0, 0x8001, 0xbd1, 0x9, 0x4}, {0x4, 0x1, 0x0, 0x3, 0x2, 0x6ce}, {0x7, 0xd1a3, 0xcd, 0x6, 0x8, 0x1}, {0x8, 0x309a3a4, 0x4e021c71, 0xc7, 0x800, 0x3}, {0x8, 0x400, 0x100, 0x9, 0x8, 0x200}, {0x82f4, 0x100, 0xb60, 0xfff, 0x0, 0x481}, {0x8000, 0x489, 0x2, 0x5, 0x0, 0x3}, {0x1, 0x62, 0x8, 0x2, 0x0, 0x7}, {0x6, 0x3ff, 0x3, 0x7, 0x4, 0xac}, {0xffffff00, 0x5, 0x80, 0x2, 0x0, 0x1b39}, {0x8173, 0x701, 0x3f, 0x0, 0x2, 0xc14}, {0xfff, 0x2, 0x7, 0x4, 0x823, 0x7ff}, {0x6, 0x8001, 0x9, 0x1, 0x8, 0x10000}, {0x5, 0x8001, 0x8001, 0x1000, 0x0, 0x80000001}, {0x101, 0x4, 0xfffffffb, 0x5, 0x10000, 0x7}, {0xfff, 0x1, 0x3, 0x1, 0x5, 0x1}, {0x6, 0xffffffff, 0x200, 0x40, 0x0, 0xfffffffc}, {0x8001, 0xfffffff8, 0x200, 0x3, 0x9, 0x10000}, {0xaedd, 0x2, 0x3ff, 0x7, 0x7, 0x2}, {0x7fffffff, 0xff, 0x7ff, 0x1ff, 0xfffffffe, 0x8}, {0x80000001, 0xfffff714, 0x2b7, 0x1, 0x20, 0x7ba8}, {0x400, 0x101, 0x1, 0x9, 0x0, 0x100}, {0x6df6a0e4, 0xc0, 0x8, 0x7fff, 0x99c7, 0x4}, {0x1, 0x3ff, 0x8, 0x7, 0x7, 0x8}, {0xfffffffb, 0x2, 0xfb99, 0x4, 0x3, 0x1f}, {0x0, 0x3, 0x9, 0x0, 0x80000000, 0x9}, {0x7, 0x80, 0x3, 0x0, 0x2, 0xfff}, {0xff, 0x10001, 0x81, 0x5}, {0x3, 0x5, 0xfff, 0x7ff, 0x4, 0x7}, {0x3, 0x0, 0x2, 0x0, 0x9, 0x37c}, {0x4, 0xf5, 0x6, 0x8, 0x8, 0x5}, {0x1, 0xef, 0x7ff, 0x0, 0x7a, 0xffff}, {0x1, 0x1, 0xfc, 0x4, 0x3, 0x3ff}, {0x5, 0xfffffff9, 0x4, 0x8, 0xffff, 0x8}, {0x7, 0x0, 0xfff, 0x2, 0x5, 0x7}, {0x2, 0x0, 0x4, 0x80000001, 0x3, 0x200}, {0x3f, 0xffffffff, 0x3, 0x4, 0xf6, 0x1f}, {0x4, 0x6, 0x6, 0x10001, 0x8, 0x3}, {0x384, 0x8, 0x1, 0x8000, 0xffffffff, 0x1000}, {0x0, 0x7d9f, 0x8d, 0x5, 0x2, 0x5}, {0x100, 0x44, 0x2, 0x4, 0x10001, 0x10001}, {0x400, 0xfff, 0x2, 0x3, 0x6, 0x3ff}, {0x9, 0x7, 0x7559, 0x40, 0x5}, {0x2, 0x9, 0x6, 0x1, 0x7}, {0x1, 0x1f, 0x1, 0xada7, 0x2, 0x6}, {0x81, 0x4, 0x0, 0xfffffff7, 0x9, 0x7}, {0x5, 0xff1, 0x8, 0x7, 0x9, 0x4b7}, {0x8, 0x1, 0x9, 0x3, 0x6, 0x3f}, {0xfffffff9, 0x7, 0x80, 0x80, 0x5208c79, 0x800}, {0x101, 0x18d, 0x0, 0x6, 0x2, 0x7}, {0xfffffffd, 0x10000, 0x6, 0x4, 0x4, 0x401}, {0x5, 0x81, 0x20, 0x9, 0x7f, 0x300}, {0x40, 0xfffffffb, 0x8, 0x1, 0x1, 0xa40}, {0x8, 0x40, 0x1, 0x160, 0x1e3, 0x80000001}, {0x9, 0x2, 0x7, 0xf1, 0x0, 0x1000}, {0x0, 0x400, 0xfffff800, 0x8, 0x8001, 0x4}, {0x4, 0x5, 0x6d85, 0x5, 0x2, 0x40}, {0x2, 0x8001, 0x3f, 0x0, 0x6, 0x1}, {0x32fc, 0x6, 0x1000, 0x80000001, 0x8, 0x95}, {0x6, 0xffffffc0, 0x2, 0x3, 0xfff, 0x100}, {0x0, 0x1f, 0x1, 0x8, 0x5, 0xc0000000}, {0xfffffffe, 0x6, 0x9, 0x1f, 0x40, 0x5}, {0x1, 0x8, 0x80000001, 0x20, 0x3, 0x9}, {0x7, 0xec0a, 0x4, 0xffff, 0xffff0000, 0x8}, {0x100, 0x8, 0x1, 0x3f, 0x1, 0x9}, {0xfffffffe, 0xfffffffb, 0x2067, 0x81, 0x2, 0x4}, {0x3, 0x8, 0x6, 0x80000000, 0x8001, 0x9}, {0xd8, 0xfe, 0x3f, 0x9, 0xfffffffe, 0x2}, {0xf9c, 0x5, 0x80, 0x0, 0x100}, {0x4, 0xca, 0x6, 0x2, 0x8, 0x8}, {0x10000, 0x4, 0x46e, 0xbc, 0x1, 0x3}, {0xde69, 0x5, 0x7, 0x100, 0x400}, {0x101, 0x2a183d22, 0x81, 0x200, 0x20, 0x1}, {0x6, 0x3, 0x6, 0x0, 0x7, 0x4}, {0x9, 0x0, 0x3, 0xff, 0x3ff, 0x1}, {0x8, 0x69f, 0x1, 0x41d3, 0x4, 0x2}, {0x4, 0xfffffffd, 0x3, 0x4, 0x1, 0x8}, {0x590, 0x4, 0x1000, 0x2, 0x1, 0x7}, {0x401, 0x40, 0x2eaa, 0x5, 0x6, 0xffffffff}, {0x7, 0x5, 0x0, 0xe5f, 0x4, 0xfffffffa}, {0x7, 0x2, 0x7, 0x6, 0x1, 0x7ff}, {0x1, 0xfffffffe, 0x5, 0x4, 0x1ff, 0x1}, {0xde, 0x80, 0xfb, 0x7, 0x100, 0x9}, {0x20, 0x1, 0x1c, 0x2, 0x1, 0x7fffffff}, {0x7, 0x9, 0x200, 0x0, 0x9, 0xb39}, {0x10001, 0x492e2601, 0x9, 0xf55e, 0x3, 0x2}, {0x9, 0x22, 0x3, 0x5, 0xfffffffe, 0x8}, {0x4, 0x8, 0x9, 0xfffffff9, 0x5, 0x5}, {0x1401, 0x5, 0xfffffc01, 0x100, 0x8000, 0x7f}, {0x1, 0x1, 0x2f, 0x8, 0x9}, {0x8000, 0x4, 0x101, 0x9, 0x1, 0x52}, {0x5, 0x3, 0x4, 0x3, 0x66e, 0x5}, {0x5, 0x80000000, 0x4, 0x20, 0x9, 0xffffffff}, {0x0, 0x200, 0x1, 0x64, 0x9, 0x8}, {0x6, 0x2, 0x9, 0x7, 0x8, 0x5}, {0x8001, 0x7c, 0x8, 0x8001, 0xa49, 0x80000001}, {0xfffffffa, 0x1000, 0x7f, 0x745, 0x5, 0x5}, {0x0, 0x0, 0x3, 0x81, 0x4, 0x26ca}, {0x7fff, 0x5, 0x5, 0x0, 0x1f, 0x2}, {0xfffffff8, 0x0, 0x3f, 0x0, 0x7, 0x6}, {0x3, 0x0, 0x101, 0x100, 0x10000, 0xa8}, {0x4, 0x3, 0x87ac, 0x5, 0xff, 0xffffffff}, {0x26, 0x6, 0x1ff, 0x6, 0x9, 0xbb6c}, {0x4507, 0x6, 0x9, 0x3, 0xffffffff, 0x2}, {0x1, 0x3476, 0x4, 0x7, 0x25a, 0x9}, {0x9, 0xfff, 0x4, 0xa845, 0x80000001, 0x3ff}, {0x7f, 0x5, 0x10001, 0xc4, 0x2, 0x80000001}, {0x7, 0x7, 0xc175, 0x6, 0x5806b9cc, 0x7}, {0x3c, 0xf9e, 0x5, 0x4, 0x2, 0x1000}, {0x6, 0x101, 0x2, 0x4, 0xaae, 0x237e}, {0x52, 0x5a, 0x1ff, 0x3, 0x1, 0x3f}, {0x4, 0x10000, 0x7, 0xffffffff, 0x6e70, 0x1ff}, {0x0, 0x7ff, 0x8, 0xa9, 0x800, 0x200}, {0x3ff, 0x1, 0x7ff, 0x2, 0x4, 0xfffffffa}, {0x8, 0x4, 0x2000000, 0x8, 0x7f, 0x1ff}, {0xf85, 0x80000001, 0x8000000, 0x5, 0xcabe, 0x2}, {0x3, 0x80, 0x5a, 0x8f, 0x3, 0x3}, {0x3, 0x8001, 0x5, 0xc251, 0x40, 0x6}, {0x4, 0x10001, 0xfffffffa, 0x4, 0x4}, {0x2, 0xfffff801, 0x8, 0x2, 0x2, 0x6}, {0xff, 0x8, 0x7, 0xba5d, 0x0, 0xfffffff9}, {0x7, 0x8, 0x4, 0x6, 0xe37a, 0x3}, {0x2, 0xfffffff9, 0x200000, 0x3, 0x18000, 0x7}], [{0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4dbe90ab90476b77}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x7}, {}, {0x2, 0x85ea8034aeabdc2d}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x5}, {0x3, 0x1}], 0x1}}]}, {0x66, 0x6, "58305fa54b1c11231a2015c35f0e3fd4b372fe70b6879c0a8a906e85177b417ab0593738815c7f15b02cf8cb98f6c33495acc57a6b41eebdb546440d5f26fe3a79ec1a68e9584af05e63fa3e980a5478a796c98ddd9be5285fd055cddaae0375b5ed"}, {0xc}, {0xc}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x270, 0x4, [@m_mirred={0x26c, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x0, 0xffffffff, 0x100}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x0, 0x8, 0x800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9, 0x1, 0x10000000, 0x3ff, 0x85ba}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcf8, 0xffff, 0x0, 0x9}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x200, 0x10000000, 0x11d, 0x3f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x3, 0xfffff682, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x10000000, 0x1f, 0x9}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x7, 0x1000, 0x80000000}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3f, 0x0, 0x4, 0xe19}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10001, 0x3, 0x97d2, 0x3}, 0x3, r6}}]}, {0xfd, 0x6, "602f7456995c4a10760a194686f96108b81b9a3783fcf5bfe11fda002452635dfef2377868e951c59414763b35560bf6227367f778bfeb9d2c11aba7cbfdccc31e4f46bbb303be5c533251dc0b410444e627bc705a7afce9ed2aed7738a3d29fab8dff6b9de47899f692e2d51f074bf261e222910301ba4414662111d86181c8cb88bb20a2290e40f574a69eab49888b44246f99854579e832dea92c27ba6df895a331e88e07606ee03e41605327858ca3f453dba2816e2b776bf534b63f416b85b4694fb0adb29080f7c559bf4c5d70d27fe528c539b79c087136c7ae4919d380215d1178715478d77933c8266d30ef6f9329ce0389a9f489"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_ACT={0x16f8, 0x4, [@m_csum={0x1068, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffb4, 0xc0, 0x2, 0x2, 0x5}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x7, 0xffffffffffffffff, 0x6}, 0x7e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x120, 0x0, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x2, 0x5, 0x0, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xd6, 0x6, "77fc21e22341f7ca61605a736c6ec6c443940d65094c52ff6d74e44d72c8a9662b73a3c9f549a9f21753223b44797ecbdae10cd18ba4f27ad040ae1cf67962d1a391cc85708a0473d29b02361e264589b03173ad65142a6e2f37554e4239127add5393fc193bf764aa6b21a17a69300075796268f28b94ae6d140fceb249333ca82a61a07a9ca036a85830c7f53f5632d777b4de4f7fc6038b64ab30d13fa23df6896b6cb4becf7475bdbdf5030005865d130df88d888e1ba57c77f422adfce10504ec0bb6bdd9c9f8afddbfef5b6b44e0b4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x74, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1b835c1176ca985afc8260b20e861cb54a77577bf55a2d848721d33b94bccfa22d3927155042980248296899b23c8c9d5ce0cf2d71be65800f062c64d22319eb8af02a91818c134f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_csum={0x19c, 0x1f, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfffffff9, 0x20000000, 0x5124, 0x1}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000000, 0x4, 0x6, 0x6}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xfffffbff, 0x6, 0x5, 0x22e}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x7, 0x4, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x2, 0xadde, 0x6}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x100, 0x1, 0x1f, 0x9}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x80000001, 0xffffffffffffffff, 0x0, 0x3}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa733, 0xffffffff, 0x5, 0xe, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x8, 0x5, 0x3}, 0x75}}]}, {0x73, 0x6, "5f38cd32d1ea4347017faded234d7701e3507bf4d02dceea84d155eda181f8ae82e8ee31d386eec1ab7d05ae7b3f8b1ffe046fc5b7e553699e7a71be67009d20463eee5cff40e195e37b286564b70b18471fad3b0b4db221a6786e6432c3c3158fa1b2ef2fe7b749f9ac671f0a3821"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x10c, 0xc, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x7, 0x101, 0x8449}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0xffffffffdffffffe, 0xff, 0x101}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1f, 0x3, 0x3, 0x9, 0x7fffffff}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0x9, 0x2}, 0x2f}}]}, {0x6f, 0x6, "037a6d9e66b1bd0c1476ec50a54aa1b237f1dcfad276d9f745f200c320339d314fa2a149971c3e98b7b58556effb5c0112b92cff9c8d86f3c5c4ebc5002cba39ccd52f0f2fba90e9090e0f74c7c22a5cdc18209fd01b7e76732af0cf7ee07732ab0aa61bbfa0599d950cf4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0xc9, 0x6, "5f2d36f5373f37fccc05a03c3684922b301e6f9ac104f3ede5a382e4b3adfc9732327bcf343e99a5b2034307b6cb9086867339d9e510ad061685ffab440e3879850046539719e41f921f0aab1a8b5e7beab06790ebddb3a15c8f6abd7e743525838ddf7e7ccb255cdf3424d44a0ef449ae54511c88233b3c9d277b3c3c4265fa7c8378930039aecc32b320ea06e2c19eb5f43b93c73bd2d808b6491bc27ae3d1d54b7c526393300e1726191fb6352a71df122ab153e071d788ab25fd598000fd094cb11f27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb0, 0x6, "2f052c67080d74cb61cac600040c37219e9a4ba2d64890c55724ffc86aac9678828c04840cc3be761a03c6805333f8f855e3b8e2af7a8d1301953ec3d010bf90ffabc76cf26568dab6fc50c2944e86e9d99d13b8985c0ab67e103210c8e232d97b3f3f0f9f79b954a61c1664cbd21193e0c3a5b16c75800bd923d98f7400777b48f09eca5b2c8555755244b34f08c094ffa40be46801804dc5182293a1458548e74ef506ef66642c1bc3b145"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x6c, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}]}, {0x1a, 0x6, "2d80fd1bbd6fa05b60198d43c44a7557dbb064ec04dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_MASK={0x8, 0x5, 0x3c3c}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3808}, 0x1, 0x0, 0x0, 0x10}, 0x40880) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r7, 0x2, 0x20000000) 00:50:29 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:30 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r2}, 0x48) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000039c0)={&(0x7f0000000180)=@delchain={0x3808, 0x65, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x2, 0xfff2}, {0xf, 0x7}, {0xffee, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @filter_kind_options=@f_fw={{0x7}, {0x37ac, 0x2, [@TCA_FW_ACT={0x1e20, 0x4, [@m_nat={0x130, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0xffffffffffffffff, 0x2, 0x3}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb2e, 0x20000000, 0x80, 0x7a}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x1, 0x20000000, 0x2, 0x273e5daa}, @local, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3f, 0x6, 0x400, 0x3}, @broadcast, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xffffffff, 0x7, 0x1, 0x2}, @local, @private=0xa010100}}]}, {0x3f, 0x6, "255f471893a6ea0a34874f157241a8f24f71f7ada55298cfad057ac72261ce865f5dc391893450c59b4bd3d4e453abe76b69847bd76eb3aedaa65b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1cec, 0x6, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x0, 0x3, 0x5, 0x5, 0x2}, 0xff, 0x0, [{0x5bf, 0x1, 0x101, 0x6, 0x3, 0x1}]}, [{0x8, 0x1, 0xc84, 0x7ff, 0x3, 0x9}, {0x5, 0x1, 0xfffffeff, 0x9, 0x1, 0x9}, {0x2, 0x9, 0xaa6, 0xffffffff, 0x1, 0x100}, {0x9, 0x20, 0x9, 0x7f8, 0x7, 0x7}, {0x5794, 0x7, 0x3, 0x800, 0xfffffff8, 0x401}, {0x9, 0x0, 0x1, 0x3f, 0x2, 0x9}, {0x101, 0x5, 0x7, 0x800, 0x1, 0xfffffff7}, {0x0, 0x3, 0x7, 0x1, 0x8001, 0x3}, {0x7, 0x10000, 0x81, 0x6, 0x62, 0x3f}, {0xfffffffb, 0x8, 0x6, 0x80000001, 0x3f, 0x8}, {0xd0, 0x81, 0x3f, 0x0, 0xc785, 0x5}, {0x1000, 0x4, 0x80000000, 0x6, 0x1, 0x1}, {0xffff, 0x97f1, 0x6, 0x7ff, 0x81, 0x2}, {0x6, 0x2, 0x1, 0x15, 0xfffffffe, 0x7}, {0xfffff48b, 0x1000, 0x6, 0xffffffff, 0x1, 0xcf}, {0x9dc1, 0xfffffffe, 0xfff, 0xb9b9, 0x1, 0xfffffffe}, {0x8, 0x1f, 0x5, 0x81, 0x5, 0x3}, {0x7fff, 0x3ff, 0x4, 0x3, 0xffffff81, 0x3}, {0x7, 0x1, 0x2, 0x0, 0x3, 0x1}, {0x8001, 0xd33, 0x0, 0x3dee, 0x9, 0x8}, {0x80000001, 0x2b, 0x5, 0x80000001, 0x20, 0xfffffff7}, {0x3, 0x1, 0x80000001, 0x0, 0x9, 0x6}, {0x9, 0x6, 0x4526, 0x7f, 0xdac, 0x2}, {0x2, 0x17, 0x7fff, 0x1ff, 0x5, 0x80000001}, {0x0, 0x0, 0x1a742960, 0x1ff, 0x2}, {0x9, 0x6, 0x4, 0xfffffff9, 0x5, 0x81}, {0x2, 0x9, 0x8, 0x401, 0x5, 0x10001}, {0x2, 0x9b80000, 0x3, 0x1, 0x417, 0x5}, {0x7, 0x8, 0x20, 0x9, 0xb5, 0xfffffffa}, {0x49db379f, 0x9, 0x5, 0x1, 0xfb5, 0x54}, {0x2, 0x5, 0x3, 0x0, 0x1ffe000, 0x8}, {0x3, 0xe, 0xd150, 0x3699, 0x4}, {0xf9, 0x1, 0xbace, 0x7, 0x8000, 0xffffffff}, {0xfeb, 0x1, 0x10001, 0x7, 0x5}, {0xffffff3c, 0x1, 0x7, 0x0, 0x3, 0xc}, {0x8000, 0x81, 0x40, 0x0, 0x4, 0x2}, {0x89, 0x401, 0x9865, 0x3, 0x3, 0x9}, {0x6ee6, 0x1, 0x3f, 0x9, 0x8, 0x100}, {0x200, 0x3, 0x5, 0x9, 0x94, 0x2}, {0x7df1, 0x0, 0x23, 0x2, 0x33f, 0x55}, {0x6, 0x6, 0x80000000, 0x80000000, 0x7, 0x2}, {0x5, 0xffffcb4a, 0x6, 0x9, 0xa6cd, 0x8}, {0x8, 0x3, 0x5, 0x2, 0x1, 0x9f75}, {0xd790, 0xa3a, 0x800, 0x7, 0x9, 0x7}, {0x5, 0x5, 0x20, 0x1, 0x14, 0x5}, {0x7, 0x3, 0x2, 0x2fbe, 0x4, 0x1e}, {0x5, 0x401, 0x8000, 0x400, 0x40, 0x1000}, {0x40d, 0xcb21, 0x8, 0xde64, 0x6, 0x5}, {0x8, 0x10001, 0x7fff, 0x8af0, 0x5, 0x2}, {0x6, 0x80, 0xfffffffc, 0x140000, 0x8, 0x8000}, {0x1, 0x7fff, 0x40, 0x7, 0x7fffffff, 0x6}, {0x7fff, 0xcf0a, 0x3f, 0xffffffff, 0x100, 0x5}, {0x7ff, 0x6, 0x6, 0x3, 0x200, 0x8}, {0x1, 0x4, 0xfffffffc, 0x85, 0x4, 0x5de8}, {0x0, 0x6, 0x8, 0x0, 0x0, 0x5}, {0x95a, 0x2, 0x5, 0x4, 0x1f, 0x1}, {0x200, 0x10000, 0x4, 0x3060, 0x1ff, 0x8}, {0x5, 0x8, 0x8, 0x9, 0x4}, {0x2, 0x3, 0x8001, 0x2, 0x165, 0x400}, {0x3, 0x32a94e3b, 0xfffffbff, 0x5, 0x0, 0x76a0}, {0x7, 0x4, 0x4, 0x81, 0x10001, 0x4}, {0x7, 0x7, 0x9, 0x8000, 0x2, 0x5}, {0x8b5b, 0x7, 0x8, 0x401, 0x5b3, 0x6}, {0x0, 0x3, 0x6, 0xea4, 0xc3d0, 0x7}, {0x41, 0x5, 0x99ddfef7, 0x1, 0x52, 0x3f}, {0x7, 0x2, 0x80000001, 0xbf, 0x3}, {0x3f, 0x5, 0x7, 0x7, 0x1ff, 0x8000}, {0x3611, 0x8, 0x1, 0x2, 0x1, 0x80000000}, {0x6, 0x9, 0x587, 0x9c, 0x101, 0x7c66}, {0x6, 0xfffff8af, 0x9, 0x40, 0x6, 0x7fff}, {0x1ff, 0x1, 0xfffffffd, 0xfffffff9, 0xe8ad, 0xa0}, {0x1, 0x3, 0x10001, 0xfffff001, 0x5}, {0x6, 0x5, 0x9, 0x4, 0x20, 0x6}, {0x2, 0x2, 0xeeb, 0x7, 0x9, 0xa1b}, {0x8, 0x7, 0xffffffff, 0xffff7fff, 0x80}, {0x400, 0x10000, 0x2, 0x80000000, 0x0, 0xe65c}, {0x6, 0x8, 0x14000, 0x3, 0x3, 0xfffffffc}, {0x5, 0x0, 0x7fffffff, 0xfff, 0x8, 0x9}, {0x5, 0x1, 0xcc, 0x1ff, 0x3}, {0x8, 0xbf1, 0x4, 0xaa53, 0x7, 0x6}, {0xbf, 0x9, 0x3, 0x3f, 0x2, 0x3}, {0xda5d, 0x1, 0x7f, 0x9, 0x1}, {0x401, 0x9, 0x1f, 0x80, 0x7, 0x7}, {0xa6cb, 0x1000, 0x8, 0xffffffff, 0xffffffff, 0x985}, {0x1, 0x2, 0x24, 0xfffffb90, 0xa2d65c1, 0x5b}, {0x7, 0x1f, 0x1, 0xfffffbff, 0xfff, 0x8001}, {0x7ff, 0x101, 0xffffffff, 0x401, 0xdc, 0x7}, {0x0, 0x0, 0x9, 0x7f, 0x2, 0x9}, {0x9, 0xffff, 0x2, 0x6, 0x5, 0xfffff1e9}, {0x3, 0xfffffffb, 0x4, 0x4a6, 0x1000, 0x3}, {0x59b, 0x4, 0x3e, 0x7, 0x9, 0x400}, {0x2, 0xfffffb4c, 0x4, 0x9609, 0x1, 0x7fff}, {0xb46, 0x81, 0x7, 0xe3, 0xffff0000, 0x7}, {0x80000001, 0x3, 0x1, 0x0, 0x80000000, 0xffffffff}, {0x3, 0x8001, 0x7fff, 0x8, 0x3, 0x3}, {0xffffffe1, 0x7, 0x5, 0x9, 0x7, 0x8}, {0x10001, 0x8, 0xffffffff, 0x170b1231, 0x0, 0x7f}, {0x401, 0x4, 0x81, 0x0, 0x10000, 0x5}, {0x2, 0x0, 0xff, 0x800, 0x7, 0x1}, {0x8, 0xe3b5, 0x3, 0x2, 0x1f, 0x6}, {0xfffffff7, 0x8, 0x7f, 0x3, 0x10001, 0xba4}, {0x716, 0xffffffff, 0x2, 0x6, 0x1ff, 0x100}, {0x6, 0x4, 0x81, 0xa, 0x3, 0xe7a}, {0x8, 0x4, 0x9, 0x5, 0x5, 0xff}, {0x1, 0x7fffffff, 0x80, 0x2, 0x8, 0x1}, {0x3, 0x9, 0x29a0, 0x4, 0x6, 0x3}, {0x1000, 0xd005, 0x0, 0x5, 0xfff, 0x1}, {0xfde1, 0xcb4, 0x5, 0x4, 0xd517, 0x400}, {0x1, 0x29d, 0x80000000, 0x9, 0x5}, {0x9ea9, 0x5, 0x2, 0xfff, 0x5}, {0x80, 0x3, 0x3, 0x5, 0x6, 0x5}, {0x1, 0x7a06, 0x7, 0x3, 0x7, 0x1}, {0x10000, 0x4, 0x1, 0x3ff, 0x5, 0x5}, {0x2, 0x4, 0x80000000, 0x2, 0x8000, 0x7}, {0x9, 0x0, 0x6, 0x4, 0x4, 0xfe}, {0x5, 0x4, 0x5, 0x0, 0x4, 0xda}, {0x9, 0x4, 0x13, 0x3, 0x3, 0x1}, {0xa21c394, 0x4, 0x9, 0x2, 0x4, 0x401}, {0x3, 0xe8aa, 0xfffffffc, 0x4349, 0x3, 0x1}, {0x5, 0xfffffffb, 0x200, 0x6, 0x0, 0x7}, {0xffffffff, 0xffffffe1, 0x1ff, 0x8, 0x7, 0x9}, {0x2, 0xfffff02b, 0x8, 0x7}, {0x9, 0x0, 0x20, 0x401, 0x80, 0x80000000}, {0x0, 0x1, 0x6, 0x8, 0x3ff, 0x400}, {0x1ff, 0xfffffffa, 0x1, 0x2, 0x1f, 0x8}, {0xda, 0x7f, 0x1, 0xa412ac8, 0x80000001}, {0x1c2b, 0x3, 0x7, 0x7, 0x4, 0x10000}, {0x8, 0x2, 0x6, 0x8001, 0x8, 0x5}], [{0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x97723a61f14a2a6f}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x8a71733e1e343f9c}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1b9b23cf864c2858, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x0, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0xc106f1d4ecd52aa5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0xe18c4e2a7ca67420, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffff10, 0x55, 0x3, 0x3, 0x2}, 0x42, 0x1}, [{0x400, 0x1, 0x200, 0x6, 0x8001, 0x3}, {0x1f, 0xa7, 0x0, 0x6, 0x8, 0x5}, {0x5, 0x4, 0x80000001, 0x6, 0x1f}, {0x2, 0xeb6, 0x6, 0x5, 0x80000001, 0xfffffffa}, {0xc473, 0xffff, 0x1, 0x80000001, 0x7, 0x8}, {0xffff078a, 0x4e0, 0x8001, 0xbd1, 0x9, 0x4}, {0x4, 0x1, 0x0, 0x3, 0x2, 0x6ce}, {0x7, 0xd1a3, 0xcd, 0x6, 0x8, 0x1}, {0x8, 0x309a3a4, 0x4e021c71, 0xc7, 0x800, 0x3}, {0x8, 0x400, 0x100, 0x9, 0x8, 0x200}, {0x82f4, 0x100, 0xb60, 0xfff, 0x0, 0x481}, {0x8000, 0x489, 0x2, 0x5, 0x0, 0x3}, {0x1, 0x62, 0x8, 0x2, 0x0, 0x7}, {0x6, 0x3ff, 0x3, 0x7, 0x4, 0xac}, {0xffffff00, 0x5, 0x80, 0x2, 0x0, 0x1b39}, {0x8173, 0x701, 0x3f, 0x0, 0x2, 0xc14}, {0xfff, 0x2, 0x7, 0x4, 0x823, 0x7ff}, {0x6, 0x8001, 0x9, 0x1, 0x8, 0x10000}, {0x5, 0x8001, 0x8001, 0x1000, 0x0, 0x80000001}, {0x101, 0x4, 0xfffffffb, 0x5, 0x10000, 0x7}, {0xfff, 0x1, 0x3, 0x1, 0x5, 0x1}, {0x6, 0xffffffff, 0x200, 0x40, 0x0, 0xfffffffc}, {0x8001, 0xfffffff8, 0x200, 0x3, 0x9, 0x10000}, {0xaedd, 0x2, 0x3ff, 0x7, 0x7, 0x2}, {0x7fffffff, 0xff, 0x7ff, 0x1ff, 0xfffffffe, 0x8}, {0x80000001, 0xfffff714, 0x2b7, 0x1, 0x20, 0x7ba8}, {0x400, 0x101, 0x1, 0x9, 0x0, 0x100}, {0x6df6a0e4, 0xc0, 0x8, 0x7fff, 0x99c7, 0x4}, {0x1, 0x3ff, 0x8, 0x7, 0x7, 0x8}, {0xfffffffb, 0x2, 0xfb99, 0x4, 0x3, 0x1f}, {0x0, 0x3, 0x9, 0x0, 0x80000000, 0x9}, {0x7, 0x80, 0x3, 0x0, 0x2, 0xfff}, {0xff, 0x10001, 0x81, 0x5}, {0x3, 0x5, 0xfff, 0x7ff, 0x4, 0x7}, {0x3, 0x0, 0x2, 0x0, 0x9, 0x37c}, {0x4, 0xf5, 0x6, 0x8, 0x8, 0x5}, {0x1, 0xef, 0x7ff, 0x0, 0x7a, 0xffff}, {0x1, 0x1, 0xfc, 0x4, 0x3, 0x3ff}, {0x5, 0xfffffff9, 0x4, 0x8, 0xffff, 0x8}, {0x7, 0x0, 0xfff, 0x2, 0x5, 0x7}, {0x2, 0x0, 0x4, 0x80000001, 0x3, 0x200}, {0x3f, 0xffffffff, 0x3, 0x4, 0xf6, 0x1f}, {0x4, 0x6, 0x6, 0x10001, 0x8, 0x3}, {0x384, 0x8, 0x1, 0x8000, 0xffffffff, 0x1000}, {0x0, 0x7d9f, 0x8d, 0x5, 0x2, 0x5}, {0x100, 0x44, 0x2, 0x4, 0x10001, 0x10001}, {0x400, 0xfff, 0x2, 0x3, 0x6, 0x3ff}, {0x9, 0x7, 0x7559, 0x40, 0x5}, {0x2, 0x9, 0x6, 0x1, 0x7}, {0x1, 0x1f, 0x1, 0xada7, 0x2, 0x6}, {0x81, 0x4, 0x0, 0xfffffff7, 0x9, 0x7}, {0x5, 0xff1, 0x8, 0x7, 0x9, 0x4b7}, {0x8, 0x1, 0x9, 0x3, 0x6, 0x3f}, {0xfffffff9, 0x7, 0x80, 0x80, 0x5208c79, 0x800}, {0x101, 0x18d, 0x0, 0x6, 0x2, 0x7}, {0xfffffffd, 0x10000, 0x6, 0x4, 0x4, 0x401}, {0x5, 0x81, 0x20, 0x9, 0x7f, 0x300}, {0x40, 0xfffffffb, 0x8, 0x1, 0x1, 0xa40}, {0x8, 0x40, 0x1, 0x160, 0x1e3, 0x80000001}, {0x9, 0x2, 0x7, 0xf1, 0x0, 0x1000}, {0x0, 0x400, 0xfffff800, 0x8, 0x8001, 0x4}, {0x4, 0x5, 0x6d85, 0x5, 0x2, 0x40}, {0x2, 0x8001, 0x3f, 0x0, 0x6, 0x1}, {0x32fc, 0x6, 0x1000, 0x80000001, 0x8, 0x95}, {0x6, 0xffffffc0, 0x2, 0x3, 0xfff, 0x100}, {0x0, 0x1f, 0x1, 0x8, 0x5, 0xc0000000}, {0xfffffffe, 0x6, 0x9, 0x1f, 0x40, 0x5}, {0x1, 0x8, 0x80000001, 0x20, 0x3, 0x9}, {0x7, 0xec0a, 0x4, 0xffff, 0xffff0000, 0x8}, {0x100, 0x8, 0x1, 0x3f, 0x1, 0x9}, {0xfffffffe, 0xfffffffb, 0x2067, 0x81, 0x2, 0x4}, {0x3, 0x8, 0x6, 0x80000000, 0x8001, 0x9}, {0xd8, 0xfe, 0x3f, 0x9, 0xfffffffe, 0x2}, {0xf9c, 0x5, 0x80, 0x0, 0x100}, {0x4, 0xca, 0x6, 0x2, 0x8, 0x8}, {0x10000, 0x4, 0x46e, 0xbc, 0x1, 0x3}, {0xde69, 0x5, 0x7, 0x100, 0x400}, {0x101, 0x2a183d22, 0x81, 0x200, 0x20, 0x1}, {0x6, 0x3, 0x6, 0x0, 0x7, 0x4}, {0x9, 0x0, 0x3, 0xff, 0x3ff, 0x1}, {0x8, 0x69f, 0x1, 0x41d3, 0x4, 0x2}, {0x4, 0xfffffffd, 0x3, 0x4, 0x1, 0x8}, {0x590, 0x4, 0x1000, 0x2, 0x1, 0x7}, {0x401, 0x40, 0x2eaa, 0x5, 0x6, 0xffffffff}, {0x7, 0x5, 0x0, 0xe5f, 0x4, 0xfffffffa}, {0x7, 0x2, 0x7, 0x6, 0x1, 0x7ff}, {0x1, 0xfffffffe, 0x5, 0x4, 0x1ff, 0x1}, {0xde, 0x80, 0xfb, 0x7, 0x100, 0x9}, {0x20, 0x1, 0x1c, 0x2, 0x1, 0x7fffffff}, {0x7, 0x9, 0x200, 0x0, 0x9, 0xb39}, {0x10001, 0x492e2601, 0x9, 0xf55e, 0x3, 0x2}, {0x9, 0x22, 0x3, 0x5, 0xfffffffe, 0x8}, {0x4, 0x8, 0x9, 0xfffffff9, 0x5, 0x5}, {0x1401, 0x5, 0xfffffc01, 0x100, 0x8000, 0x7f}, {0x1, 0x1, 0x2f, 0x8, 0x9}, {0x8000, 0x4, 0x101, 0x9, 0x1, 0x52}, {0x5, 0x3, 0x4, 0x3, 0x66e, 0x5}, {0x5, 0x80000000, 0x4, 0x20, 0x9, 0xffffffff}, {0x0, 0x200, 0x1, 0x64, 0x9, 0x8}, {0x6, 0x2, 0x9, 0x7, 0x8, 0x5}, {0x8001, 0x7c, 0x8, 0x8001, 0xa49, 0x80000001}, {0xfffffffa, 0x1000, 0x7f, 0x745, 0x5, 0x5}, {0x0, 0x0, 0x3, 0x81, 0x4, 0x26ca}, {0x7fff, 0x5, 0x5, 0x0, 0x1f, 0x2}, {0xfffffff8, 0x0, 0x3f, 0x0, 0x7, 0x6}, {0x3, 0x0, 0x101, 0x100, 0x10000, 0xa8}, {0x4, 0x3, 0x87ac, 0x5, 0xff, 0xffffffff}, {0x26, 0x6, 0x1ff, 0x6, 0x9, 0xbb6c}, {0x4507, 0x6, 0x9, 0x3, 0xffffffff, 0x2}, {0x1, 0x3476, 0x4, 0x7, 0x25a, 0x9}, {0x9, 0xfff, 0x4, 0xa845, 0x80000001, 0x3ff}, {0x7f, 0x5, 0x10001, 0xc4, 0x2, 0x80000001}, {0x7, 0x7, 0xc175, 0x6, 0x5806b9cc, 0x7}, {0x3c, 0xf9e, 0x5, 0x4, 0x2, 0x1000}, {0x6, 0x101, 0x2, 0x4, 0xaae, 0x237e}, {0x52, 0x5a, 0x1ff, 0x3, 0x1, 0x3f}, {0x4, 0x10000, 0x7, 0xffffffff, 0x6e70, 0x1ff}, {0x0, 0x7ff, 0x8, 0xa9, 0x800, 0x200}, {0x3ff, 0x1, 0x7ff, 0x2, 0x4, 0xfffffffa}, {0x8, 0x4, 0x2000000, 0x8, 0x7f, 0x1ff}, {0xf85, 0x80000001, 0x8000000, 0x5, 0xcabe, 0x2}, {0x3, 0x80, 0x5a, 0x8f, 0x3, 0x3}, {0x3, 0x8001, 0x5, 0xc251, 0x40, 0x6}, {0x4, 0x10001, 0xfffffffa, 0x4, 0x4}, {0x2, 0xfffff801, 0x8, 0x2, 0x2, 0x6}, {0xff, 0x8, 0x7, 0xba5d, 0x0, 0xfffffff9}, {0x7, 0x8, 0x4, 0x6, 0xe37a, 0x3}, {0x2, 0xfffffff9, 0x200000, 0x3, 0x18000, 0x7}], [{0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4dbe90ab90476b77}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x7}, {}, {0x2, 0x85ea8034aeabdc2d}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x5}, {0x3, 0x1}], 0x1}}]}, {0x66, 0x6, "58305fa54b1c11231a2015c35f0e3fd4b372fe70b6879c0a8a906e85177b417ab0593738815c7f15b02cf8cb98f6c33495acc57a6b41eebdb546440d5f26fe3a79ec1a68e9584af05e63fa3e980a5478a796c98ddd9be5285fd055cddaae0375b5ed"}, {0xc}, {0xc}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x270, 0x4, [@m_mirred={0x26c, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x0, 0xffffffff, 0x100}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x0, 0x8, 0x800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9, 0x1, 0x10000000, 0x3ff, 0x85ba}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcf8, 0xffff, 0x0, 0x9}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x200, 0x10000000, 0x11d, 0x3f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x3, 0xfffff682, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x10000000, 0x1f, 0x9}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x7, 0x1000, 0x80000000}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3f, 0x0, 0x4, 0xe19}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10001, 0x3, 0x97d2, 0x3}, 0x3, r6}}]}, {0xfd, 0x6, "602f7456995c4a10760a194686f96108b81b9a3783fcf5bfe11fda002452635dfef2377868e951c59414763b35560bf6227367f778bfeb9d2c11aba7cbfdccc31e4f46bbb303be5c533251dc0b410444e627bc705a7afce9ed2aed7738a3d29fab8dff6b9de47899f692e2d51f074bf261e222910301ba4414662111d86181c8cb88bb20a2290e40f574a69eab49888b44246f99854579e832dea92c27ba6df895a331e88e07606ee03e41605327858ca3f453dba2816e2b776bf534b63f416b85b4694fb0adb29080f7c559bf4c5d70d27fe528c539b79c087136c7ae4919d380215d1178715478d77933c8266d30ef6f9329ce0389a9f489"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_ACT={0x16f8, 0x4, [@m_csum={0x1068, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffb4, 0xc0, 0x2, 0x2, 0x5}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x7, 0xffffffffffffffff, 0x6}, 0x7e}}]}, {0x1004, 0x6, "95380809df71b12c8fc12cd43cd459ac4072b66eb32197e1dd6ad1d828ca2112b24d16f05405c83b0d416e34c807910a411462ce17c96323bf734c267fdaa068cc8e7691c6f18b9ecb12aeeb0e340534f2e5cc10402a5a7ff5ad656099f76590732260758b385b5bab82b30b3644891e8de5266d4de92e8fb9ddab03a9126a7a7b15af947670d0e9b9c13ab519ff14b2025edc67acf3dc609ed741e697e4a31410a5c689b58576b8c509fe0798fb8383ea54cbbca1e7e5b10fdcffd98736b824bdf05a824cb69358c166c45892166ed48824f75895269c0f6e60e5a16660f439dc60ce8ab940f4421ab4254da0c866629e7572d3a29da3fc8840021be3721efaacbf2a191b381741ab0950a883504f72e5099f00819e5d4f58a16cd3a03aa11dca90b97222b6e0f3350fbcade36ace65f8d90a864ace01b129372fe66c6bd930b6cf14cd6cfb41fd1a51562146862692caaeb00894c7abd0b23233bfc470b6cd007ba0ecb36a399a756954030be37ff1d49892f9fbd0b1448d892be032f0b182b431170ffb554a9c70f81f0c56d197f61d6f688b37f8defb6124b76f6c58418038b7c72c1759a56de1969d9aa5e34214e68f8aee4fef3d13c03640c5b6e21457030bb1dd35133c5d88880fc8fff566a893501a2985d56087e1898e199d391e368ed003fbc71d1c7b484e61bab2f3f24c1570db53576977d1e7ebffc4bf1e49188d7806c32e0537534da245706fa79898f49499509e45aa1691640374341a024f5bc36867e4168eb5c82dda99d3e0b5d276feaf9d1c535b8aff3b2a8cb23e50283d94f8ab34887522d943f74fa10919a62257826293e81236d687a05065c248bbcbd3b88f7a46f33b91df0670941e1df640b6ea540e4a4c170546417dcd2df5313eeb88e7fec30cbf86fcbdf3e7c3fbf39616ff2ed85f790910bc1f9ee7f63a638594002f7dc397aa0e0f10c5a4718d346504c8085772d89b1b46f637910b73b53747041626ab4ae8957441760a3f01a23d2a79ffc663a2f63b348bb9da6a6fe1bd42e5909a55bf1a481c3fa719b1ec21956a38b0eea47dba538934f89f550803f1dcfa90d9cd223ddae5f398bf43a1336c5835a7ab14b6462f4d7bcda627cb55884f16e507319d6c7c56bd958ba3ee8a74531bfe8d8125fd16adce41fac8199233458868dd1095753f2588ca5519a0ee9db0689b48d884fe63db5edac1c003c5654d719d9bab29be3f272f23a1b4342ec46bd3392ed7954cdcfdb2a6aa353be887fa290c0bee3e8127c1f325e79c92ee0b4971d2b5007536f7b6e22a5fc1f4b1c2aae46c29195d945b67dd65250d890412359c95f628934adc42ced5365a3f8daf06f17b73900c4e046f4a021b11fc484ec941ffe7d8f0d872c1547367bbc1b5d355397454110012ee5b40e28b72618c5126cd1c897951203f008cab005a3225d95d96500994115e51f123d9dbe16aef927ccb498017e1e3731baba97ad49ba53f1e366abae7723fcf3f157bc30cd05ea6a3799bbb68b87ff50b6f5bcfaada7d5b784ee31baafd6e4b78688135ed142f020e98e0d255e27c613ee948e99e312d67a37396a0802bd2a1a94cce825a58f759ff9e10e345c1ba23439c643ea3048ff12dd2b850bd8d5d79b79786866008b2e63698455f66783ebd514da66337c5d08304f4a65b2b234f7aee05843379671709450d78543c50341bfbb742286ec855d7cbc517dbea642529e3b263f453517f449a5bffc6bfa8129446ec182f11433b33d6b03fc3f49776d52fb53c3763ae58ccd38412d4ce1a11ce0dfa27d9c5d5e62151554ae020245f2f50c5311c8d8f982aa165edc2e22f2da54728b5e54f97a1369792f2f5cb007658b591b5e87c76d8cfb81dfdce5dddae735af8efe632ed8da18b3313f17a82019c34b3890dbbcb6fe794283c87996450f7807007d63df0060bfd9f72aef592bd6254d7a98b8ad29e869d4b1eab56c75a1f1d77f2f64db0e1476fe5a54181b13e11e1d827082d2d78e20c2b603975bba40b48f8924ea0f23cf76f9f7656f5dcb763461ca2bf04266280eb9f3c7fe02a862bd8c8c744373ecd647be3a8237efa905b4b1f58f75c9c8cc0ab04f4ee70374123dc895d982f3bd87a6da666ed0440cfd3886bd4b5c2ff4f84a5a96640392a8e2db75a15fd2c157103b03fae2c31627678ac731f3462cae81cbde64c73736a01a1fe25fb8c5b1a3f9e1b1dd97ecf30349def4a44c7e197e56b779779cae5a37238ad28f971aa31492d082d720ece70cc09b43d846247bf3fb36fa8bd8d429bc10129dfb3e33fe1a4cc7ee431d199f8b6421b594ce9412d8382d6471f8a8fd805d80efd527d262f11bcbc0706061d95969935993afec6ac5784c00ba00dfa01a649813ca7d2e2aa89f031f0470a36e4071c73c92d7f63d0f54a905071cb38723df64d8e0541f1318e06f4823fbcaab2cc3077a74a229c2f97cc028bc6eee5391ed3f7af5efbfceb8db9936355b17bcdb0f8ba6210bda1e2220f12b306cd6642fe20212ece0c7a938353784b04926389a47d323b8d8e64431eb7112994ea7c667d712fee9b8efdb7a1b3e1d4c136d89993e453611a4edddb5ed9fa1ae39926e1c47a890879550a1ccabb1bb75b6e625c78a2ede9605d2003fd1db21b024028df3fda04db164a382ee09009ba88ddb2a1ca11c75afc4073d70b46326ca71301c79efd6bd03f9c81e2631a15c83cea8a0630ba6ac3e6cef3ffffcadab9d564e3cc09f192257f6cec534de3b8d4fc1b90fb9ddafd0a49639d51921d196e78e16f87db878d7ba06b7069dbf2ea03fe665df6d492cdf61a90138fb82b52132e968404d2eaa7699d98d37e7607b1a8cd489f234affac1fb88b2975ce9ae5f49dcb6c1fd8f9f04db1b1b0ddda92ae8809fba91ea6443dc4edd233dc146ef3b5cae4bde9b47d45fa80c4cc31a89a9ab94c13e50dc1c99188e6f82a89784db8d5c3326e19bc706eb1fa4a8ab656cb806008e7daf6b54ce65ebd3c5559a16f6482f79598f18930fc03e68c729206ae5d604734a39f57eb4d24107914204a9e77552efc48b342c937c3e6585ab27627630beb774435648e47af972034664ddbb28f93218efd3edde3633591ff3d2d08f84cc7a4d4afd6bd2e1787c72c2b07bd8b75613fb652fdc6bab0ee8945421e11024a3f12d925caf6e1da64e198f3ecb23a0a8d8d3f63cee38f1f7340bf254c753358194b2c1a9e0783e16863452a03361351b6c749456dcb3c53f19a36b266ff8a2cfed4af733c4bc31dcc1581a5276be22053426ee715f3d24205df04c1e308f13372759689192c24901c1df364feaa2661a8314c03e0b979ef84e2e4b7430cb10d873fff1e1177d37f6e9b2cacc6687e862e6f2ad816d67bb46a37d0d8ac1abb69155a1e3d6ebc6c8a914bd0914917d7f14ac39a211187dae9b20e31b6d42c73398c0696dc98962b5112c433b88c704246a4125809b0ee96c104a23dfe2269920dfdf57d079f2cc644c15594fd5adf23fa8df0841389da994561bff50dbc1177145313e08163c421b6f061615088507ea95e40d9782335c72076e5c4fb0e017a76f41893701e38a676ed6740bfef262f09bcfd17350b312c034e55b7930dbb0a106c46c2e6206ad686b78fecc9d07f6d020e6e5c8afbc9c664893d7f5d98116ee087b1384379e3e9ecd2186fbded351c1fc9f67a6874c196c229ef9b6a6caf53f3a9475597038dd9317bad58b25128004ed8f45fd71801c485301f79073e75f18882d78dd01c549a69879d14e447a0d0864dd244d3bab4b6ec4f5e7d782be4d1240530d15ceaa20fc1e2dc97a9038c01376bfa1f524c0648269b9c7b89840cd14a2e7e080e55964c53fe59fbdf6e87ec8aa295e707379c2fadd133e79aabb73f6a2e318fdcffd7feaabe76df40ab3466a6119bc7234a9b87070e4a13d777ec5c6920a2763d066be55f41aa4c11d7c1900e988315d24d029cdb07eda46dc7e773f7ad90acedf33a49b3cb7a80bf5098316c4f2398bfadda1ac40ffcd10adad2caad14e7932681dca32b4621316b0fd21bfc6ec715072609025d2d923dbb32208e356bf6111970f8a2fe266e1a9ea07f0109baf38dc2633fe0cbcbb160beb2dc55ff2388689b23db1f919ab2c4a072209544cbf1bea3c3ee96a0488b5ff7ed38d342fce45c5effdf44d30943c27b23524679565234b215639293a4c694dbb6b49a89766b1930ca1f85b6c2c84841f20393ffba58571fe4d14bb78ace32a8f92af001e4c0d256c3a426c1f8a2c430b283a98a2ec952a163dac1b1b8ef2cb46c1f6df3aca7775fba76ed99cc4203a048ba32007b79ab272b9c2ce9017ea96e7a69ce8d03158ab5ff14475d319ceafe4deae200e732a436c88c7fab72c1873dd0c8ad858030a4fc84cf910a25704d5a5a597b28eeee60b75c48fc1a100a1d406c8a49101402373440cd7ff0c46d512de261294a33832c1c4b9cfbf053dd01275aab8f6e507ddaae2d39c5985ab77b313e20df636d7f126365ea3fa8ce1a0f5db2e1011df604343786addb69b9b7494c2d09589d39764dd01f95a16ec3a5ad2e2a7645f0c1ace9373fef950d41fc79e503b603737dd64232328fa4b5d53bcf86b6e38c16d7482973737f3ad2559fb37948cab13ed429948d0a7a91761f751af01584a8aebaff253d43739ba38d4f992f416e56d9eecbf9c465029c893647cc88ac1904617f838701bd78ef2b43fd5e18f667f47123eb1dc2512ec21991183796b68c541031770ea40dc7363d2152013371376ebe214753ee980cd79f553948c546b6c29ccb652b662241a83dc45c1bf401fd98e1942ad48537dda987de69db18145558d7dbdf711f569450c76ad49d51c08c17de91e93c878947fdd5952cc1550308cef34b01a6933f081586ca00851e30cede6fe40c0b5a40890b08fcf7737b6dbb3fc3934a8fbdc8c194c7dcdd434eae2b80ffe34e6f4c7720ba60bfa2bb2bc259b626fbe672660e51203f679adc42a74c28570795ebed620a20835eb496a0b11c0cad223088936d4f4d9ab9e2f03d425bfeff00eeb13aa1d5073f69222a4fe4dbf7cd4408fcc4e3ebb95f517e88be8c4019bfb9d6a26cd3082f7afa75a55742e768d832f641e06778f0bbbb5549e91a5f1682d98418727ecf78ee2c4d066d53de2b1a6599a60e6585a5a3e159d9907f79b73e15778c57024f2baabc6ecb965ed08a9cf71fdfd39a7e3ada23c9672803f755400a801639abd63fc388f2116e1a6d11970e35e6c1571a522346e2861caf7f30bce2abb802dc3c232590e740f2a97adff3711c414c27c07acf764d2455dc97067246c067da5ac4b2e8a5dd059ef93d9ad07cbdfd9c863cb814183ad3f94ca1bc23a60e49d7504efaef5977f88f24a8691f5b3bcd719a3d73d93aa701c4aa09b946237001a7290ebd114066111bb4884bbfabea25f02936e3493be2072e06e74f75a3863a2e5388a18f9a21053ea21856f007e34a16eb0ddb8519adefee21f3253c02c6834b5af8ee0f30d5465e6ec20ed182fec25ce61a72063ec67d48dbaab719e65f5d0c11020edceaade286aa84da36c29d7949cff27a6ea71a86c2fd5241ad8714e231025c98ccf25a5f1eb5570787b818252301e2136015892683a6882c33de62247ecd2ebaa85d8ea7ccd2711bfc210d11db43857ae782acdb41ef415b741d46a17829d0475839516639aa356fe152b8dfbe6eaa8b1dbc432fc52a101b2bbab94586e484124d40d990d7011a9408254ca289e065d4c4f0de96285e02184e2b67960efaa6466fd0ae236e80"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x120, 0x0, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x2, 0x5, 0x0, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xd6, 0x6, "77fc21e22341f7ca61605a736c6ec6c443940d65094c52ff6d74e44d72c8a9662b73a3c9f549a9f21753223b44797ecbdae10cd18ba4f27ad040ae1cf67962d1a391cc85708a0473d29b02361e264589b03173ad65142a6e2f37554e4239127add5393fc193bf764aa6b21a17a69300075796268f28b94ae6d140fceb249333ca82a61a07a9ca036a85830c7f53f5632d777b4de4f7fc6038b64ab30d13fa23df6896b6cb4becf7475bdbdf5030005865d130df88d888e1ba57c77f422adfce10504ec0bb6bdd9c9f8afddbfef5b6b44e0b4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x74, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1b835c1176ca985afc8260b20e861cb54a77577bf55a2d848721d33b94bccfa22d3927155042980248296899b23c8c9d5ce0cf2d71be65800f062c64d22319eb8af02a91818c134f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_csum={0x19c, 0x1f, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfffffff9, 0x20000000, 0x5124, 0x1}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000000, 0x4, 0x6, 0x6}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xfffffbff, 0x6, 0x5, 0x22e}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x7, 0x4, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x2, 0xadde, 0x6}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x100, 0x1, 0x1f, 0x9}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x80000001, 0xffffffffffffffff, 0x0, 0x3}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa733, 0xffffffff, 0x5, 0xe, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x8, 0x5, 0x3}, 0x75}}]}, {0x73, 0x6, "5f38cd32d1ea4347017faded234d7701e3507bf4d02dceea84d155eda181f8ae82e8ee31d386eec1ab7d05ae7b3f8b1ffe046fc5b7e553699e7a71be67009d20463eee5cff40e195e37b286564b70b18471fad3b0b4db221a6786e6432c3c3158fa1b2ef2fe7b749f9ac671f0a3821"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x10c, 0xc, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x7, 0x101, 0x8449}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0xffffffffdffffffe, 0xff, 0x101}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1f, 0x3, 0x3, 0x9, 0x7fffffff}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0x9, 0x2}, 0x2f}}]}, {0x6f, 0x6, "037a6d9e66b1bd0c1476ec50a54aa1b237f1dcfad276d9f745f200c320339d314fa2a149971c3e98b7b58556effb5c0112b92cff9c8d86f3c5c4ebc5002cba39ccd52f0f2fba90e9090e0f74c7c22a5cdc18209fd01b7e76732af0cf7ee07732ab0aa61bbfa0599d950cf4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0xc9, 0x6, "5f2d36f5373f37fccc05a03c3684922b301e6f9ac104f3ede5a382e4b3adfc9732327bcf343e99a5b2034307b6cb9086867339d9e510ad061685ffab440e3879850046539719e41f921f0aab1a8b5e7beab06790ebddb3a15c8f6abd7e743525838ddf7e7ccb255cdf3424d44a0ef449ae54511c88233b3c9d277b3c3c4265fa7c8378930039aecc32b320ea06e2c19eb5f43b93c73bd2d808b6491bc27ae3d1d54b7c526393300e1726191fb6352a71df122ab153e071d788ab25fd598000fd094cb11f27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb0, 0x6, "2f052c67080d74cb61cac600040c37219e9a4ba2d64890c55724ffc86aac9678828c04840cc3be761a03c6805333f8f855e3b8e2af7a8d1301953ec3d010bf90ffabc76cf26568dab6fc50c2944e86e9d99d13b8985c0ab67e103210c8e232d97b3f3f0f9f79b954a61c1664cbd21193e0c3a5b16c75800bd923d98f7400777b48f09eca5b2c8555755244b34f08c094ffa40be46801804dc5182293a1458548e74ef506ef66642c1bc3b145"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x6c, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}]}, {0x1a, 0x6, "2d80fd1bbd6fa05b60198d43c44a7557dbb064ec04dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_MASK={0x8, 0x5, 0x3c3c}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3808}, 0x1, 0x0, 0x0, 0x10}, 0x40880) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r7, 0x2, 0x20000000) 00:50:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080)=[{}, {0x80000000}], &(0x7f00000000c0)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, 0x0, 0x4, [0xffffffff, 0x7f]}, {0x80000000, 0x0, 0x5, [0x59b4, 0x4]}, 0x4, [0x10001, 0x4]}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x6) 00:50:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x110) write$damon_attrs(r1, &(0x7f0000000080)={{' ', 0x9}, {' ', 0xffe}, {' ', 0x62}, {' ', 0xfffffffd}, {' ', 0x5}}, 0x69) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="712f2add2d14331dd432aa1c3bda9b27acda7f81da2ef32c3ca8f651d6eb5ecd0ada1a4d34f8d3552f27d781bebc7364a8b6243e2fdc9b7ed75e1f06e01ff04d09c1b7c30664a24beee612") syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:30 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_open_pts(r0, 0x80000) 00:50:30 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r2}, 0x48) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000039c0)={&(0x7f0000000180)=@delchain={0x3808, 0x65, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x2, 0xfff2}, {0xf, 0x7}, {0xffee, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @filter_kind_options=@f_fw={{0x7}, {0x37ac, 0x2, [@TCA_FW_ACT={0x1e20, 0x4, [@m_nat={0x130, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0xffffffffffffffff, 0x2, 0x3}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xb2e, 0x20000000, 0x80, 0x7a}, @multicast2, @multicast1, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x1, 0x20000000, 0x2, 0x273e5daa}, @local, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3f, 0x6, 0x400, 0x3}, @broadcast, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xffffffff, 0x7, 0x1, 0x2}, @local, @private=0xa010100}}]}, {0x3f, 0x6, "255f471893a6ea0a34874f157241a8f24f71f7ada55298cfad057ac72261ce865f5dc391893450c59b4bd3d4e453abe76b69847bd76eb3aedaa65b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1cec, 0x6, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x0, 0x3, 0x5, 0x5, 0x2}, 0xff, 0x0, [{0x5bf, 0x1, 0x101, 0x6, 0x3, 0x1}]}, [{0x8, 0x1, 0xc84, 0x7ff, 0x3, 0x9}, {0x5, 0x1, 0xfffffeff, 0x9, 0x1, 0x9}, {0x2, 0x9, 0xaa6, 0xffffffff, 0x1, 0x100}, {0x9, 0x20, 0x9, 0x7f8, 0x7, 0x7}, {0x5794, 0x7, 0x3, 0x800, 0xfffffff8, 0x401}, {0x9, 0x0, 0x1, 0x3f, 0x2, 0x9}, {0x101, 0x5, 0x7, 0x800, 0x1, 0xfffffff7}, {0x0, 0x3, 0x7, 0x1, 0x8001, 0x3}, {0x7, 0x10000, 0x81, 0x6, 0x62, 0x3f}, {0xfffffffb, 0x8, 0x6, 0x80000001, 0x3f, 0x8}, {0xd0, 0x81, 0x3f, 0x0, 0xc785, 0x5}, {0x1000, 0x4, 0x80000000, 0x6, 0x1, 0x1}, {0xffff, 0x97f1, 0x6, 0x7ff, 0x81, 0x2}, {0x6, 0x2, 0x1, 0x15, 0xfffffffe, 0x7}, {0xfffff48b, 0x1000, 0x6, 0xffffffff, 0x1, 0xcf}, {0x9dc1, 0xfffffffe, 0xfff, 0xb9b9, 0x1, 0xfffffffe}, {0x8, 0x1f, 0x5, 0x81, 0x5, 0x3}, {0x7fff, 0x3ff, 0x4, 0x3, 0xffffff81, 0x3}, {0x7, 0x1, 0x2, 0x0, 0x3, 0x1}, {0x8001, 0xd33, 0x0, 0x3dee, 0x9, 0x8}, {0x80000001, 0x2b, 0x5, 0x80000001, 0x20, 0xfffffff7}, {0x3, 0x1, 0x80000001, 0x0, 0x9, 0x6}, {0x9, 0x6, 0x4526, 0x7f, 0xdac, 0x2}, {0x2, 0x17, 0x7fff, 0x1ff, 0x5, 0x80000001}, {0x0, 0x0, 0x1a742960, 0x1ff, 0x2}, {0x9, 0x6, 0x4, 0xfffffff9, 0x5, 0x81}, {0x2, 0x9, 0x8, 0x401, 0x5, 0x10001}, {0x2, 0x9b80000, 0x3, 0x1, 0x417, 0x5}, {0x7, 0x8, 0x20, 0x9, 0xb5, 0xfffffffa}, {0x49db379f, 0x9, 0x5, 0x1, 0xfb5, 0x54}, {0x2, 0x5, 0x3, 0x0, 0x1ffe000, 0x8}, {0x3, 0xe, 0xd150, 0x3699, 0x4}, {0xf9, 0x1, 0xbace, 0x7, 0x8000, 0xffffffff}, {0xfeb, 0x1, 0x10001, 0x7, 0x5}, {0xffffff3c, 0x1, 0x7, 0x0, 0x3, 0xc}, {0x8000, 0x81, 0x40, 0x0, 0x4, 0x2}, {0x89, 0x401, 0x9865, 0x3, 0x3, 0x9}, {0x6ee6, 0x1, 0x3f, 0x9, 0x8, 0x100}, {0x200, 0x3, 0x5, 0x9, 0x94, 0x2}, {0x7df1, 0x0, 0x23, 0x2, 0x33f, 0x55}, {0x6, 0x6, 0x80000000, 0x80000000, 0x7, 0x2}, {0x5, 0xffffcb4a, 0x6, 0x9, 0xa6cd, 0x8}, {0x8, 0x3, 0x5, 0x2, 0x1, 0x9f75}, {0xd790, 0xa3a, 0x800, 0x7, 0x9, 0x7}, {0x5, 0x5, 0x20, 0x1, 0x14, 0x5}, {0x7, 0x3, 0x2, 0x2fbe, 0x4, 0x1e}, {0x5, 0x401, 0x8000, 0x400, 0x40, 0x1000}, {0x40d, 0xcb21, 0x8, 0xde64, 0x6, 0x5}, {0x8, 0x10001, 0x7fff, 0x8af0, 0x5, 0x2}, {0x6, 0x80, 0xfffffffc, 0x140000, 0x8, 0x8000}, {0x1, 0x7fff, 0x40, 0x7, 0x7fffffff, 0x6}, {0x7fff, 0xcf0a, 0x3f, 0xffffffff, 0x100, 0x5}, {0x7ff, 0x6, 0x6, 0x3, 0x200, 0x8}, {0x1, 0x4, 0xfffffffc, 0x85, 0x4, 0x5de8}, {0x0, 0x6, 0x8, 0x0, 0x0, 0x5}, {0x95a, 0x2, 0x5, 0x4, 0x1f, 0x1}, {0x200, 0x10000, 0x4, 0x3060, 0x1ff, 0x8}, {0x5, 0x8, 0x8, 0x9, 0x4}, {0x2, 0x3, 0x8001, 0x2, 0x165, 0x400}, {0x3, 0x32a94e3b, 0xfffffbff, 0x5, 0x0, 0x76a0}, {0x7, 0x4, 0x4, 0x81, 0x10001, 0x4}, {0x7, 0x7, 0x9, 0x8000, 0x2, 0x5}, {0x8b5b, 0x7, 0x8, 0x401, 0x5b3, 0x6}, {0x0, 0x3, 0x6, 0xea4, 0xc3d0, 0x7}, {0x41, 0x5, 0x99ddfef7, 0x1, 0x52, 0x3f}, {0x7, 0x2, 0x80000001, 0xbf, 0x3}, {0x3f, 0x5, 0x7, 0x7, 0x1ff, 0x8000}, {0x3611, 0x8, 0x1, 0x2, 0x1, 0x80000000}, {0x6, 0x9, 0x587, 0x9c, 0x101, 0x7c66}, {0x6, 0xfffff8af, 0x9, 0x40, 0x6, 0x7fff}, {0x1ff, 0x1, 0xfffffffd, 0xfffffff9, 0xe8ad, 0xa0}, {0x1, 0x3, 0x10001, 0xfffff001, 0x5}, {0x6, 0x5, 0x9, 0x4, 0x20, 0x6}, {0x2, 0x2, 0xeeb, 0x7, 0x9, 0xa1b}, {0x8, 0x7, 0xffffffff, 0xffff7fff, 0x80}, {0x400, 0x10000, 0x2, 0x80000000, 0x0, 0xe65c}, {0x6, 0x8, 0x14000, 0x3, 0x3, 0xfffffffc}, {0x5, 0x0, 0x7fffffff, 0xfff, 0x8, 0x9}, {0x5, 0x1, 0xcc, 0x1ff, 0x3}, {0x8, 0xbf1, 0x4, 0xaa53, 0x7, 0x6}, {0xbf, 0x9, 0x3, 0x3f, 0x2, 0x3}, {0xda5d, 0x1, 0x7f, 0x9, 0x1}, {0x401, 0x9, 0x1f, 0x80, 0x7, 0x7}, {0xa6cb, 0x1000, 0x8, 0xffffffff, 0xffffffff, 0x985}, {0x1, 0x2, 0x24, 0xfffffb90, 0xa2d65c1, 0x5b}, {0x7, 0x1f, 0x1, 0xfffffbff, 0xfff, 0x8001}, {0x7ff, 0x101, 0xffffffff, 0x401, 0xdc, 0x7}, {0x0, 0x0, 0x9, 0x7f, 0x2, 0x9}, {0x9, 0xffff, 0x2, 0x6, 0x5, 0xfffff1e9}, {0x3, 0xfffffffb, 0x4, 0x4a6, 0x1000, 0x3}, {0x59b, 0x4, 0x3e, 0x7, 0x9, 0x400}, {0x2, 0xfffffb4c, 0x4, 0x9609, 0x1, 0x7fff}, {0xb46, 0x81, 0x7, 0xe3, 0xffff0000, 0x7}, {0x80000001, 0x3, 0x1, 0x0, 0x80000000, 0xffffffff}, {0x3, 0x8001, 0x7fff, 0x8, 0x3, 0x3}, {0xffffffe1, 0x7, 0x5, 0x9, 0x7, 0x8}, {0x10001, 0x8, 0xffffffff, 0x170b1231, 0x0, 0x7f}, {0x401, 0x4, 0x81, 0x0, 0x10000, 0x5}, {0x2, 0x0, 0xff, 0x800, 0x7, 0x1}, {0x8, 0xe3b5, 0x3, 0x2, 0x1f, 0x6}, {0xfffffff7, 0x8, 0x7f, 0x3, 0x10001, 0xba4}, {0x716, 0xffffffff, 0x2, 0x6, 0x1ff, 0x100}, {0x6, 0x4, 0x81, 0xa, 0x3, 0xe7a}, {0x8, 0x4, 0x9, 0x5, 0x5, 0xff}, {0x1, 0x7fffffff, 0x80, 0x2, 0x8, 0x1}, {0x3, 0x9, 0x29a0, 0x4, 0x6, 0x3}, {0x1000, 0xd005, 0x0, 0x5, 0xfff, 0x1}, {0xfde1, 0xcb4, 0x5, 0x4, 0xd517, 0x400}, {0x1, 0x29d, 0x80000000, 0x9, 0x5}, {0x9ea9, 0x5, 0x2, 0xfff, 0x5}, {0x80, 0x3, 0x3, 0x5, 0x6, 0x5}, {0x1, 0x7a06, 0x7, 0x3, 0x7, 0x1}, {0x10000, 0x4, 0x1, 0x3ff, 0x5, 0x5}, {0x2, 0x4, 0x80000000, 0x2, 0x8000, 0x7}, {0x9, 0x0, 0x6, 0x4, 0x4, 0xfe}, {0x5, 0x4, 0x5, 0x0, 0x4, 0xda}, {0x9, 0x4, 0x13, 0x3, 0x3, 0x1}, {0xa21c394, 0x4, 0x9, 0x2, 0x4, 0x401}, {0x3, 0xe8aa, 0xfffffffc, 0x4349, 0x3, 0x1}, {0x5, 0xfffffffb, 0x200, 0x6, 0x0, 0x7}, {0xffffffff, 0xffffffe1, 0x1ff, 0x8, 0x7, 0x9}, {0x2, 0xfffff02b, 0x8, 0x7}, {0x9, 0x0, 0x20, 0x401, 0x80, 0x80000000}, {0x0, 0x1, 0x6, 0x8, 0x3ff, 0x400}, {0x1ff, 0xfffffffa, 0x1, 0x2, 0x1f, 0x8}, {0xda, 0x7f, 0x1, 0xa412ac8, 0x80000001}, {0x1c2b, 0x3, 0x7, 0x7, 0x4, 0x10000}, {0x8, 0x2, 0x6, 0x8001, 0x8, 0x5}], [{0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x97723a61f14a2a6f}, {0x1}, {0x1, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x8a71733e1e343f9c}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1b9b23cf864c2858, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x0, 0x1}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0xc106f1d4ecd52aa5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x1}, {0xe18c4e2a7ca67420, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x2}, {0x2, 0x1}, {}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2}, {0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffff10, 0x55, 0x3, 0x3, 0x2}, 0x42, 0x1}, [{0x400, 0x1, 0x200, 0x6, 0x8001, 0x3}, {0x1f, 0xa7, 0x0, 0x6, 0x8, 0x5}, {0x5, 0x4, 0x80000001, 0x6, 0x1f}, {0x2, 0xeb6, 0x6, 0x5, 0x80000001, 0xfffffffa}, {0xc473, 0xffff, 0x1, 0x80000001, 0x7, 0x8}, {0xffff078a, 0x4e0, 0x8001, 0xbd1, 0x9, 0x4}, {0x4, 0x1, 0x0, 0x3, 0x2, 0x6ce}, {0x7, 0xd1a3, 0xcd, 0x6, 0x8, 0x1}, {0x8, 0x309a3a4, 0x4e021c71, 0xc7, 0x800, 0x3}, {0x8, 0x400, 0x100, 0x9, 0x8, 0x200}, {0x82f4, 0x100, 0xb60, 0xfff, 0x0, 0x481}, {0x8000, 0x489, 0x2, 0x5, 0x0, 0x3}, {0x1, 0x62, 0x8, 0x2, 0x0, 0x7}, {0x6, 0x3ff, 0x3, 0x7, 0x4, 0xac}, {0xffffff00, 0x5, 0x80, 0x2, 0x0, 0x1b39}, {0x8173, 0x701, 0x3f, 0x0, 0x2, 0xc14}, {0xfff, 0x2, 0x7, 0x4, 0x823, 0x7ff}, {0x6, 0x8001, 0x9, 0x1, 0x8, 0x10000}, {0x5, 0x8001, 0x8001, 0x1000, 0x0, 0x80000001}, {0x101, 0x4, 0xfffffffb, 0x5, 0x10000, 0x7}, {0xfff, 0x1, 0x3, 0x1, 0x5, 0x1}, {0x6, 0xffffffff, 0x200, 0x40, 0x0, 0xfffffffc}, {0x8001, 0xfffffff8, 0x200, 0x3, 0x9, 0x10000}, {0xaedd, 0x2, 0x3ff, 0x7, 0x7, 0x2}, {0x7fffffff, 0xff, 0x7ff, 0x1ff, 0xfffffffe, 0x8}, {0x80000001, 0xfffff714, 0x2b7, 0x1, 0x20, 0x7ba8}, {0x400, 0x101, 0x1, 0x9, 0x0, 0x100}, {0x6df6a0e4, 0xc0, 0x8, 0x7fff, 0x99c7, 0x4}, {0x1, 0x3ff, 0x8, 0x7, 0x7, 0x8}, {0xfffffffb, 0x2, 0xfb99, 0x4, 0x3, 0x1f}, {0x0, 0x3, 0x9, 0x0, 0x80000000, 0x9}, {0x7, 0x80, 0x3, 0x0, 0x2, 0xfff}, {0xff, 0x10001, 0x81, 0x5}, {0x3, 0x5, 0xfff, 0x7ff, 0x4, 0x7}, {0x3, 0x0, 0x2, 0x0, 0x9, 0x37c}, {0x4, 0xf5, 0x6, 0x8, 0x8, 0x5}, {0x1, 0xef, 0x7ff, 0x0, 0x7a, 0xffff}, {0x1, 0x1, 0xfc, 0x4, 0x3, 0x3ff}, {0x5, 0xfffffff9, 0x4, 0x8, 0xffff, 0x8}, {0x7, 0x0, 0xfff, 0x2, 0x5, 0x7}, {0x2, 0x0, 0x4, 0x80000001, 0x3, 0x200}, {0x3f, 0xffffffff, 0x3, 0x4, 0xf6, 0x1f}, {0x4, 0x6, 0x6, 0x10001, 0x8, 0x3}, {0x384, 0x8, 0x1, 0x8000, 0xffffffff, 0x1000}, {0x0, 0x7d9f, 0x8d, 0x5, 0x2, 0x5}, {0x100, 0x44, 0x2, 0x4, 0x10001, 0x10001}, {0x400, 0xfff, 0x2, 0x3, 0x6, 0x3ff}, {0x9, 0x7, 0x7559, 0x40, 0x5}, {0x2, 0x9, 0x6, 0x1, 0x7}, {0x1, 0x1f, 0x1, 0xada7, 0x2, 0x6}, {0x81, 0x4, 0x0, 0xfffffff7, 0x9, 0x7}, {0x5, 0xff1, 0x8, 0x7, 0x9, 0x4b7}, {0x8, 0x1, 0x9, 0x3, 0x6, 0x3f}, {0xfffffff9, 0x7, 0x80, 0x80, 0x5208c79, 0x800}, {0x101, 0x18d, 0x0, 0x6, 0x2, 0x7}, {0xfffffffd, 0x10000, 0x6, 0x4, 0x4, 0x401}, {0x5, 0x81, 0x20, 0x9, 0x7f, 0x300}, {0x40, 0xfffffffb, 0x8, 0x1, 0x1, 0xa40}, {0x8, 0x40, 0x1, 0x160, 0x1e3, 0x80000001}, {0x9, 0x2, 0x7, 0xf1, 0x0, 0x1000}, {0x0, 0x400, 0xfffff800, 0x8, 0x8001, 0x4}, {0x4, 0x5, 0x6d85, 0x5, 0x2, 0x40}, {0x2, 0x8001, 0x3f, 0x0, 0x6, 0x1}, {0x32fc, 0x6, 0x1000, 0x80000001, 0x8, 0x95}, {0x6, 0xffffffc0, 0x2, 0x3, 0xfff, 0x100}, {0x0, 0x1f, 0x1, 0x8, 0x5, 0xc0000000}, {0xfffffffe, 0x6, 0x9, 0x1f, 0x40, 0x5}, {0x1, 0x8, 0x80000001, 0x20, 0x3, 0x9}, {0x7, 0xec0a, 0x4, 0xffff, 0xffff0000, 0x8}, {0x100, 0x8, 0x1, 0x3f, 0x1, 0x9}, {0xfffffffe, 0xfffffffb, 0x2067, 0x81, 0x2, 0x4}, {0x3, 0x8, 0x6, 0x80000000, 0x8001, 0x9}, {0xd8, 0xfe, 0x3f, 0x9, 0xfffffffe, 0x2}, {0xf9c, 0x5, 0x80, 0x0, 0x100}, {0x4, 0xca, 0x6, 0x2, 0x8, 0x8}, {0x10000, 0x4, 0x46e, 0xbc, 0x1, 0x3}, {0xde69, 0x5, 0x7, 0x100, 0x400}, {0x101, 0x2a183d22, 0x81, 0x200, 0x20, 0x1}, {0x6, 0x3, 0x6, 0x0, 0x7, 0x4}, {0x9, 0x0, 0x3, 0xff, 0x3ff, 0x1}, {0x8, 0x69f, 0x1, 0x41d3, 0x4, 0x2}, {0x4, 0xfffffffd, 0x3, 0x4, 0x1, 0x8}, {0x590, 0x4, 0x1000, 0x2, 0x1, 0x7}, {0x401, 0x40, 0x2eaa, 0x5, 0x6, 0xffffffff}, {0x7, 0x5, 0x0, 0xe5f, 0x4, 0xfffffffa}, {0x7, 0x2, 0x7, 0x6, 0x1, 0x7ff}, {0x1, 0xfffffffe, 0x5, 0x4, 0x1ff, 0x1}, {0xde, 0x80, 0xfb, 0x7, 0x100, 0x9}, {0x20, 0x1, 0x1c, 0x2, 0x1, 0x7fffffff}, {0x7, 0x9, 0x200, 0x0, 0x9, 0xb39}, {0x10001, 0x492e2601, 0x9, 0xf55e, 0x3, 0x2}, {0x9, 0x22, 0x3, 0x5, 0xfffffffe, 0x8}, {0x4, 0x8, 0x9, 0xfffffff9, 0x5, 0x5}, {0x1401, 0x5, 0xfffffc01, 0x100, 0x8000, 0x7f}, {0x1, 0x1, 0x2f, 0x8, 0x9}, {0x8000, 0x4, 0x101, 0x9, 0x1, 0x52}, {0x5, 0x3, 0x4, 0x3, 0x66e, 0x5}, {0x5, 0x80000000, 0x4, 0x20, 0x9, 0xffffffff}, {0x0, 0x200, 0x1, 0x64, 0x9, 0x8}, {0x6, 0x2, 0x9, 0x7, 0x8, 0x5}, {0x8001, 0x7c, 0x8, 0x8001, 0xa49, 0x80000001}, {0xfffffffa, 0x1000, 0x7f, 0x745, 0x5, 0x5}, {0x0, 0x0, 0x3, 0x81, 0x4, 0x26ca}, {0x7fff, 0x5, 0x5, 0x0, 0x1f, 0x2}, {0xfffffff8, 0x0, 0x3f, 0x0, 0x7, 0x6}, {0x3, 0x0, 0x101, 0x100, 0x10000, 0xa8}, {0x4, 0x3, 0x87ac, 0x5, 0xff, 0xffffffff}, {0x26, 0x6, 0x1ff, 0x6, 0x9, 0xbb6c}, {0x4507, 0x6, 0x9, 0x3, 0xffffffff, 0x2}, {0x1, 0x3476, 0x4, 0x7, 0x25a, 0x9}, {0x9, 0xfff, 0x4, 0xa845, 0x80000001, 0x3ff}, {0x7f, 0x5, 0x10001, 0xc4, 0x2, 0x80000001}, {0x7, 0x7, 0xc175, 0x6, 0x5806b9cc, 0x7}, {0x3c, 0xf9e, 0x5, 0x4, 0x2, 0x1000}, {0x6, 0x101, 0x2, 0x4, 0xaae, 0x237e}, {0x52, 0x5a, 0x1ff, 0x3, 0x1, 0x3f}, {0x4, 0x10000, 0x7, 0xffffffff, 0x6e70, 0x1ff}, {0x0, 0x7ff, 0x8, 0xa9, 0x800, 0x200}, {0x3ff, 0x1, 0x7ff, 0x2, 0x4, 0xfffffffa}, {0x8, 0x4, 0x2000000, 0x8, 0x7f, 0x1ff}, {0xf85, 0x80000001, 0x8000000, 0x5, 0xcabe, 0x2}, {0x3, 0x80, 0x5a, 0x8f, 0x3, 0x3}, {0x3, 0x8001, 0x5, 0xc251, 0x40, 0x6}, {0x4, 0x10001, 0xfffffffa, 0x4, 0x4}, {0x2, 0xfffff801, 0x8, 0x2, 0x2, 0x6}, {0xff, 0x8, 0x7, 0xba5d, 0x0, 0xfffffff9}, {0x7, 0x8, 0x4, 0x6, 0xe37a, 0x3}, {0x2, 0xfffffff9, 0x200000, 0x3, 0x18000, 0x7}], [{0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4dbe90ab90476b77}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x7}, {}, {0x2, 0x85ea8034aeabdc2d}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x4}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x5}, {0x3, 0x1}], 0x1}}]}, {0x66, 0x6, "58305fa54b1c11231a2015c35f0e3fd4b372fe70b6879c0a8a906e85177b417ab0593738815c7f15b02cf8cb98f6c33495acc57a6b41eebdb546440d5f26fe3a79ec1a68e9584af05e63fa3e980a5478a796c98ddd9be5285fd055cddaae0375b5ed"}, {0xc}, {0xc}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_ACT={0x270, 0x4, [@m_mirred={0x26c, 0x10, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2, 0x0, 0xffffffff, 0x100}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x0, 0x8, 0x800}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf9, 0x1, 0x10000000, 0x3ff, 0x85ba}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xcf8, 0xffff, 0x0, 0x9}, 0x5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x200, 0x10000000, 0x11d, 0x3f}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x3, 0xfffff682, 0x401}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x10000000, 0x1f, 0x9}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x0, 0x7, 0x1000, 0x80000000}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3f, 0x0, 0x4, 0xe19}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10001, 0x3, 0x97d2, 0x3}, 0x3, r6}}]}, {0xfd, 0x6, "602f7456995c4a10760a194686f96108b81b9a3783fcf5bfe11fda002452635dfef2377868e951c59414763b35560bf6227367f778bfeb9d2c11aba7cbfdccc31e4f46bbb303be5c533251dc0b410444e627bc705a7afce9ed2aed7738a3d29fab8dff6b9de47899f692e2d51f074bf261e222910301ba4414662111d86181c8cb88bb20a2290e40f574a69eab49888b44246f99854579e832dea92c27ba6df895a331e88e07606ee03e41605327858ca3f453dba2816e2b776bf534b63f416b85b4694fb0adb29080f7c559bf4c5d70d27fe528c539b79c087136c7ae4919d380215d1178715478d77933c8266d30ef6f9329ce0389a9f489"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_ACT={0x16f8, 0x4, [@m_csum={0x1068, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffb4, 0xc0, 0x2, 0x2, 0x5}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x7, 0xffffffffffffffff, 0x6}, 0x7e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x120, 0x0, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100, 0x2, 0x5, 0x0, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xd6, 0x6, "77fc21e22341f7ca61605a736c6ec6c443940d65094c52ff6d74e44d72c8a9662b73a3c9f549a9f21753223b44797ecbdae10cd18ba4f27ad040ae1cf67962d1a391cc85708a0473d29b02361e264589b03173ad65142a6e2f37554e4239127add5393fc193bf764aa6b21a17a69300075796268f28b94ae6d140fceb249333ca82a61a07a9ca036a85830c7f53f5632d777b4de4f7fc6038b64ab30d13fa23df6896b6cb4becf7475bdbdf5030005865d130df88d888e1ba57c77f422adfce10504ec0bb6bdd9c9f8afddbfef5b6b44e0b4"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x74, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "1b835c1176ca985afc8260b20e861cb54a77577bf55a2d848721d33b94bccfa22d3927155042980248296899b23c8c9d5ce0cf2d71be65800f062c64d22319eb8af02a91818c134f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}, @m_csum={0x19c, 0x1f, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfffffff9, 0x20000000, 0x5124, 0x1}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40000000, 0x4, 0x6, 0x6}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xfffffbff, 0x6, 0x5, 0x22e}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x7, 0x4, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x8, 0x2, 0xadde, 0x6}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x100, 0x1, 0x1f, 0x9}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x80000001, 0xffffffffffffffff, 0x0, 0x3}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa733, 0xffffffff, 0x5, 0xe, 0x6}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x8, 0x5, 0x3}, 0x75}}]}, {0x73, 0x6, "5f38cd32d1ea4347017faded234d7701e3507bf4d02dceea84d155eda181f8ae82e8ee31d386eec1ab7d05ae7b3f8b1ffe046fc5b7e553699e7a71be67009d20463eee5cff40e195e37b286564b70b18471fad3b0b4db221a6786e6432c3c3158fa1b2ef2fe7b749f9ac671f0a3821"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x10c, 0xc, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x7, 0x101, 0x8449}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0xffffffffdffffffe, 0xff, 0x101}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1f, 0x3, 0x3, 0x9, 0x7fffffff}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0x9, 0x2}, 0x2f}}]}, {0x6f, 0x6, "037a6d9e66b1bd0c1476ec50a54aa1b237f1dcfad276d9f745f200c320339d314fa2a149971c3e98b7b58556effb5c0112b92cff9c8d86f3c5c4ebc5002cba39ccd52f0f2fba90e9090e0f74c7c22a5cdc18209fd01b7e76732af0cf7ee07732ab0aa61bbfa0599d950cf4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0xc9, 0x6, "5f2d36f5373f37fccc05a03c3684922b301e6f9ac104f3ede5a382e4b3adfc9732327bcf343e99a5b2034307b6cb9086867339d9e510ad061685ffab440e3879850046539719e41f921f0aab1a8b5e7beab06790ebddb3a15c8f6abd7e743525838ddf7e7ccb255cdf3424d44a0ef449ae54511c88233b3c9d277b3c3c4265fa7c8378930039aecc32b320ea06e2c19eb5f43b93c73bd2d808b6491bc27ae3d1d54b7c526393300e1726191fb6352a71df122ab153e071d788ab25fd598000fd094cb11f27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb0, 0x6, "2f052c67080d74cb61cac600040c37219e9a4ba2d64890c55724ffc86aac9678828c04840cc3be761a03c6805333f8f855e3b8e2af7a8d1301953ec3d010bf90ffabc76cf26568dab6fc50c2944e86e9d99d13b8985c0ab67e103210c8e232d97b3f3f0f9f79b954a61c1664cbd21193e0c3a5b16c75800bd923d98f7400777b48f09eca5b2c8555755244b34f08c094ffa40be46801804dc5182293a1458548e74ef506ef66642c1bc3b145"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x6c, 0x1a, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x7fff}]}, {0x1a, 0x6, "2d80fd1bbd6fa05b60198d43c44a7557dbb064ec04dc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_FW_MASK={0x8, 0x5, 0x3c3c}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3808}, 0x1, 0x0, 0x0, 0x10}, 0x40880) (async) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r7, 0x2, 0x20000000) 00:50:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x110) write$damon_attrs(r1, &(0x7f0000000080)={{' ', 0x9}, {' ', 0xffe}, {' ', 0x62}, {' ', 0xfffffffd}, {' ', 0x5}}, 0x69) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5000000000) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x1fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3, 0x1000}) 00:50:30 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:30 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) 00:50:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) syz_open_pts(r0, 0x80000) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x1fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3, 0x1000}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x1fffffff) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3, 0x1000}) (async) 00:50:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5000000000) 00:50:30 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:30 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x110) write$damon_attrs(r1, &(0x7f0000000080)={{' ', 0x9}, {' ', 0xffe}, {' ', 0x62}, {' ', 0xfffffffd}, {' ', 0x5}}, 0x69) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) syz_open_pts(r0, 0x80000) 00:50:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc23, 0x1200, 0x5ab734b4}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x1fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3, 0x1000}) 00:50:30 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5000000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5000000000) (async) 00:50:30 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc23, 0x1200, 0x5ab734b4}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 32) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) (async, rerun: 64) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:50:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x4, 0x2, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r6, 0x0, r7, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000340)={0x1, r3, 0x4, 0x40, 0x4, 0x5, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x0, 0x7d, 0xbd4, 0xbbf3, 0x40, 0x85], 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$KDDELIO(r10, 0x540b, 0x1ffff000) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000600)={r5, r3, r1, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000007c0)={&(0x7f0000000780)=[r12, r3, r13, r14, r4], 0x5, 0x80000}) 00:50:30 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:30 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x40000000000002) 00:50:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x4, 0x2, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r6, 0x0, r7, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000340)={0x1, r3, 0x4, 0x40, 0x4, 0x5, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x0, 0x7d, 0xbd4, 0xbbf3, 0x40, 0x85], 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$KDDELIO(r10, 0x540b, 0x1ffff000) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000600)={r5, r3, r1, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000007c0)={&(0x7f0000000780)=[r12, r3, r13, r14, r4], 0x5, 0x80000}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x4, 0x2, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r6, 0x0, r7, 0x0, 0x0], 0x6}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000340)={0x1, r3, 0x4, 0x40, 0x4, 0x5, 0x2}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x0, 0x7d, 0xbd4, 0xbbf3, 0x40, 0x85], 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) (async) ioctl$KDDELIO(r10, 0x540b, 0x1ffff000) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, r3}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000600)={r5, r3, r1, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000007c0)={&(0x7f0000000780)=[r12, r3, r13, r14, r4], 0x5, 0x80000}) (async) 00:50:30 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x4) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 00:50:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:30 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x40000000000002) 00:50:30 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x40000000000002) 00:50:30 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x4) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 00:50:30 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc23, 0x1200, 0x5ab734b4}) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:30 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:30 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x4, 0x2, 0x1, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, r6, 0x0, r7, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) (async) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000340)={0x1, r3, 0x4, 0x40, 0x4, 0x5, 0x2}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r9, 0xc01864cd, &(0x7f0000000400)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x5, 0x4, 0x0, 0x7d, 0xbd4, 0xbbf3, 0x40, 0x85], 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) (async) ioctl$KDDELIO(r10, 0x540b, 0x1ffff000) (async) r11 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r11, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, r3, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000600)={r5, r3, r1, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000007c0)={&(0x7f0000000780)=[r12, r3, r13, r14, r4], 0x5, 0x80000}) 00:50:30 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x4) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={0x0, 0x2}) 00:50:30 executing program 4: socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="020000000200050094025d750ca4f1f6ffffcf55e72249123b55e09aff901698bbb094b9b8ee3e09cdbc0e74612ba7ce1d60e44ca9d239e074a2d947a2f82774122ce6a76760aaf821edaa2b0000d9dc9f1edc452265cbb05a60"]) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000053d4a9dc001300000126bd7000fddbdf252e003a4b07344015507c71149016aaf440f4b9c2850b9ad237fdcd5a9b", @ANYRES32=r6, @ANYBLOB="82000000c004000040001a800400070004001c00300002802c00018008000900090000000800030060c0000008001c0002000000080011000400000008000600f200000004001c00"], 0x60}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) 00:50:30 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000340)) sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x5}, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)) 00:50:30 executing program 4: socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="020000000200050094025d750ca4f1f6ffffcf55e72249123b55e09aff901698bbb094b9b8ee3e09cdbc0e74612ba7ce1d60e44ca9d239e074a2d947a2f82774122ce6a76760aaf821edaa2b0000d9dc9f1edc452265cbb05a60"]) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000053d4a9dc001300000126bd7000fddbdf252e003a4b07344015507c71149016aaf440f4b9c2850b9ad237fdcd5a9b", @ANYRES32=r6, @ANYBLOB="82000000c004000040001a800400070004001c00300002802c00018008000900090000000800030060c0000008001c0002000000080011000400000008000600f200000004001c00"], 0x60}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) 00:50:30 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2a, 0x80, "576698e7e91d7491be6118714b092634c3e0cf0e521948a05d79c10c0a692aa147c91a5f906b1f4165eebcbd89e340168c3ee105a42d9e3adeb424eb650ae2", 0x1}, 0x60) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0xb38d, @mcast2, 0x9}, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, {[0x6, 0x10000, 0x4, 0x735, 0x9, 0x7f, 0x2, 0xffff0000]}}, 0x5c) 00:50:30 executing program 5: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0e0628bd7000fbdbdf250c0000000500300001000000080032000300000008003c00d10e0000050035001f000000060028000400000008000300", @ANYRES32=0x0, @ANYBLOB="0580a05096447eb1e5d3a0ebbf400383ac8f0ad359e8a4aad4fd378dec2203c9b4c22089955d7367966887cb9b73f11b538daeba3e9ea217c60ee7bf00000000000000002100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"c7d533cbd305de334ec450094f3cc43ec717863cb1306643d4aa8003da1d44e2"}) 00:50:30 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000340)) (async) sched_rr_get_interval(r0, &(0x7f0000000100)) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x5}, 0xc) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)) 00:50:30 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r2 = socket(0x2, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x7c, &(0x7f00000000c0)=""/124, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x1c, 0x121}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r0, r3, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000340)=[{0x4, 0x2, 0x10, 0x2}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xfffffffa}, 0x90) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5407, 0x20000000) 00:50:30 executing program 5: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0e0628bd7000fbdbdf250c0000000500300001000000080032000300000008003c00d10e0000050035001f000000060028000400000008000300", @ANYRES32=0x0, @ANYBLOB="0580a05096447eb1e5d3a0ebbf400383ac8f0ad359e8a4aad4fd378dec2203c9b4c22089955d7367966887cb9b73f11b538daeba3e9ea217c60ee7bf00000000000000002100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"c7d533cbd305de334ec450094f3cc43ec717863cb1306643d4aa8003da1d44e2"}) 00:50:30 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:30 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2a, 0x80, "576698e7e91d7491be6118714b092634c3e0cf0e521948a05d79c10c0a692aa147c91a5f906b1f4165eebcbd89e340168c3ee105a42d9e3adeb424eb650ae2", 0x1}, 0x60) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0xb38d, @mcast2, 0x9}, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, {[0x6, 0x10000, 0x4, 0x735, 0x9, 0x7f, 0x2, 0xffff0000]}}, 0x5c) 00:50:30 executing program 4: socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="020000000200050094025d750ca4f1f6ffffcf55e72249123b55e09aff901698bbb094b9b8ee3e09cdbc0e74612ba7ce1d60e44ca9d239e074a2d947a2f82774122ce6a76760aaf821edaa2b0000d9dc9f1edc452265cbb05a60"]) (rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000053d4a9dc001300000126bd7000fddbdf252e003a4b07344015507c71149016aaf440f4b9c2850b9ad237fdcd5a9b", @ANYRES32=r6, @ANYBLOB="82000000c004000040001a800400070004001c00300002802c00018008000900090000000800030060c0000008001c0002000000080011000400000008000600f200000004001c00"], 0x60}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) 00:50:30 executing program 3: r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000340)) sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x2) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x5}, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)) getpid() (async) sched_rr_get_interval(r0, &(0x7f0000000340)) (async) sched_rr_get_interval(r0, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r2, 0x2, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x5}, 0xc) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)) (async) 00:50:30 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x2a, 0x80, "576698e7e91d7491be6118714b092634c3e0cf0e521948a05d79c10c0a692aa147c91a5f906b1f4165eebcbd89e340168c3ee105a42d9e3adeb424eb650ae2", 0x1}, 0x60) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0xb38d, @mcast2, 0x9}, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, {[0x6, 0x10000, 0x4, 0x735, 0x9, 0x7f, 0x2, 0xffff0000]}}, 0x5c) 00:50:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x400, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x120000000) 00:50:30 executing program 5: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0e0628bd7000fbdbdf250c0000000500300001000000080032000300000008003c00d10e0000050035001f000000060028000400000008000300", @ANYRES32=0x0, @ANYBLOB="0580a05096447eb1e5d3a0ebbf400383ac8f0ad359e8a4aad4fd378dec2203c9b4c22089955d7367966887cb9b73f11b538daeba3e9ea217c60ee7bf00000000000000002100000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"c7d533cbd305de334ec450094f3cc43ec717863cb1306643d4aa8003da1d44e2"}) 00:50:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r2 = socket(0x2, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x7c, &(0x7f00000000c0)=""/124, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x1c, 0x121}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r0, r3, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000340)=[{0x4, 0x2, 0x10, 0x2}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xfffffffa}, 0x90) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5407, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) socket(0x2, 0x3, 0x2) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x7c, &(0x7f00000000c0)=""/124, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x1c, 0x121}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r0, r3, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000340)=[{0x4, 0x2, 0x10, 0x2}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xfffffffa}, 0x90) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r4, 0x5407, 0x20000000) (async) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:31 executing program 4: syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000140)={0x4, 0x41f9, 0x1, 0xbb, &(0x7f0000000080)=""/187, 0x54, &(0x7f00000001c0)=""/84, 0x78, &(0x7f00000002c0)=""/120}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) syz_open_pts(r3, 0x101000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xb1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000280)=""/13) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000540)=0xfffffffa) 00:50:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$KDDELIO(r1, 0x2, 0x20000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x610200, 0x0) 00:50:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x400, 0x4) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r1, 0x5406, 0x120000000) 00:50:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r2 = socket(0x2, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x7c, &(0x7f00000000c0)=""/124, 0x40f00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x4, 0xa, 0x1c, 0x121}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r0, r3, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000340)=[{0x4, 0x2, 0x10, 0x2}, {0x4, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xe, 0xa}, {0x2, 0x3, 0x5, 0x6}], 0x10, 0xfffffffa}, 0x90) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5407, 0x20000000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$KDDELIO(r1, 0x2, 0x20000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x610200, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x610200, 0x0) (async) 00:50:31 executing program 4: syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000140)={0x4, 0x41f9, 0x1, 0xbb, &(0x7f0000000080)=""/187, 0x54, &(0x7f00000001c0)=""/84, 0x78, &(0x7f00000002c0)=""/120}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) syz_open_pts(r3, 0x101000) (async) syz_open_pts(r3, 0x101000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xb1) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000280)=""/13) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) (async) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000540)=0xfffffffa) 00:50:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x400, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x120000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0x400, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r1, 0x5406, 0x120000000) (async) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x9, 0x2, 0x4}) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0x2) 00:50:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) 00:50:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$KDDELIO(r1, 0x2, 0x20000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x610200, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x610200, 0x0) (async) 00:50:31 executing program 4: syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000140)={0x4, 0x41f9, 0x1, 0xbb, &(0x7f0000000080)=""/187, 0x54, &(0x7f00000001c0)=""/84, 0x78, &(0x7f00000002c0)=""/120}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) syz_open_pts(r3, 0x101000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xb1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000280)=""/13) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000540)=0xfffffffa) syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000140)={0x4, 0x41f9, 0x1, 0xbb, &(0x7f0000000080)=""/187, 0x54, &(0x7f00000001c0)=""/84, 0x78, &(0x7f00000002c0)=""/120}) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) (async) syz_open_pts(r3, 0x101000) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xb1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000280)=""/13) (async) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) (async) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) (async) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000540)=0xfffffffa) (async) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x9, 0x2, 0x4}) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0x2) 00:50:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 00:50:31 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044001) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r3}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 00:50:31 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)={0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x0, r1, 0x6, 0x904, 0x9, 0x1504}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8001, 0x6, 0xfffffffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x2, 0x20000000) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x9, 0x2, 0x4}) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r1, 0x2) 00:50:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:31 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044001) 00:50:31 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) 00:50:31 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)={0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x0, r1, 0x6, 0x904, 0x9, 0x1504}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8001, 0x6, 0xfffffffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x2, 0x20000000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r3}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 00:50:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:31 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)={0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x0, r1, 0x6, 0x904, 0x9, 0x1504}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8001, 0x6, 0xfffffffd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x2, 0x20000000) 00:50:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0x1f, 0x6, 0x1) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_pts(r0, 0x40) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r3}) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) 00:50:31 executing program 1: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4044001) 00:50:31 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000002c0)) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x9, 0x9}) 00:50:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x48) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0x1f, 0x6, 0x1) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_pts(r0, 0x40) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:31 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000002c0)) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x9, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f00000002c0)) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x9, 0x9}) (async) 00:50:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4000884) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:31 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000002c0)) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x9, 0x9}) 00:50:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4000884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4000884) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0xffffffffffffffa5, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x139c}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6e00013f2016efe1c7cedc67024768ff219ee27743af95efdc78a6ae2eb16e06003d409e7518706d02192e78e4a84c3a2110e7c477c7de8872bf2604da7f3d29d502af22caf9e036652157d20d", @ANYRES16=r2, @ANYBLOB="04002bbd7000ffdbdf2504000000060028000300000008003a004f0000000800390001800000080031000004000008003400ff070000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048045}, 0x4000000) 00:50:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0x1f, 0x6, 0x1) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_pts(r0, 0x40) 00:50:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x101) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:31 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0xffff}, {0x0, 0xd}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x9}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4000884) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:31 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:31 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:31 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x101) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:31 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0xffffffffffffffa5, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x139c}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}}, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6e00013f2016efe1c7cedc67024768ff219ee27743af95efdc78a6ae2eb16e06003d409e7518706d02192e78e4a84c3a2110e7c477c7de8872bf2604da7f3d29d502af22caf9e036652157d20d", @ANYRES16=r2, @ANYBLOB="04002bbd7000ffdbdf2504000000060028000300000008003a004f0000000800390001800000080031000004000008003400ff070000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048045}, 0x4000000) 00:50:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xe1f) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/94) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 00:50:32 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x101) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:32 executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x800, 0x498c, 0xfffffff8, 0x9, 0xffff}) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0xffffffffffffffa5, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x139c}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6e00013f2016efe1c7cedc67024768ff219ee27743af95efdc78a6ae2eb16e06003d409e7518706d02192e78e4a84c3a2110e7c477c7de8872bf2604da7f3d29d502af22caf9e036652157d20d", @ANYRES16=r2, @ANYBLOB="04002bbd7000ffdbdf2504000000060028000300000008003a004f0000000800390001800000080031000004000008003400ff070000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048045}, 0x4000000) 00:50:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xe1f) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/94) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_pts(r0, 0x84002) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:32 executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x800, 0x498c, 0xfffffff8, 0x9, 0xffff}) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/94) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/94) (async) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) (async) 00:50:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xe1f) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_pts(r0, 0x84002) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:32 executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x800, 0x498c, 0xfffffff8, 0x9, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x0, 0x800, 0x498c, 0xfffffff8, 0x9, 0xffff}) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 3: setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x400, @local, 0x5}, {0xa, 0x4e22, 0x7fffffff, @empty, 0x8001}, 0x0, {[0x88, 0xfb35, 0x3f73, 0xbc, 0x4, 0xb55d, 0x7e3b, 0x6]}}, 0x5c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_pts(r0, 0x84002) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/162) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:32 executing program 3: setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x400, @local, 0x5}, {0xa, 0x4e22, 0x7fffffff, @empty, 0x8001}, 0x0, {[0x88, 0xfb35, 0x3f73, 0xbc, 0x4, 0xb55d, 0x7e3b, 0x6]}}, 0x5c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:32 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/146) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 3: setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x400, @local, 0x5}, {0xa, 0x4e22, 0x7fffffff, @empty, 0x8001}, 0x0, {[0x88, 0xfb35, 0x3f73, 0xbc, 0x4, 0xb55d, 0x7e3b, 0x6]}}, 0x5c) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/162) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/162) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) 00:50:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/146) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x851) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x95c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xfff, '\x00', r6, r0, 0x0, 0x3, 0x4}, 0x48) 00:50:32 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/162) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) sched_rr_get_interval(r2, &(0x7f0000000080)) getpgid(r1) r3 = getpid() syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "323605b52f38b588264a638684dd9d4648a2a46d128039a8ef3be3ce624ded44"}) sched_rr_get_interval(r3, &(0x7f0000000040)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/146) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 64) ioctl$KDDELIO(r1, 0x5409, 0x1ff) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x851) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x95c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xfff, '\x00', r6, r0, 0x0, 0x3, 0x4}, 0x48) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x5) 00:50:32 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/37}) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x5) 00:50:32 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) (async) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) (async) sched_rr_get_interval(r2, &(0x7f0000000080)) getpgid(r1) (async) r3 = getpid() syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "323605b52f38b588264a638684dd9d4648a2a46d128039a8ef3be3ce624ded44"}) (async) sched_rr_get_interval(r3, &(0x7f0000000040)) (async) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0xc, &(0x7f0000000340)=""/12, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x3ff, 0x9}, 0x10, 0x147f1, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0x4, 0xa}, {0x0, 0x1, 0x9, 0x3}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={r3, 0x1}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={r3, &(0x7f0000000040)=""/39}) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x5) (async) 00:50:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/37}) (async, rerun: 64) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64) ioctl$KDDELIO(r0, 0x5407, 0x5) 00:50:32 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0xc, &(0x7f0000000340)=""/12, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x3ff, 0x9}, 0x10, 0x147f1, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0x4, 0xa}, {0x0, 0x1, 0x9, 0x3}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={r3, 0x1}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={r3, &(0x7f0000000040)=""/39}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={r3, &(0x7f0000000040)=""/39}) 00:50:32 executing program 0: syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) (async) sched_rr_get_interval(r1, &(0x7f0000000340)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) sched_rr_get_interval(r2, &(0x7f0000000080)) (async) sched_rr_get_interval(r2, &(0x7f0000000080)) getpgid(r1) r3 = getpid() syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "323605b52f38b588264a638684dd9d4648a2a46d128039a8ef3be3ce624ded44"}) sched_rr_get_interval(r3, &(0x7f0000000040)) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:32 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5406, 0x5) (rerun: 32) 00:50:32 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x600, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x851) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x95c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xfff, '\x00', r6, r0, 0x0, 0x3, 0x4}, 0x48) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1000, 0xc, &(0x7f0000000340)=""/12, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x3ff, 0x9}, 0x10, 0x147f1, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0x4, 0xa}, {0x0, 0x1, 0x9, 0x3}]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000500)={0x0, r1}, 0x10) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000140)={r3, 0x1}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={r3, &(0x7f0000000040)=""/39}) 00:50:32 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xc18) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:50:32 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x2}, 0xc) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x19) 00:50:32 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) 00:50:32 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xc18) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:50:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/37}) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/37}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x5) (async) 00:50:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x19) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x2}, 0xc) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x2}, 0xc) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) 00:50:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x10000) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:33 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0xc18) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x19) 00:50:33 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x2}, 0xc) (async, rerun: 32) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (rerun: 32) 00:50:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x10000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/47) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000001c0)={0x46, 0xf594, 0x3, 0xd0, &(0x7f0000000000)=""/208, 0x30, &(0x7f0000000100)=""/48, 0x73, &(0x7f0000000140)=""/115}) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/cpuinfo\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb6662aed3fdd2ced}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x7fffffffffffffff) 00:50:33 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x405) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:33 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x10000) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/47) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000001c0)={0x46, 0xf594, 0x3, 0xd0, &(0x7f0000000000)=""/208, 0x30, &(0x7f0000000100)=""/48, 0x73, &(0x7f0000000140)=""/115}) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x158002) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/cpuinfo\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb6662aed3fdd2ced}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x7fffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/cpuinfo\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb6662aed3fdd2ced}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x7fffffffffffffff) (async) 00:50:33 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x405) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000200)=""/47) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000001c0)={0x46, 0xf594, 0x3, 0xd0, &(0x7f0000000000)=""/208, 0x30, &(0x7f0000000100)=""/48, 0x73, &(0x7f0000000140)=""/115}) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x2033) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x8}) 00:50:33 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x405) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x158002) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x158002) (async) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x2033) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x5406, 0x2033) (async) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_pts(r0, 0x2000) ioctl$KDDELIO(r1, 0x4b35, 0x6) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/cpuinfo\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb6662aed3fdd2ced}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x7fffffffffffffff) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x8}) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x158002) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x158002) (async) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x2033) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_pts(r0, 0x2000) ioctl$KDDELIO(r1, 0x4b35, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_pts(r0, 0x2000) (async) ioctl$KDDELIO(r1, 0x4b35, 0x6) (async) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="554ba81b44828fea469ec2cde9e5a4d05bdfd5b171b969922800eb429964be34a126f3f13eea9a306c6bb7152fb17b45bcebac0f8bcd52c6") ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x8}) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) (async) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_pts(r0, 0x2000) ioctl$KDDELIO(r1, 0x4b35, 0x6) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="554ba81b44828fea469ec2cde9e5a4d05bdfd5b171b969922800eb429964be34a126f3f13eea9a306c6bb7152fb17b45bcebac0f8bcd52c6") (async, rerun: 32) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (rerun: 32) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x8, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000a00)={r1, &(0x7f0000000940)=[{}, {0x80000000, 0x0}], &(0x7f0000000980)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{0x80000000, r3, 0x3, [0x99, 0x2]}, {0x80000000, 0x0, 0x7, [0x9, 0x20]}, 0x10000000, [0x1, 0x1]}) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r4, 0x540b, 0x1ffff000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f0000000740), &(0x7f0000000780)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000840)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000a40)) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (rerun: 64) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3ff) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x7) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="554ba81b44828fea469ec2cde9e5a4d05bdfd5b171b969922800eb429964be34a126f3f13eea9a306c6bb7152fb17b45bcebac0f8bcd52c6") (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:33 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) 00:50:33 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x8, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) (rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000a00)={r1, &(0x7f0000000940)=[{}, {0x80000000, 0x0}], &(0x7f0000000980)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{0x80000000, r3, 0x3, [0x99, 0x2]}, {0x80000000, 0x0, 0x7, [0x9, 0x20]}, 0x10000000, [0x1, 0x1]}) (async, rerun: 64) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 64) ioctl$KDDELIO(r4, 0x540b, 0x1ffff000) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f0000000740), &(0x7f0000000780)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000840)={r5}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000a40)) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20008000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x3) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000)) (async) 00:50:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/71) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x7) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20008000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:33 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7f, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x1, 0x2}) 00:50:33 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20008000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:33 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x7) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async, rerun: 64) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/71) (rerun: 64) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000680)={0x0, 0x8, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000540)=[{0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x80000000}, {}], 0x1, 0x0, &(0x7f0000000640)=[{}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000a00)={r1, &(0x7f0000000940)=[{}, {0x80000000, 0x0}], &(0x7f0000000980)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000700)={{0x80000000, r3, 0x3, [0x99, 0x2]}, {0x80000000, 0x0, 0x7, [0x9, 0x20]}, 0x10000000, [0x1, 0x1]}) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r4, 0x540b, 0x1ffff000) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={r2, &(0x7f0000000740), &(0x7f0000000780)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000840)={r5}) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r6, 0x4b33, &(0x7f0000000a40)) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7f, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x1, 0x2}) 00:50:34 executing program 2: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/78) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) syz_open_pts(r0, 0x40000) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x3ff, 0x7fff, 0x5, 0xffffff80, 0x20}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:50:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/71) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/71) (async) 00:50:34 executing program 2: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/78) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) syz_open_pts(r0, 0x40000) (async) syz_open_pts(r0, 0x40000) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={r4}) syz_open_pts(r2, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040014) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7f, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x1, 0x1, 0x1, 0x2}) 00:50:34 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x6d04, 0x800, 0x1, 0x11f}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xf98b, 0x80, 0x2, 0x400001d6, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) syz_io_uring_setup(0x3e3f, &(0x7f0000000340)={0x0, 0xbccc, 0x8, 0x0, 0x317, 0x0, r3}, &(0x7f0000000240), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1}) 00:50:34 executing program 2: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/78) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) (async) syz_open_pts(r0, 0x40000) 00:50:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x3ff, 0x7fff, 0x5, 0xffffff80, 0x20}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={r4}) syz_open_pts(r2, 0x40) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040014) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x3ff, 0x7fff, 0x5, 0xffffff80, 0x20}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x3ff, 0x7fff, 0x5, 0xffffff80, 0x20}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x6d04, 0x800, 0x1, 0x11f}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xf98b, 0x80, 0x2, 0x400001d6, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) syz_io_uring_setup(0x3e3f, &(0x7f0000000340)={0x0, 0xbccc, 0x8, 0x0, 0x317, 0x0, r3}, &(0x7f0000000240), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x6d04, 0x800, 0x1, 0x11f}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xf98b, 0x80, 0x2, 0x400001d6, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) syz_io_uring_setup(0x3e3f, &(0x7f0000000340)={0x0, 0xbccc, 0x8, 0x0, 0x317, 0x0, r3}, &(0x7f0000000240), &(0x7f00000003c0)) (async) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1}) (async) 00:50:34 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000140)={r4}) syz_open_pts(r2, 0x40) (async) syz_open_pts(r2, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040014) 00:50:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x205) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x6d04, 0x800, 0x1, 0x11f}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xf98b, 0x80, 0x2, 0x400001d6, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) syz_io_uring_setup(0x3e3f, &(0x7f0000000340)={0x0, 0xbccc, 0x8, 0x0, 0x317, 0x0, r3}, &(0x7f0000000240), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x6d04, 0x800, 0x1, 0x11f}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_setup(0x7c35, &(0x7f0000000100)={0x0, 0xf98b, 0x80, 0x2, 0x400001d6, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) syz_io_uring_setup(0x3e3f, &(0x7f0000000340)={0x0, 0xbccc, 0x8, 0x0, 0x317, 0x0, r3}, &(0x7f0000000240), &(0x7f00000003c0)) (async) syz_io_uring_submit(r2, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, r4, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0\x00', r3, 0x0, 0x1}) (async) 00:50:34 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x6, 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r0, 0x3, 0x6, 0x1bbd, 0xffeffff8, 0x5}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:34 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:34 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) (async) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x205) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (rerun: 32) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a1753a90ef7022bdfe3f5a5b2da9291654ba70ae8b149abdd6f9610220e4fcf4ebe2980c1fbf97c4216cdea78b2f3859c775848317d1afe23e92ce08036cae0b3b063644efc9b5b4a9ad6cbcc935fd1205a7a196ee7eb0dee6ec08de4a38e07eb57d0420e850b111877cb5b359655c51434a801f83496f2e0c9377772ad27a8d0581b7805739ea08776b098fd09b201a5bb3663ff9953fc07ee2463bff89213716725f7c236673749f6ba64b56edd733") 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:34 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) 00:50:34 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x6, 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r0, 0x3, 0x6, 0x1bbd, 0xffeffff8, 0x5}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x6, 0x4, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r0, 0x3, 0x6, 0x1bbd, 0xffeffff8, 0x5}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_open_pts(r0, 0x400100) 00:50:34 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x205) (async) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x4) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:34 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/4096) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x4, 0x8e0, {0x0, 0x2710}, {0x7, 0x8, 0xff, 0xff, 0x6, 0x6d, "5d91a71a"}, 0x200, 0x4, {0xffffffffffffffff}, 0x7}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r2, 0x10000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) close$fd_v4l2_buffer(r1) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a1753a90ef7022bdfe3f5a5b2da9291654ba70ae8b149abdd6f9610220e4fcf4ebe2980c1fbf97c4216cdea78b2f3859c775848317d1afe23e92ce08036cae0b3b063644efc9b5b4a9ad6cbcc935fd1205a7a196ee7eb0dee6ec08de4a38e07eb57d0420e850b111877cb5b359655c51434a801f83496f2e0c9377772ad27a8d0581b7805739ea08776b098fd09b201a5bb3663ff9953fc07ee2463bff89213716725f7c236673749f6ba64b56edd733") 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 64) syz_open_pts(r0, 0x400100) (rerun: 64) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x404, 0x0, 0x4}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x80800, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)='%+9llu \x00'}, 0x20) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a1753a90ef7022bdfe3f5a5b2da9291654ba70ae8b149abdd6f9610220e4fcf4ebe2980c1fbf97c4216cdea78b2f3859c775848317d1afe23e92ce08036cae0b3b063644efc9b5b4a9ad6cbcc935fd1205a7a196ee7eb0dee6ec08de4a38e07eb57d0420e850b111877cb5b359655c51434a801f83496f2e0c9377772ad27a8d0581b7805739ea08776b098fd09b201a5bb3663ff9953fc07ee2463bff89213716725f7c236673749f6ba64b56edd733") 00:50:34 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x6, 0x4, 0x7, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x6, 0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r0, 0x3, 0x6, 0x1bbd, 0xffeffff8, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x2, r0, 0x3, 0x6, 0x1bbd, 0xffeffff8, 0x5}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:34 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/4096) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x4, 0x8e0, {0x0, 0x2710}, {0x7, 0x8, 0xff, 0xff, 0x6, 0x6d, "5d91a71a"}, 0x200, 0x4, {0xffffffffffffffff}, 0x7}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r2, 0x10000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) close$fd_v4l2_buffer(r1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/4096) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x4, 0x8e0, {0x0, 0x2710}, {0x7, 0x8, 0xff, 0xff, 0x6, 0x6d, "5d91a71a"}, 0x200, 0x4, {}, 0x7}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_pts(r2, 0x10000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) (async) close$fd_v4l2_buffer(r1) (async) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x404, 0x0, 0x4}) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) 00:50:34 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:34 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) syz_open_pts(r0, 0x400100) 00:50:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"a2d8f590deb4efa66659f14b703703433008db5c0125023433bea0aafd97462b", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"300701497acb310969dd35058781480e2e3c0326d15e5e38d11ba3164089d211"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7fffffff) ioctl$KDDELIO(r1, 0x2, 0x20000000) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x87fc, @remote, 0x80000001}, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3f7}, 0x1, {[0x6c088391, 0x20, 0xffff0001, 0x7, 0x4000, 0x6, 0xfff, 0x2]}}, 0x5c) 00:50:34 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404201, 0x0) 00:50:34 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x404, 0x0, 0x4}) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) 00:50:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/4096) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x4, 0x8e0, {0x0, 0x2710}, {0x7, 0x8, 0xff, 0xff, 0x6, 0x6d, "5d91a71a"}, 0x200, 0x4, {0xffffffffffffffff}, 0x7}) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r2, 0x10000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000080)) (async, rerun: 64) close$fd_v4l2_buffer(r1) (rerun: 64) 00:50:35 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) syz_open_pts(r0, 0x20080) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000008c0)={0x0, 0x5, 0x7, 0x2, 0x4, 0xf1bf, 0x81}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000880)={0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x35, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34371c64, 0x0, 0x0, 0x0, 0x76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x8, 0x2, 0x3, 0x30, 0x10}, @generic={0x0, 0xf, 0x1, 0xff, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xeb2, 0x87, &(0x7f00000002c0)=""/135, 0x40f00, 0x4, '\x00', r5, 0x2, r6, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x401, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0xb}], 0x10, 0x6}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x3, 0x8}) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404201, 0x0) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x96) 00:50:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"a2d8f590deb4efa66659f14b703703433008db5c0125023433bea0aafd97462b", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"300701497acb310969dd35058781480e2e3c0326d15e5e38d11ba3164089d211"}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7fffffff) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x87fc, @remote, 0x80000001}, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3f7}, 0x1, {[0x6c088391, 0x20, 0xffff0001, 0x7, 0x4000, 0x6, 0xfff, 0x2]}}, 0x5c) 00:50:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) syz_open_pts(r0, 0x20080) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000008c0)={0x0, 0x5, 0x7, 0x2, 0x4, 0xf1bf, 0x81}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000880)={0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x35, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34371c64, 0x0, 0x0, 0x0, 0x76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x8, 0x2, 0x3, 0x30, 0x10}, @generic={0x0, 0xf, 0x1, 0xff, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xeb2, 0x87, &(0x7f00000002c0)=""/135, 0x40f00, 0x4, '\x00', r5, 0x2, r6, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x401, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0xb}], 0x10, 0x6}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) syz_open_pts(r0, 0x20080) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000008c0)={0x0, 0x5, 0x7, 0x2, 0x4, 0xf1bf, 0x81}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000880)={0x0, 0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x35, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34371c64, 0x0, 0x0, 0x0, 0x76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x8, 0x2, 0x3, 0x30, 0x10}, @generic={0x0, 0xf, 0x1, 0xff, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xeb2, 0x87, &(0x7f00000002c0)=""/135, 0x40f00, 0x4, '\x00', r5, 0x2, r6, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x401, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0xb}], 0x10, 0x6}, 0x90) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x3, 0x8}) (async) 00:50:35 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:35 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xf, 0x0, 0x80000000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x404201, 0x0) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x4) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x96) 00:50:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"a2d8f590deb4efa66659f14b703703433008db5c0125023433bea0aafd97462b", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"300701497acb310969dd35058781480e2e3c0326d15e5e38d11ba3164089d211"}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7fffffff) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x87fc, @remote, 0x80000001}, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3f7}, 0x1, {[0x6c088391, 0x20, 0xffff0001, 0x7, 0x4000, 0x6, 0xfff, 0x2]}}, 0x5c) 00:50:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) syz_open_pts(r0, 0x20080) (async) syz_open_pts(r0, 0x20080) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000008c0)={0x0, 0x5, 0x7, 0x2, 0x4, 0xf1bf, 0x81}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000880)={0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x35, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34371c64, 0x0, 0x0, 0x0, 0x76}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x8, 0x2, 0x3, 0x30, 0x10}, @generic={0x0, 0xf, 0x1, 0xff, 0xfffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xeb2, 0x87, &(0x7f00000002c0)=""/135, 0x40f00, 0x4, '\x00', r5, 0x2, r6, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x8, 0x401, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x3, 0xb}], 0x10, 0x6}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x3, 0x8}) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x96) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800}) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x4) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x96) (async) 00:50:35 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xf, 0x0, 0x80000000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:50:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa645) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8000, r0}, 0x18) ioctl$KDDELIO(r1, 0x2, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf250900000008003c080000000008003b00010400000800340001000000050029000200000008000b000900000005002f000100000008002b000010000008003c000800000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00b8800000990365973dd1bd65c4481042b065f7bb801964b6009ca76773106bf17203be7ff6a4d2c107d4b661ab369b74a39d24058b8bc6152da787ecf57f8f379367e8ea23ac3ff7cec8e18146fd9aae94ed4c5ff93376f35b9f4cf979afe862cb22bc80d2d15505b2dd42ce06a22efb58b7310f204f0d19ef02b9bda1df2a719ef062651235716f4d13539eb031e0df8aee63c2687d59a66f8255a0445e61e1ee47aa47c9767644a3128b11827598de1d4af44247e049bc8f0d918b220b732cb4d1447aa32295a595fc3355676aa607228022529c4d17c9895da913a89490ccd91d434c7071"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 00:50:35 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0xf, 0x0, 0x80000000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa645) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8000, r0}, 0x18) ioctl$KDDELIO(r1, 0x2, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf250900000008003c080000000008003b00010400000800340001000000050029000200000008000b000900000005002f000100000008002b000010000008003c000800000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00b8800000990365973dd1bd65c4481042b065f7bb801964b6009ca76773106bf17203be7ff6a4d2c107d4b661ab369b74a39d24058b8bc6152da787ecf57f8f379367e8ea23ac3ff7cec8e18146fd9aae94ed4c5ff93376f35b9f4cf979afe862cb22bc80d2d15505b2dd42ce06a22efb58b7310f204f0d19ef02b9bda1df2a719ef062651235716f4d13539eb031e0df8aee63c2687d59a66f8255a0445e61e1ee47aa47c9767644a3128b11827598de1d4af44247e049bc8f0d918b220b732cb4d1447aa32295a595fc3355676aa607228022529c4d17c9895da913a89490ccd91d434c7071"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x8000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa645) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8000, r0}, 0x18) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf250900000008003c080000000008003b00010400000800340001000000050029000200000008000b000900000005002f000100000008002b000010000008003c000800000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00b8800000990365973dd1bd65c4481042b065f7bb801964b6009ca76773106bf17203be7ff6a4d2c107d4b661ab369b74a39d24058b8bc6152da787ecf57f8f379367e8ea23ac3ff7cec8e18146fd9aae94ed4c5ff93376f35b9f4cf979afe862cb22bc80d2d15505b2dd42ce06a22efb58b7310f204f0d19ef02b9bda1df2a719ef062651235716f4d13539eb031e0df8aee63c2687d59a66f8255a0445e61e1ee47aa47c9767644a3128b11827598de1d4af44247e049bc8f0d918b220b732cb4d1447aa32295a595fc3355676aa607228022529c4d17c9895da913a89490ccd91d434c7071"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async) 00:50:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) 00:50:35 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa645) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8000, r0}, 0x18) (async, rerun: 32) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf250900000008003c080000000008003b00010400000800340001000000050029000200000008000b000900000005002f000100000008002b000010000008003c000800000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00b8800000990365973dd1bd65c4481042b065f7bb801964b6009ca76773106bf17203be7ff6a4d2c107d4b661ab369b74a39d24058b8bc6152da787ecf57f8f379367e8ea23ac3ff7cec8e18146fd9aae94ed4c5ff93376f35b9f4cf979afe862cb22bc80d2d15505b2dd42ce06a22efb58b7310f204f0d19ef02b9bda1df2a719ef062651235716f4d13539eb031e0df8aee63c2687d59a66f8255a0445e61e1ee47aa47c9767644a3128b11827598de1d4af44247e049bc8f0d918b220b732cb4d1447aa32295a595fc3355676aa607228022529c4d17c9895da913a89490ccd91d434c7071"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x8000) 00:50:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x5) (async) ioctl$KDDELIO(r0, 0x5407, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x200000) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x80, 0x2, 0x4, @local, 'team_slave_1\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x0, 0xffffff12, {r2}, {}, 0x7, 0x9}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) 00:50:35 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1f, r3, 0x10001}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000851}, 0x40) 00:50:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x80, 0x2, 0x4, @local, 'team_slave_1\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) getpid() (async) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x0, 0xffffff12, {r2}, {}, 0x7, 0x9}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) 00:50:35 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x5) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r2, 0x5406, 0x20000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:35 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1f, r3, 0x10001}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000851}, 0x40) 00:50:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x80, 0x2, 0x4, @local, 'team_slave_1\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = getpid() sched_rr_get_interval(r2, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x0, 0xffffff12, {r2}, {}, 0x7, 0x9}) (async, rerun: 64) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/166) 00:50:35 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r2, 0x5406, 0x20000000) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000)=0x80, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) 00:50:35 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1f, r3, 0x10001}, 0xc) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x2, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000851}, 0x40) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x440040, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/166) 00:50:35 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0x8, 0xffffffff, 0x0, 0x0, 0x9, 0x14a7, 0x400, 0x8]}}, 0x5c) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a385078}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}}, 0x20000000) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:35 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x0, 0x5}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, r2}) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/114) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x3, 0x4}, 0x48) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 00:50:35 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x0) 00:50:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/166) 00:50:35 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0x8, 0xffffffff, 0x0, 0x0, 0x9, 0x14a7, 0x400, 0x8]}}, 0x5c) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:35 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x3, 0x4}, 0x48) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 00:50:35 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a385078}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}}, 0x20000000) (async, rerun: 64) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) (rerun: 64) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:35 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x0, 0x5}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, r2}) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/114) 00:50:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) syz_open_pts(r2, 0x0) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d27066bc342", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250d00000008003a00060000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000080) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0xffffffffffffffff, {[0x8, 0xffffffff, 0x0, 0x0, 0x9, 0x14a7, 0x400, 0x8]}}, 0x5c) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:36 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8, '\x00', 0x0, r2, 0x3, 0x3, 0x4}, 0x48) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d27066bc342", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250d00000008003a00060000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000080) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d27066bc342", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250d00000008003a00060000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000080) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d27066bc342", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf250d00000008003a00060000000500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000080) (async) 00:50:36 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x0, 0x5}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, r2}) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/114) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x0, 0x5}) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000), 0x0, r2}) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000340)=""/114) (async) 00:50:36 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x44e8c0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000000)=0x9) ioctl$KDDELIO(r3, 0x540b, 0x1ffff000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) 00:50:36 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a385078}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}}, 0x20000000) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a385078}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}}, 0x20000000) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) (async) 00:50:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) syz_open_pts(r2, 0x0) (async) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa33}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x267}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) 00:50:36 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x44e8c0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000000)=0x9) ioctl$KDDELIO(r3, 0x540b, 0x1ffff000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 00:50:36 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x142) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa33}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x267}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa33}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x267}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) 00:50:36 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x142) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:36 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x44e8c0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async, rerun: 32) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000000)=0x9) (async, rerun: 32) ioctl$KDDELIO(r3, 0x540b, 0x1ffff000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) 00:50:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/25) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0xc4000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 00:50:36 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x20000) ioctl$KDDELIO(r2, 0x5406, 0x20000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) 00:50:36 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x20000) ioctl$KDDELIO(r2, 0x5406, 0x20000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_pts(r0, 0x20000) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) (async) 00:50:36 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000e072cde521de53a1f82b1603db1f51511a7428818337c410f6f9e009854603119ed0d66ddaa6a3b642df28c467331414a3005808abcec4d13519dd2e26b1763dcd5a", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250100000008002b002a00000008002c00a56b00000500300001000000050029000100000008002c000000010008002c00e4f5ffff"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {}]}) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa33}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x267}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa33}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x267}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000) 00:50:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/25) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_open_pts(r1, 0xc4000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 00:50:36 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x142) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x2, 0x142) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x4b35, 0x401) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:36 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 32) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x20000) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) 00:50:36 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000040)=""/25) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_open_pts(r1, 0xc4000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 00:50:36 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000e072cde521de53a1f82b1603db1f51511a7428818337c410f6f9e009854603119ed0d66ddaa6a3b642df28c467331414a3005808abcec4d13519dd2e26b1763dcd5a", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250100000008002b002a00000008002c00a56b00000500300001000000050029000100000008002c000000010008002c00e4f5ffff"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {}]}) 00:50:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/222) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:36 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$KDDELIO(r1, 0x4b35, 0x401) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (rerun: 32) 00:50:36 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000e072cde521de53a1f82b1603db1f51511a7428818337c410f6f9e009854603119ed0d66ddaa6a3b642df28c467331414a3005808abcec4d13519dd2e26b1763dcd5a", @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf250100000008002b002a00000008002c00a56b00000500300001000000050029000100000008002c000000010008002c00e4f5ffff"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) (async, rerun: 64) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {}]}) (rerun: 64) 00:50:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x4e0841) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/222) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:36 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:36 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000000)) ioctl$KDDELIO(r1, 0x4b35, 0x401) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x4e0841) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:36 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x40800}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/51) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/222) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:36 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xa75, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, {0xa, 0x4e21, 0xfffffffd, @local, 0x7fffffff}, 0xffffffffffffffff, {[0x80000000, 0x6, 0x400, 0x800, 0x81, 0xffff7fff, 0x7, 0x9]}}, 0x5c) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180), 0xc}) ioctl$KDDELIO(r1, 0x5407, 0x20000000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) 00:50:36 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x4e0841) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r0, 0x4e0841) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) 00:50:36 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) 00:50:36 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x40800}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/51) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:36 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:36 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xa75, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, {0xa, 0x4e21, 0xfffffffd, @local, 0x7fffffff}, 0xffffffffffffffff, {[0x80000000, 0x6, 0x400, 0x800, 0x81, 0xffff7fff, 0x7, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xa75, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, {0xa, 0x4e21, 0xfffffffd, @local, 0x7fffffff}, 0xffffffffffffffff, {[0x80000000, 0x6, 0x400, 0x800, 0x81, 0xffff7fff, 0x7, 0x9]}}, 0x5c) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180), 0xc}) ioctl$KDDELIO(r1, 0x5407, 0x20000000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) 00:50:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9838bcdd04d9fd9a143e115d01f423659fefed04aaae76e3d93ec92e63db9fb62986772036bdcaff61bc1cf8c314057d8b7d53622517ab89229ab0b7ba141cf791abdc664cf37e74f9b566cfd834851b6370a5a897ba7443d2184ab4e03500fb45b032b54b806f6ed16f58a8d70afcf8e4d2a8b973f1323cabfad1410751153218bb") ioctl$KDDELIO(r2, 0x540a, 0xffeffffc) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{}, {0x80000000}], &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0xa, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000a40)={{r2, 0x0, 0x0, [0xc95, 0xfffffffb]}, {r3, 0x0, 0x2, [0xfff, 0x4]}, 0x1, [0x6, 0x8]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000b00)={r4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000007c0)={0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000b40)={0x0, 0x1, r1}) 00:50:37 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xa75, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, {0xa, 0x4e21, 0xfffffffd, @local, 0x7fffffff}, 0xffffffffffffffff, {[0x80000000, 0x6, 0x400, 0x800, 0x81, 0xffff7fff, 0x7, 0x9]}}, 0x5c) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180), 0xc}) ioctl$KDDELIO(r1, 0x5407, 0x20000000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xa75, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1ff}, {0xa, 0x4e21, 0xfffffffd, @local, 0x7fffffff}, 0xffffffffffffffff, {[0x80000000, 0x6, 0x400, 0x800, 0x81, 0xffff7fff, 0x7, 0x9]}}, 0x5c) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000180), 0xc}) (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) (async) 00:50:37 executing program 4: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x40800}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/51) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:37 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9838bcdd04d9fd9a143e115d01f423659fefed04aaae76e3d93ec92e63db9fb62986772036bdcaff61bc1cf8c314057d8b7d53622517ab89229ab0b7ba141cf791abdc664cf37e74f9b566cfd834851b6370a5a897ba7443d2184ab4e03500fb45b032b54b806f6ed16f58a8d70afcf8e4d2a8b973f1323cabfad1410751153218bb") ioctl$KDDELIO(r2, 0x540a, 0xffeffffc) 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{}, {0x80000000}], &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0xa, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000a40)={{r2, 0x0, 0x0, [0xc95, 0xfffffffb]}, {r3, 0x0, 0x2, [0xfff, 0x4]}, 0x1, [0x6, 0x8]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000b00)={r4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000007c0)={0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000b40)={0x0, 0x1, r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0xa, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000a40)={{r2, 0x0, 0x0, [0xc95, 0xfffffffb]}, {r3, 0x0, 0x2, [0xfff, 0x4]}, 0x1, [0x6, 0x8]}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000b00)={r4}) (async) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000007c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000b40)={0x0, 0x1, r1}) (async) 00:50:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000001) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/vmstat\x00', 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x800) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) (async) 00:50:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"0b1dde242b8ffb09f0cca20d73113d6510291833a080f2c715195dc8701ebd98"}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={r3}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="977f7c93ae74352c8de0f7008857f53b558e0e883d6721176d4d64942f849731cba53b9b609f8148fcacb163ab3cf7f495da211ceb8bbb3a2eff1c23b6305f18150100000031f1a47e524e38eecb3a35399f9cf0dc1670d2fd551dab8488f58c28d9c29b0fe140609cfc115ab04f683819711b3a70857f45ba4da2aaa50aa0fea2a222d1762a2caaf817e053fcdceee115cae4950310c11e629e8c164fdf5ad37335917e706f1c969961cd06e7ed3e458491096e2d65bcd01468c771f2a0447af0a5b916367cd22c810dd59f7eef0b237951a6fb8442f174ca3c2b58e5a5d1e964af2763734146143188644c345ebcbf0dd17a7732eb") ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:50:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) (async) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000040)="9838bcdd04d9fd9a143e115d01f423659fefed04aaae76e3d93ec92e63db9fb62986772036bdcaff61bc1cf8c314057d8b7d53622517ab89229ab0b7ba141cf791abdc664cf37e74f9b566cfd834851b6370a5a897ba7443d2184ab4e03500fb45b032b54b806f6ed16f58a8d70afcf8e4d2a8b973f1323cabfad1410751153218bb") (async) ioctl$KDDELIO(r2, 0x540a, 0xffeffffc) 00:50:37 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000001) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040)=[{}, {0x80000000}], &(0x7f0000000080)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000140), &(0x7f0000000180)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0xa, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000009c0)={0x0, 0xa, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000780)=[{}, {}], 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000a40)={{r2, 0x0, 0x0, [0xc95, 0xfffffffb]}, {r3, 0x0, 0x2, [0xfff, 0x4]}, 0x1, [0x6, 0x8]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) (async) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffffff7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000b80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000bc0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000b00)={r4}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000b00)={r4}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000007c0)={0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000b40)={0x0, 0x1, r1}) 00:50:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:50:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"0b1dde242b8ffb09f0cca20d73113d6510291833a080f2c715195dc8701ebd98"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={r3}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="977f7c93ae74352c8de0f7008857f53b558e0e883d6721176d4d64942f849731cba53b9b609f8148fcacb163ab3cf7f495da211ceb8bbb3a2eff1c23b6305f18150100000031f1a47e524e38eecb3a35399f9cf0dc1670d2fd551dab8488f58c28d9c29b0fe140609cfc115ab04f683819711b3a70857f45ba4da2aaa50aa0fea2a222d1762a2caaf817e053fcdceee115cae4950310c11e629e8c164fdf5ad37335917e706f1c969961cd06e7ed3e458491096e2d65bcd01468c771f2a0447af0a5b916367cd22c810dd59f7eef0b237951a6fb8442f174ca3c2b58e5a5d1e964af2763734146143188644c345ebcbf0dd17a7732eb") (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000001) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000001) (async) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x68, 0x9, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8}) write$damon_target_ids(r1, &(0x7f0000000080)={@val, [{' ', r6}]}, 0x1d) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x101080) ioctl$KDDELIO(r1, 0x5406, 0x20100000) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x200) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x68, 0x9, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8}) write$damon_target_ids(r1, &(0x7f0000000080)={@val, [{' ', r6}]}, 0x1d) 00:50:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"0b1dde242b8ffb09f0cca20d73113d6510291833a080f2c715195dc8701ebd98"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000240)={r3}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="977f7c93ae74352c8de0f7008857f53b558e0e883d6721176d4d64942f849731cba53b9b609f8148fcacb163ab3cf7f495da211ceb8bbb3a2eff1c23b6305f18150100000031f1a47e524e38eecb3a35399f9cf0dc1670d2fd551dab8488f58c28d9c29b0fe140609cfc115ab04f683819711b3a70857f45ba4da2aaa50aa0fea2a222d1762a2caaf817e053fcdceee115cae4950310c11e629e8c164fdf5ad37335917e706f1c969961cd06e7ed3e458491096e2d65bcd01468c771f2a0447af0a5b916367cd22c810dd59f7eef0b237951a6fb8442f174ca3c2b58e5a5d1e964af2763734146143188644c345ebcbf0dd17a7732eb") (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:37 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) 00:50:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x101080) (async) syz_open_pts(r2, 0x101080) ioctl$KDDELIO(r1, 0x5406, 0x20100000) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x68, 0x9, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8}) write$damon_target_ids(r1, &(0x7f0000000080)={@val, [{' ', r6}]}, 0x1d) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x200) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x68, 0x9, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8}) (async) write$damon_target_ids(r1, &(0x7f0000000080)={@val, [{' ', r6}]}, 0x1d) (async) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:37 executing program 4: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00!\x00c'], 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x1ffff000) 00:50:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x101080) (async, rerun: 32) ioctl$KDDELIO(r1, 0x5406, 0x20100000) (rerun: 32) 00:50:37 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x7) 00:50:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) [ 3037.608432][T24382] __nla_validate_parse: 17 callbacks suppressed [ 3037.608448][T24382] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x10181) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x28) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="ef40d4ad82bc30fb2e3fc744598080a849f396c770bf8e48699ec4cffd6c3ad5ebc5b71e88a73cb04bfcad07f5c9c16bd1f5c8ba41a8b5977c58c217840a5388012106d7465fc571fa99e3f831a6d6e9cdf1ee000fd0eec212b7a14ed9dd6b977e40010fc3cb1f0da04a43eb4b3a0d3608cea8e4ee89d7f77a9fbfdb39582f2944359c59a4b2c8442ff201b47dc3a029a29e1596f8cbfc78cb873440f96b25f817f9") ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:37 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x7) 00:50:37 executing program 4: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) (async) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00!\x00c'], 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x1ffff000) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x10181) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x28) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) [ 3037.725203][T24404] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="ef40d4ad82bc30fb2e3fc744598080a849f396c770bf8e48699ec4cffd6c3ad5ebc5b71e88a73cb04bfcad07f5c9c16bd1f5c8ba41a8b5977c58c217840a5388012106d7465fc571fa99e3f831a6d6e9cdf1ee000fd0eec212b7a14ed9dd6b977e40010fc3cb1f0da04a43eb4b3a0d3608cea8e4ee89d7f77a9fbfdb39582f2944359c59a4b2c8442ff201b47dc3a029a29e1596f8cbfc78cb873440f96b25f817f9") (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:37 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x208042, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x0, {}, {0xee01}, 0xb08, 0x80}) r2 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x4, {r2}, {r1}, 0xbe30, 0xffffffffeffffffe}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0x400, 0x0, 0x10001}) ioctl$KDDELIO(r3, 0x5406, 0x20000000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) 00:50:37 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x7) 00:50:37 executing program 4: setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00!\x00c'], 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x1ffff000) 00:50:37 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x10181) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x28) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (async) syz_open_pts(r0, 0x10181) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x28) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 32) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (rerun: 32) [ 3037.837501][T24425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:37 executing program 2: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x10) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:37 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x208042, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x0, {}, {0xee01}, 0xb08, 0x80}) (async) r2 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x4, {r2}, {r1}, 0xbe30, 0xffffffffeffffffe}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0x400, 0x0, 0x10001}) (async) ioctl$KDDELIO(r3, 0x5406, 0x20000000) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) 00:50:37 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="ef40d4ad82bc30fb2e3fc744598080a849f396c770bf8e48699ec4cffd6c3ad5ebc5b71e88a73cb04bfcad07f5c9c16bd1f5c8ba41a8b5977c58c217840a5388012106d7465fc571fa99e3f831a6d6e9cdf1ee000fd0eec212b7a14ed9dd6b977e40010fc3cb1f0da04a43eb4b3a0d3608cea8e4ee89d7f77a9fbfdb39582f2944359c59a4b2c8442ff201b47dc3a029a29e1596f8cbfc78cb873440f96b25f817f9") (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:37 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1feff000) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x18) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) 00:50:37 executing program 2: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x10) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:37 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x208042, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x0, {}, {0xee01}, 0xb08, 0x80}) (async) r2 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x4, {r2}, {r1}, 0xbe30, 0xffffffffeffffffe}) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0x400, 0x0, 0x10001}) (async) ioctl$KDDELIO(r3, 0x5406, 0x20000000) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) 00:50:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x3) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_newroute={0x24, 0x18, 0x8, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x8, 0xfc, 0x1, 0xff, 0x5, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x80) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:37 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x18) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:37 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1feff000) 00:50:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) 00:50:37 executing program 2: setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) 00:50:38 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000000)=0x18) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) 00:50:38 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1feff000) 00:50:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x3f) 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) 00:50:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x3) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_newroute={0x24, 0x18, 0x8, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x8, 0xfc, 0x1, 0xff, 0x5, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x80) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/168) 00:50:38 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xaf9) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:38 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xaf9) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/168) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/168) 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x3f) 00:50:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) 00:50:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x3) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_newroute={0x24, 0x18, 0x8, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x20, 0x8, 0xfc, 0x1, 0xff, 0x5, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x80) (async, rerun: 32) ioctl$KDDELIO(r1, 0x2, 0x20000000) (rerun: 32) 00:50:38 executing program 1: getrusage(0x1, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x3f) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x3f) (async) 00:50:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) (async) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x100000000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/168) 00:50:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:38 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (rerun: 32) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xaf9) (async) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) 00:50:38 executing program 1: getrusage(0x1, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) getrusage(0x1, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 00:50:38 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) 00:50:38 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x3ff, 0x6, {0xffffffffffffffff}, {}, 0x1, 0x6}) 00:50:38 executing program 1: getrusage(0x1, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:38 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x118, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {@in6=@local, 0x4d5, 0xa, 0x32}, [@algo_comp={0xed, 0x3, {{'lzjh\x00'}, 0x528, "794fc6c6f23b7db3908dffe7cb8f0c6547f4de94e9e87d65b5a300b570cc2e6e66788bfa581e83fa1571ddb57154b08e9c0ef52f123d565109398edfd963042ac7d76fd5122ff5000d2263b828a990345e08f23a426ae0b5153e10bdf244beede9d971fd809a30270d747763efc92502e32ef8b019e19f846c0c45321e8e6a9944dc7273ea6d48115b50af386a1e6fba31ae8b521d097cef169491930adcc1167dd3a813da"}}]}, 0x118}}, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:38 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x3ff, 0x6, {0xffffffffffffffff}, {}, 0x1, 0x6}) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) 00:50:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x101, 0x1], 0x3, 0x2, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x1) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000004800007000fddbdf250a001800000000", @ANYRES32=r5, @ANYBLOB="0100008014000100fc010000000000000000000000000000080002000c00000014000100fe80000000000000000000000000001708000200050000001400010000000000000000000000ffffac1414361400010000000000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r9}, 0x48) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe82, 0x0, r7, 0x6, '\x00', r9, r10, 0x4, 0x3, 0x4}, 0x48) 00:50:38 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x118, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {@in6=@local, 0x4d5, 0xa, 0x32}, [@algo_comp={0xed, 0x3, {{'lzjh\x00'}, 0x528, "794fc6c6f23b7db3908dffe7cb8f0c6547f4de94e9e87d65b5a300b570cc2e6e66788bfa581e83fa1571ddb57154b08e9c0ef52f123d565109398edfd963042ac7d76fd5122ff5000d2263b828a990345e08f23a426ae0b5153e10bdf244beede9d971fd809a30270d747763efc92502e32ef8b019e19f846c0c45321e8e6a9944dc7273ea6d48115b50af386a1e6fba31ae8b521d097cef169491930adcc1167dd3a813da"}}]}, 0x118}}, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x118, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {@in6=@local, 0x4d5, 0xa, 0x32}, [@algo_comp={0xed, 0x3, {{'lzjh\x00'}, 0x528, "794fc6c6f23b7db3908dffe7cb8f0c6547f4de94e9e87d65b5a300b570cc2e6e66788bfa581e83fa1571ddb57154b08e9c0ef52f123d565109398edfd963042ac7d76fd5122ff5000d2263b828a990345e08f23a426ae0b5153e10bdf244beede9d971fd809a30270d747763efc92502e32ef8b019e19f846c0c45321e8e6a9944dc7273ea6d48115b50af386a1e6fba31ae8b521d097cef169491930adcc1167dd3a813da"}}]}, 0x118}}, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) 00:50:38 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 00:50:38 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x3ff, 0x6, {0xffffffffffffffff}, {}, 0x1, 0x6}) 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0xf61, 0xefc, 0x101, 0xb, 0x7}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:38 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getsa={0x118, 0x12, 0x200, 0x70bd28, 0x25dfdbfd, {@in6=@local, 0x4d5, 0xa, 0x32}, [@algo_comp={0xed, 0x3, {{'lzjh\x00'}, 0x528, "794fc6c6f23b7db3908dffe7cb8f0c6547f4de94e9e87d65b5a300b570cc2e6e66788bfa581e83fa1571ddb57154b08e9c0ef52f123d565109398edfd963042ac7d76fd5122ff5000d2263b828a990345e08f23a426ae0b5153e10bdf244beede9d971fd809a30270d747763efc92502e32ef8b019e19f846c0c45321e8e6a9944dc7273ea6d48115b50af386a1e6fba31ae8b521d097cef169491930adcc1167dd3a813da"}}]}, 0x118}}, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x101, 0x1], 0x3, 0x2, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x1) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000004800007000fddbdf250a001800000000", @ANYRES32=r5, @ANYBLOB="0100008014000100fc010000000000000000000000000000080002000c00000014000100fe80000000000000000000000000001708000200050000001400010000000000000000000000ffffac1414361400010000000000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r9}, 0x48) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe82, 0x0, r7, 0x6, '\x00', r9, r10, 0x4, 0x3, 0x4}, 0x48) 00:50:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x616af1a5fabc7813) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x2, {r1}, {0xee01}, 0x1c9, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000000)) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:38 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000000)) (async) 00:50:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x181040) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a7424599126c344689585f8e88524bb2849a143e774999a3e1428a82622d20f40770ad12bcabc2df701277d535f7defe99854c2e2983a24ec8134155") 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0xf61, 0xefc, 0x101, 0xb, 0x7}) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:38 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x101, 0x1], 0x3, 0x2, 0x1}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (rerun: 64) ioctl$KDDELIO(r2, 0x4b35, 0x1) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000004800007000fddbdf250a001800000000", @ANYRES32=r5, @ANYBLOB="0100008014000100fc010000000000000000000000000000080002000c00000014000100fe80000000000000000000000000001708000200050000001400010000000000000000000000ffffac1414361400010000000000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x800) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r9}, 0x48) (async, rerun: 32) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe82, 0x0, r7, 0x6, '\x00', r9, r10, 0x4, 0x3, 0x4}, 0x48) (rerun: 64) 00:50:38 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x616af1a5fabc7813) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x2, {r1}, {0xee01}, 0x1c9, 0x9}) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000000)) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x181040) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a7424599126c344689585f8e88524bb2849a143e774999a3e1428a82622d20f40770ad12bcabc2df701277d535f7defe99854c2e2983a24ec8134155") syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_pts(r0, 0x181040) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a7424599126c344689585f8e88524bb2849a143e774999a3e1428a82622d20f40770ad12bcabc2df701277d535f7defe99854c2e2983a24ec8134155") (async) 00:50:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x3c7) 00:50:38 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0xf61, 0xefc, 0x101, 0xb, 0x7}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:38 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) 00:50:38 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x181040) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="a7424599126c344689585f8e88524bb2849a143e774999a3e1428a82622d20f40770ad12bcabc2df701277d535f7defe99854c2e2983a24ec8134155") 00:50:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) (async) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x3c7) 00:50:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0081, 0x51) 00:50:39 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x616af1a5fabc7813) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x2, {r1}, {0xee01}, 0x1c9, 0x9}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x616af1a5fabc7813) (async) getpid() (async) sched_rr_get_interval(r1, &(0x7f0000000340)) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x5, 0x2, {r1}, {0xee01}, 0x1c9, 0x9}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r2, 0x540b, 0x1ffff000) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000000)) (async) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x32, 0x0, 0x5, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, r2, 0x0, 0x5, 0x8, 0x3, "d8052781d6a5966d0dcc41b642e97ec458d431cd60c4abafef272e8c953e4f1cca394d216fd53e72c7420ec7bf811d3695f7f8d58b8f1d9d240718e463ee74", 0x1e}, 0x60) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c007175b28a9a7584eb9eea1bc59b0b6f1a0120", @ANYRES16=r3, @ANYBLOB="020226bd7000fcdbdf250400000005000a000100000005000a000100000005000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4) 00:50:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r2}) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0081, 0x51) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r2}) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0081, 0x51) (async) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0xa6d, @empty, 0x8000}, {0xa, 0x4e20, 0x0, @mcast1, 0x7ff}, 0x0, {[0x8, 0x4, 0x372, 0x2c, 0x9d, 0x2, 0x2, 0x8]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5409, 0x6) 00:50:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r2, 0x540a, 0x1ffff000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x3c7) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_io_uring_setup(0x4bec, &(0x7f0000000000)={0x0, 0x2827, 0x2, 0x1, 0x3cb}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x56e, 0x2, &(0x7f0000000100)="2a84291ce1c94d464e6874d9bbb57bba6b92067d6b92a97dcff86f99593dfe2d816741196168591fc99e050860057f277e492aefbc207fec4923cf9237ad93f3f8a456b2f61c80a95913434874582cf8c28af51369fa250d0bc8c6f86007f83f775dad0b", 0xfffffff9, 0x0, 0x1, {0x3}}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x32, 0x0, 0x5, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, r2, 0x0, 0x5, 0x8, 0x3, "d8052781d6a5966d0dcc41b642e97ec458d431cd60c4abafef272e8c953e4f1cca394d216fd53e72c7420ec7bf811d3695f7f8d58b8f1d9d240718e463ee74", 0x1e}, 0x60) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c007175b28a9a7584eb9eea1bc59b0b6f1a0120", @ANYRES16=r3, @ANYBLOB="020226bd7000fcdbdf250400000005000a000100000005000a000100000005000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4) 00:50:39 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r2}) (async) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0081, 0x51) 00:50:39 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0xa6d, @empty, 0x8000}, {0xa, 0x4e20, 0x0, @mcast1, 0x7ff}, 0x0, {[0x8, 0x4, 0x372, 0x2c, 0x9d, 0x2, 0x2, 0x8]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) (async) ioctl$KDDELIO(r0, 0x5409, 0x6) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x32, 0x0, 0x5, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0]}, 0x40) (async) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, r2, 0x0, 0x5, 0x8, 0x3, "d8052781d6a5966d0dcc41b642e97ec458d431cd60c4abafef272e8c953e4f1cca394d216fd53e72c7420ec7bf811d3695f7f8d58b8f1d9d240718e463ee74", 0x1e}, 0x60) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c007175b28a9a7584eb9eea1bc59b0b6f1a0120", @ANYRES16=r3, @ANYBLOB="020226bd7000fcdbdf250400000005000a000100000005000a000100000005000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) socket$inet6(0xa, 0x4, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x400000000000fa0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_io_uring_setup(0x4bec, &(0x7f0000000000)={0x0, 0x2827, 0x2, 0x1, 0x3cb}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x56e, 0x2, &(0x7f0000000100)="2a84291ce1c94d464e6874d9bbb57bba6b92067d6b92a97dcff86f99593dfe2d816741196168591fc99e050860057f277e492aefbc207fec4923cf9237ad93f3f8a456b2f61c80a95913434874582cf8c28af51369fa250d0bc8c6f86007f83f775dad0b", 0xfffffff9, 0x0, 0x1, {0x3}}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_io_uring_setup(0x4bec, &(0x7f0000000000)={0x0, 0x2827, 0x2, 0x1, 0x3cb}, &(0x7f0000000080), &(0x7f00000000c0)) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x56e, 0x2, &(0x7f0000000100)="2a84291ce1c94d464e6874d9bbb57bba6b92067d6b92a97dcff86f99593dfe2d816741196168591fc99e050860057f277e492aefbc207fec4923cf9237ad93f3f8a456b2f61c80a95913434874582cf8c28af51369fa250d0bc8c6f86007f83f775dad0b", 0xfffffff9, 0x0, 0x1, {0x3}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) 00:50:39 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0xa6d, @empty, 0x8000}, {0xa, 0x4e20, 0x0, @mcast1, 0x7ff}, 0x0, {[0x8, 0x4, 0x372, 0x2c, 0x9d, 0x2, 0x2, 0x8]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) (async) ioctl$KDDELIO(r0, 0x5409, 0x6) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x9b) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDDELIO(r0, 0x5406, 0x400000000000fa0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:39 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$inet6(0xa, 0x4, 0x5) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0xa0, 0x14, 0x20, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0xc0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x4, 0x101, 0x5}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x20, 0x400, 0x2, 0x3f}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000810}, 0x5044) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_io_uring_setup(0x4bec, &(0x7f0000000000)={0x0, 0x2827, 0x2, 0x1, 0x3cb}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x56e, 0x2, &(0x7f0000000100)="2a84291ce1c94d464e6874d9bbb57bba6b92067d6b92a97dcff86f99593dfe2d816741196168591fc99e050860057f277e492aefbc207fec4923cf9237ad93f3f8a456b2f61c80a95913434874582cf8c28af51369fa250d0bc8c6f86007f83f775dad0b", 0xfffffff9, 0x0, 0x1, {0x3}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x9b) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDDELIO(r0, 0x5406, 0x400000000000fa0) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) (async) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0xa0, 0x14, 0x20, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0xc0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x4, 0x101, 0x5}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x20, 0x400, 0x2, 0x3f}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000810}, 0x5044) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/240) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/58) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/240) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/240) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/58) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 00:50:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async, rerun: 64) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000080)) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x9b) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0xa0, 0x14, 0x20, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0xc0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x4, 0x101, 0x5}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x20, 0x400, 0x2, 0x3f}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000810}, 0x5044) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0xa0, 0x14, 0x20, 0x70bd2b, 0x25dfdbfe, {0xa, 0x80, 0xc0, 0xfd}, [@IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x4, 0x101, 0x5}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x20, 0x400, 0x2, 0x3f}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3000}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000810}, 0x5044) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x6c, 0x19, 0x200, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x0, 0x2, 0x0, 0x0, "6a08e4184ae59b4e"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "130218476916ba13"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x62}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "b375a38af540293f"}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x0, 0x1, 0xe0c, 0x0, 0x7ff}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) ioctl$KDDELIO(r1, 0x4b35, 0x4) 00:50:39 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000080)=""/240) (async, rerun: 64) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/58) (rerun: 64) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:39 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8001) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_pts(r3, 0x40100) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x540a, 0x1ffff000) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x6c, 0x19, 0x200, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x0, 0x2, 0x0, 0x0, "6a08e4184ae59b4e"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "130218476916ba13"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x62}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "b375a38af540293f"}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x0, 0x1, 0xe0c, 0x0, 0x7ff}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) ioctl$KDDELIO(r1, 0x4b35, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x6c, 0x19, 0x200, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x0, 0x2, 0x0, 0x0, "6a08e4184ae59b4e"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "130218476916ba13"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x62}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "b375a38af540293f"}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x0, 0x1, 0xe0c, 0x0, 0x7ff}}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) (async) ioctl$KDDELIO(r1, 0x4b35, 0x4) (async) 00:50:39 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0xc3384911103769f7, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaa9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008845}, 0x8c4) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5409, 0x1ffff000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048850}, 0x4000844) 00:50:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/155) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x4) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc089}, 0x0) syz_open_pts(r0, 0x10001) ioctl$KDDELIO(r0, 0x5407, 0x0) syz_io_uring_setup(0x748, &(0x7f0000000280)={0x0, 0x6cca, 0x40, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) syz_io_uring_setup(0x59ee, &(0x7f0000000100)={0x0, 0x1f78, 0x2, 0x3, 0x21a}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r3, 0x0, 0x0, 0x1}) 00:50:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/155) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x4) 00:50:39 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc089}, 0x0) syz_open_pts(r0, 0x10001) ioctl$KDDELIO(r0, 0x5407, 0x0) (async) syz_io_uring_setup(0x748, &(0x7f0000000280)={0x0, 0x6cca, 0x40, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) (async) syz_io_uring_setup(0x59ee, &(0x7f0000000100)={0x0, 0x1f78, 0x2, 0x3, 0x21a}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r3, 0x0, 0x0, 0x1}) 00:50:39 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0xc3384911103769f7, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaa9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008845}, 0x8c4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5409, 0x1ffff000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048850}, 0x4000844) 00:50:39 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8001) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) syz_open_pts(r3, 0x40100) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x540a, 0x1ffff000) 00:50:39 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) 00:50:39 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x6c, 0x19, 0x200, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1}, 0x0, 0x2, 0x0, 0x0, "6a08e4184ae59b4e"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "130218476916ba13"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x62}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "b375a38af540293f"}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x81000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000380)={{0x0, 0x1, 0xe0c, 0x0, 0x7ff}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) ioctl$KDDELIO(r1, 0x4b35, 0x4) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc089}, 0x0) (async) syz_open_pts(r0, 0x10001) ioctl$KDDELIO(r0, 0x5407, 0x0) syz_io_uring_setup(0x748, &(0x7f0000000280)={0x0, 0x6cca, 0x40, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) syz_io_uring_setup(0x59ee, &(0x7f0000000100)={0x0, 0x1f78, 0x2, 0x3, 0x21a}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r3, 0x0, 0x0, 0x1}) 00:50:40 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0xc3384911103769f7, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaa9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0xc3384911103769f7, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaa9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008845}, 0x8c4) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x5409, 0x1ffff000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048850}, 0x4000844) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) 00:50:40 executing program 1: r0 = socket(0x2c, 0xa, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r0, 0x0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/96, 0x60}], 0x9, &(0x7f0000000700)=""/178, 0xb2}, 0x0, 0x0, 0x1, {0x2}}) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0xa8d8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000a80), 0x0, 0x80800}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3e11d3bde6dd20fde8f198efcad354a2a7ba7d", @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008003900000000000800340000000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x80, 0x0, r3, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x8001) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async, rerun: 64) syz_open_pts(r3, 0x40100) (async, rerun: 64) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r4, 0x540a, 0x1ffff000) 00:50:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/155) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x4) (async) ioctl$KDDELIO(r3, 0x4b35, 0x4) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 32) syz_open_pts(r1, 0x0) (rerun: 32) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0xc1) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, r1, 0x1, 0x2, 0x4, 0x6, "5fef75598f0bcae140c74b0da7c2ee872b30c1d2ced8dd4da814371d6b28ef15d810cb62b0c6d6193ece96120814e97a9f1ded3fcae81b3f21a9c73573d6d7", 0x35}, 0x60) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) 00:50:40 executing program 1: r0 = socket(0x2c, 0xa, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r0, 0x0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/96, 0x60}], 0x9, &(0x7f0000000700)=""/178, 0xb2}, 0x0, 0x0, 0x1, {0x2}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0xa8d8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000a80), 0x0, 0x80800}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/asound/timers\x00', 0x0, 0x0) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3e11d3bde6dd20fde8f198efcad354a2a7ba7d", @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008003900000000000800340000000000"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x80, 0x0, r3, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x8000000000000000) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, r1, 0x1, 0x2, 0x4, 0x6, "5fef75598f0bcae140c74b0da7c2ee872b30c1d2ced8dd4da814371d6b28ef15d810cb62b0c6d6193ece96120814e97a9f1ded3fcae81b3f21a9c73573d6d7", 0x35}, 0x60) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 64) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0xc1) 00:50:40 executing program 1: r0 = socket(0x2c, 0xa, 0x8000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r0, 0x0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/96, 0x60}], 0x9, &(0x7f0000000700)=""/178, 0xb2}, 0x0, 0x0, 0x1, {0x2}}) (async) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0xa8d8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000a80), 0x0, 0x80800}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x7) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3e11d3bde6dd20fde8f198efcad354a2a7ba7d", @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008003900000000000800340000000000"], 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x80, 0x0, r3, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:40 executing program 5: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x3}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x8000000000000000) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, r1, 0x1, 0x2, 0x4, 0x6, "5fef75598f0bcae140c74b0da7c2ee872b30c1d2ced8dd4da814371d6b28ef15d810cb62b0c6d6193ece96120814e97a9f1ded3fcae81b3f21a9c73573d6d7", 0x35}, 0x60) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x14b82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r4, r2, r2], &(0x7f0000000140)=[0x3f, 0xadd6, 0xd3a, 0x6, 0xf9, 0xab, 0x2, 0x40], 0x3, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r5, 0x2, 0x20000000) 00:50:40 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x7, 0x4) 00:50:40 executing program 5: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x3}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0xc1) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x46041, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x14b82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r4, r2, r2], &(0x7f0000000140)=[0x3f, 0xadd6, 0xd3a, 0x6, 0xf9, 0xab, 0x2, 0x40], 0x3, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r5, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x14b82) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r4, r2, r2], &(0x7f0000000140)=[0x3f, 0xadd6, 0xd3a, 0x6, 0xf9, 0xab, 0x2, 0x40], 0x3, 0x1}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r5, 0x2, 0x20000000) (async) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x8000000000000000) 00:50:40 executing program 5: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x3}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) 00:50:40 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x7, 0x4) 00:50:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001000)=""/4096) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x46041, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x14b82) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x400) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000180)={&(0x7f0000000100)=[r4, r2, r2], &(0x7f0000000140)=[0x3f, 0xadd6, 0xd3a, 0x6, 0xf9, 0xab, 0x2, 0x40], 0x3, 0x1}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r5, 0x2, 0x20000000) 00:50:40 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x7, 0x4) 00:50:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001000)=""/4096) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") (async, rerun: 64) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (rerun: 64) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x46041, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001000)=""/4096) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:50:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) epoll_create1(0x80000) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff004) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) 00:50:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:40 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) epoll_create1(0x80000) (async) epoll_create1(0x80000) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff004) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xe47) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x204000) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:40 executing program 3: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:40 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) epoll_create1(0x80000) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff004) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) 00:50:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0xe47) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:40 executing program 3: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:40 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x204000) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:40 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) 00:50:40 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x56, 0x3, 0x3, [], [0x6, 0x400, 0x5, 0xa], [0x10001, 0x400, 0x4, 0x7fff], [0x4, 0x9, 0x80000001, 0x80000005]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0008003900ffac822b8b8850e4aa0000000000000000"], 0x1c}}, 0x8800) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000004c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x40400c0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000140)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28009459410401241b64d94534e1b8fa00000000", @ANYRES32=r8, @ANYBLOB="080008000000000008000400ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf3b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x280080a1}, 0x40000) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0xe47) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:41 executing program 3: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x204000) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x920000001) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x56, 0x3, 0x3, [], [0x6, 0x400, 0x5, 0xa], [0x10001, 0x400, 0x4, 0x7fff], [0x4, 0x9, 0x80000001, 0x80000005]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0008003900ffac822b8b8850e4aa0000000000000000"], 0x1c}}, 0x8800) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000004c0)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x40400c0) (async) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000140)) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28009459410401241b64d94534e1b8fa00000000", @ANYRES32=r8, @ANYBLOB="080008000000000008000400ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf3b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x280080a1}, 0x40000) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf3b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x280080a1}, 0x40000) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x56, 0x3, 0x3, [], [0x6, 0x400, 0x5, 0xa], [0x10001, 0x400, 0x4, 0x7fff], [0x4, 0x9, 0x80000001, 0x80000005]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0008003900ffac822b8b8850e4aa0000000000000000"], 0x1c}}, 0x8800) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x40400c0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x40400c0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28009459410401241b64d94534e1b8fa00000000", @ANYRES32=r8, @ANYBLOB="080008000000000008000400ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28009459410401241b64d94534e1b8fa00000000", @ANYRES32=r8, @ANYBLOB="080008000000000008000400ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x920000001) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xc0800, 0x0, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf3b}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x280080a1}, 0x40000) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x920000001) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async, rerun: 32) ioctl$KDDELIO(r0, 0x2, 0x20000000) (rerun: 32) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x1, 0x10, 0xffffffffffffffff, 0x100, '\x00', 0x0, r0, 0x1, 0x4, 0x1, 0x7}, 0x48) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x800) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x4) ioctl$KDDELIO(r1, 0x5406, 0xa) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x1, 0x10, 0xffffffffffffffff, 0x100, '\x00', 0x0, r0, 0x1, 0x4, 0x1, 0x7}, 0x48) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x800) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x4) (async) ioctl$KDDELIO(r1, 0x5406, 0xa) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffffff, 0x9, 0x1, 0x10, 0xffffffffffffffff, 0x100, '\x00', 0x0, r0, 0x1, 0x4, 0x1, 0x7}, 0x48) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 00:50:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x800) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x4) (async) ioctl$KDDELIO(r1, 0x5406, 0xa) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) (async) 00:50:41 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 64) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (rerun: 64) 00:50:41 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$KDDELIO(r0, 0x4b35, 0x9e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0203, 0x0) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0x9, &(0x7f0000000040)=@raw=[@exit, @ldst={0x3, 0x2, 0x3, 0x1, 0xdcb10257e0042fbb, 0x30, 0x8}, @alu={0x4, 0x0, 0xe, 0x5, 0x1, 0xfffffffffffffffe, 0x4}, @ringbuf_query, @ldst={0x0, 0x3, 0x2, 0x4, 0x8, 0x30, 0xc}, @alu={0x7, 0x1, 0xc, 0x8, 0xa, 0x50, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x2, 0x4, 0x850}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001180)=[0x1, 0x1], &(0x7f00000011c0)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x6}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1}, &(0x7f0000000000), &(0x7f00000012c0)=r2}, 0x20) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:41 executing program 5: clock_gettime(0x5, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) syz_io_uring_setup(0x3cf7, &(0x7f0000000040)={0x0, 0x42e6, 0x10, 0x0, 0x185}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, r2, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200}) ioctl$KDDELIO(r0, 0x5407, 0x4) 00:50:41 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$KDDELIO(r0, 0x4b35, 0x9e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0203, 0x0) 00:50:41 executing program 5: clock_gettime(0x5, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:41 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0x9, &(0x7f0000000040)=@raw=[@exit, @ldst={0x3, 0x2, 0x3, 0x1, 0xdcb10257e0042fbb, 0x30, 0x8}, @alu={0x4, 0x0, 0xe, 0x5, 0x1, 0xfffffffffffffffe, 0x4}, @ringbuf_query, @ldst={0x0, 0x3, 0x2, 0x4, 0x8, 0x30, 0xc}, @alu={0x7, 0x1, 0xc, 0x8, 0xa, 0x50, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x2, 0x4, 0x850}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001180)=[0x1, 0x1], &(0x7f00000011c0)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x6}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1}, &(0x7f0000000000), &(0x7f00000012c0)=r2}, 0x20) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, r5, 0x0, 0x0], 0xa, 0x80000}) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000640)) 00:50:41 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, r5, 0x0, 0x0], 0xa, 0x80000}) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000640)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x3, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, r5, 0x0, 0x0], 0xa, 0x80000}) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000640)) (async) 00:50:41 executing program 5: clock_gettime(0x5, &(0x7f0000000000)) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:41 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async, rerun: 32) syz_io_uring_setup(0x3cf7, &(0x7f0000000040)={0x0, 0x42e6, 0x10, 0x0, 0x185}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, r2, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200}) ioctl$KDDELIO(r0, 0x5407, 0x4) 00:50:41 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, r3, 0x3}, 0xc) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x4b35, 0x9e) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc0203, 0x0) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0x9, &(0x7f0000000040)=@raw=[@exit, @ldst={0x3, 0x2, 0x3, 0x1, 0xdcb10257e0042fbb, 0x30, 0x8}, @alu={0x4, 0x0, 0xe, 0x5, 0x1, 0xfffffffffffffffe, 0x4}, @ringbuf_query, @ldst={0x0, 0x3, 0x2, 0x4, 0x8, 0x30, 0xc}, @alu={0x7, 0x1, 0xc, 0x8, 0xa, 0x50, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x2, 0x4, 0x850}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001180)=[0x1, 0x1], &(0x7f00000011c0)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x6}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xc, 0x9, &(0x7f0000000040)=@raw=[@exit, @ldst={0x3, 0x2, 0x3, 0x1, 0xdcb10257e0042fbb, 0x30, 0x8}, @alu={0x4, 0x0, 0xe, 0x5, 0x1, 0xfffffffffffffffe, 0x4}, @ringbuf_query, @ldst={0x0, 0x3, 0x2, 0x4, 0x8, 0x30, 0xc}, @alu={0x7, 0x1, 0xc, 0x8, 0xa, 0x50, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x20, 0x1000, &(0x7f0000000100)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x2, 0x4, 0x850}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001180)=[0x1, 0x1], &(0x7f00000011c0)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0xc, 0xb}], 0x10, 0x6}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1}, &(0x7f0000000000), &(0x7f00000012c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1}, &(0x7f0000000000), &(0x7f00000012c0)=r2}, 0x20) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, r3, 0x3}, 0xc) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, r3, 0x3}, 0xc) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x5, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[r2, 0x0, r3, 0x0, 0x0, r4, 0x0, r5, 0x0, 0x0], 0xa, 0x80000}) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000300)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000640)) (rerun: 32) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r3, 0x4b35, 0x8000) r4 = socket(0x8, 0x5, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000500)=""/217) syz_open_pts(r0, 0x10800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@dellinkprop={0x15c, 0x6d, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1400, 0x10}, [@IFLA_PHYS_PORT_ID={0x20, 0x22, "9fafeddee2b5e8086890118f191fcae2e6b61955771b76ac373e25d1"}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "00113dd2a34e214a8717fe39d754ef4e"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "d65a9f7935526736eceb8eae6d9ca480"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "d230746112c80666ce53f9c035a23566"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "0268aa74856d43afec62654a85c0f0c8"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "de94be4bbf43a34005cb5d6dad2a4875"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "8df8f27f190b16aa88550b74195bc7a8"}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_BROADCAST={0xfd3e, 0x2, @multicast}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffff8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffffd}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}]]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x25d}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "284e10bf0734d73af8efc8adddd5eaeaf18d5278a3e5ee2bfcbf64"}]}, 0x15c}}, 0x20000000) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:42 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x180000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=@newtaction={0x2e0, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {}, [{0x2cc, 0x1, [@m_vlan={0x138, 0x1c, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdb9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x800, 0x8, 0x4, 0x4}, 0x1}}]}, {0xbd, 0x6, "e591da99002a8441cef7f7777d4bac94d3e80292d428ae28214c2115cea4ef295a670c186bd2775cd6bd0d8be625cf59b0315846e9ffebe45912d87001e180ce4a275b262c4f279c86a170913d29678d179ed8bff5eda0f03c496a9485fd6d8626c4ca697869a0da263da2d6c358d7e411a83158a6a564af497e085c0c201e21c0ea562e1c54aff884f286ccacb577b96d89c62a79aed41f760695bf59bde9f8637ba53671a9d804d32b679730d011bf477cd49841c0c60c3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ctinfo={0x70, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0xee8d, 0xffffffffeffffffd, 0x8, 0x3ff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x1c, 0x6, "c473bab25830e979a4431c55068ec8ef915173dc775c4f23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x120, 0x0, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7dd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x7, 0x7fffffff, 0xbad}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0xa9, 0x6, "7b593860cf02aaaf7085aefd9d19a4434df1240e0d68444b66411d3e4e4f029f32bb313d5cb760121b65f9bc8a3c7315fe02efa956f89887ba093f708d58bf6fb81e0e23840e8a23c1b6a11b0bf5fb0ad3833d38c34c6fd57934931a4591ee4cf0c3f40ca559926ab229d57b960e782c1ee8dab77618b29d94f145003e4db0bf4302ed683f8e5367ecdbd8e5a354ff1bbf5e20771ce429f52f188e9511fea3437a73bd11c2"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0xca, 0x8, 0x5, 0x2}, 0x80) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x81) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) syz_io_uring_setup(0x3cf7, &(0x7f0000000040)={0x0, 0x42e6, 0x10, 0x0, 0x185}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, r2, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200}) ioctl$KDDELIO(r0, 0x5407, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) (async) syz_io_uring_setup(0x3cf7, &(0x7f0000000040)={0x0, 0x42e6, 0x10, 0x0, 0x185}, &(0x7f00000000c0), &(0x7f0000000100)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) (async) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, r2, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200}) (async) ioctl$KDDELIO(r0, 0x5407, 0x4) (async) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r3, 0x4b35, 0x8000) (async) r4 = socket(0x8, 0x5, 0x1) (async, rerun: 32) r5 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000500)=""/217) (async, rerun: 64) syz_open_pts(r0, 0x10800) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@dellinkprop={0x15c, 0x6d, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1400, 0x10}, [@IFLA_PHYS_PORT_ID={0x20, 0x22, "9fafeddee2b5e8086890118f191fcae2e6b61955771b76ac373e25d1"}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "00113dd2a34e214a8717fe39d754ef4e"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "d65a9f7935526736eceb8eae6d9ca480"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "d230746112c80666ce53f9c035a23566"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "0268aa74856d43afec62654a85c0f0c8"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "de94be4bbf43a34005cb5d6dad2a4875"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "8df8f27f190b16aa88550b74195bc7a8"}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_BROADCAST={0xfd3e, 0x2, @multicast}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffff8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffffd}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}]]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x25d}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "284e10bf0734d73af8efc8adddd5eaeaf18d5278a3e5ee2bfcbf64"}]}, 0x15c}}, 0x20000000) (rerun: 64) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x180000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=@newtaction={0x2e0, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {}, [{0x2cc, 0x1, [@m_vlan={0x138, 0x1c, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdb9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x800, 0x8, 0x4, 0x4}, 0x1}}]}, {0xbd, 0x6, "e591da99002a8441cef7f7777d4bac94d3e80292d428ae28214c2115cea4ef295a670c186bd2775cd6bd0d8be625cf59b0315846e9ffebe45912d87001e180ce4a275b262c4f279c86a170913d29678d179ed8bff5eda0f03c496a9485fd6d8626c4ca697869a0da263da2d6c358d7e411a83158a6a564af497e085c0c201e21c0ea562e1c54aff884f286ccacb577b96d89c62a79aed41f760695bf59bde9f8637ba53671a9d804d32b679730d011bf477cd49841c0c60c3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ctinfo={0x70, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0xee8d, 0xffffffffeffffffd, 0x8, 0x3ff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x1c, 0x6, "c473bab25830e979a4431c55068ec8ef915173dc775c4f23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x120, 0x0, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7dd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x7, 0x7fffffff, 0xbad}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0xa9, 0x6, "7b593860cf02aaaf7085aefd9d19a4434df1240e0d68444b66411d3e4e4f029f32bb313d5cb760121b65f9bc8a3c7315fe02efa956f89887ba093f708d58bf6fb81e0e23840e8a23c1b6a11b0bf5fb0ad3833d38c34c6fd57934931a4591ee4cf0c3f40ca559926ab229d57b960e782c1ee8dab77618b29d94f145003e4db0bf4302ed683f8e5367ecdbd8e5a354ff1bbf5e20771ce429f52f188e9511fea3437a73bd11c2"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0xca, 0x8, 0x5, 0x2}, 0x80) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) (async) ioctl$KDDELIO(r2, 0x2, 0x20000000) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x81) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x5, r3, 0x3}, 0xc) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x106c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x802}, @NFC_ATTR_VENDOR_DATA={0x100f, 0x1f, "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"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:42 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x180000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)=@newtaction={0x2e0, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {}, [{0x2cc, 0x1, [@m_vlan={0x138, 0x1c, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdb9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x800, 0x8, 0x4, 0x4}, 0x1}}]}, {0xbd, 0x6, "e591da99002a8441cef7f7777d4bac94d3e80292d428ae28214c2115cea4ef295a670c186bd2775cd6bd0d8be625cf59b0315846e9ffebe45912d87001e180ce4a275b262c4f279c86a170913d29678d179ed8bff5eda0f03c496a9485fd6d8626c4ca697869a0da263da2d6c358d7e411a83158a6a564af497e085c0c201e21c0ea562e1c54aff884f286ccacb577b96d89c62a79aed41f760695bf59bde9f8637ba53671a9d804d32b679730d011bf477cd49841c0c60c3f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ctinfo={0x70, 0x9, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffb, 0xee8d, 0xffffffffeffffffd, 0x8, 0x3ff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x1c, 0x6, "c473bab25830e979a4431c55068ec8ef915173dc775c4f23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x120, 0x0, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7dd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x7, 0x7fffffff, 0xbad}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0xa9, 0x6, "7b593860cf02aaaf7085aefd9d19a4434df1240e0d68444b66411d3e4e4f029f32bb313d5cb760121b65f9bc8a3c7315fe02efa956f89887ba093f708d58bf6fb81e0e23840e8a23c1b6a11b0bf5fb0ad3833d38c34c6fd57934931a4591ee4cf0c3f40ca559926ab229d57b960e782c1ee8dab77618b29d94f145003e4db0bf4302ed683f8e5367ecdbd8e5a354ff1bbf5e20771ce429f52f188e9511fea3437a73bd11c2"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0xca, 0x8, 0x5, 0x2}, 0x80) (async) connect(r0, &(0x7f0000000000)=@isdn={0x22, 0xca, 0x8, 0x5, 0x2}, 0x80) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x2, 0x20000000) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000080)=0x81) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x80000001, @private2, 0x4}, {0xa, 0x4e20, 0x4dc5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1, {[0x80000000, 0x4, 0x8000, 0x0, 0x1ff, 0x1, 0x6, 0x4]}}, 0x5c) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) ioctl$KDDELIO(r1, 0x5406, 0x20000000) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x106c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x802}, @NFC_ATTR_VENDOR_DATA={0x100f, 0x1f, "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"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xcf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004095) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r3, 0x4b35, 0x8000) (async) ioctl$KDDELIO(r3, 0x4b35, 0x8000) r4 = socket(0x8, 0x5, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000500)=""/217) syz_open_pts(r0, 0x10800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@dellinkprop={0x15c, 0x6d, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1400, 0x10}, [@IFLA_PHYS_PORT_ID={0x20, 0x22, "9fafeddee2b5e8086890118f191fcae2e6b61955771b76ac373e25d1"}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "00113dd2a34e214a8717fe39d754ef4e"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "d65a9f7935526736eceb8eae6d9ca480"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "d230746112c80666ce53f9c035a23566"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "0268aa74856d43afec62654a85c0f0c8"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "de94be4bbf43a34005cb5d6dad2a4875"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "8df8f27f190b16aa88550b74195bc7a8"}]}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip_vti0\x00'}, {0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_BROADCAST={0xfd3e, 0x2, @multicast}, @IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x14, 0x5, @mcast1}, @IFLA_VTI_LOCAL={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x2}, @IFLA_VTI_OKEY={0x8, 0x3, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x4}, @IFLA_VTI_IKEY={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffff8}, @IFLA_VTI_IKEY={0x8, 0x2, 0xfffffffd}], @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}]]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x25d}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "284e10bf0734d73af8efc8adddd5eaeaf18d5278a3e5ee2bfcbf64"}]}, 0x15c}}, 0x20000000) 00:50:42 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x80000001, @private2, 0x4}, {0xa, 0x4e20, 0x4dc5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1, {[0x80000000, 0x4, 0x8000, 0x0, 0x1ff, 0x1, 0x6, 0x4]}}, 0x5c) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xcf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004095) 00:50:42 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:42 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = syz_open_dev$media(&(0x7f0000000000), 0xd198, 0x109080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x7, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]}) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x106c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x802}, @NFC_ATTR_VENDOR_DATA={0x100f, 0x1f, "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"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040) (async) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)={0x106c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x7}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x200}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x802}, @NFC_ATTR_VENDOR_DATA={0x100f, 0x1f, "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"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000000)=0x2, 0x4) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000100)) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x80000001, @private2, 0x4}, {0xa, 0x4e20, 0x4dc5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1, {[0x80000000, 0x4, 0x8000, 0x0, 0x1ff, 0x1, 0x6, 0x4]}}, 0x5c) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8640, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={0x0, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = syz_open_pts(r0, 0x1318c0) ioctl$KDDELIO(r5, 0x540b, 0xffff) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xcf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004095) 00:50:42 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x9, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000004c0)=[{}], 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xffff, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0xfffffffdffffffff) 00:50:42 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) ioctl$KDDELIO(r0, 0x5406, 0x5) 00:50:42 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = syz_open_dev$media(&(0x7f0000000000), 0xd198, 0x109080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x200) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x7, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]}) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x7) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:42 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8640, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 64) r5 = syz_open_pts(r0, 0x1318c0) (rerun: 64) ioctl$KDDELIO(r5, 0x540b, 0xffff) 00:50:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) (async) ioctl$KDDELIO(r0, 0x5406, 0x5) 00:50:42 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x9, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000004c0)=[{}], 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xffff, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0xfffffffdffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x9, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000004c0)=[{}], 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xffff, 0x4) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5407, 0xfffffffdffffffff) (async) 00:50:42 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:42 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x6) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = syz_open_dev$media(&(0x7f0000000000), 0xd198, 0x109080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_open_pts(r2, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x7, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x5) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x6) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) syz_open_dev$media(&(0x7f0000000000), 0xd198, 0x109080) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) syz_open_pts(r2, 0x200) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000380)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x1, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x7, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]}) (async) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x7) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:42 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x7) ioctl$KDDELIO(r0, 0x5406, 0x5) 00:50:42 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x9, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000004c0)=[{}], 0x2, 0x0, &(0x7f0000000500)=[{}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xffff, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0xfffffffdffffffff) 00:50:42 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x7) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000040)=0x7) (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) 00:50:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8042, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) r2 = socket(0x8, 0x3, 0x4617) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, "22c4a73bc229cb57f59fb7e5804d58d8258afa7525edda3150bf945ce0ca4f2fedaa60a559e4e796abb798f83104fdf29c9e7a295412ca57aeece03f4ce2cb", 0x20}, 0x60) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0xffffffff) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDDELIO(r3, 0x5406, 0x20000000) 00:50:42 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x8640, 0x0) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000100)={0x0, 0x1}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r5 = syz_open_pts(r0, 0x1318c0) ioctl$KDDELIO(r5, 0x540b, 0xffff) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7f) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x5091c2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x3) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0xfffffffffffffffe) 00:50:42 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) 00:50:42 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7f) 00:50:42 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x30, 0xb7, 0xfd, 0x4, 0x0, 0x3, 0x900}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:42 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_open_pts(r1, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0xfffffffffffffffe) 00:50:42 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x5091c2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x3) 00:50:43 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8042, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) socket(0x8, 0x3, 0x4617) (async) r2 = socket(0x8, 0x3, 0x4617) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, "22c4a73bc229cb57f59fb7e5804d58d8258afa7525edda3150bf945ce0ca4f2fedaa60a559e4e796abb798f83104fdf29c9e7a295412ca57aeece03f4ce2cb", 0x20}, 0x60) (async) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, "22c4a73bc229cb57f59fb7e5804d58d8258afa7525edda3150bf945ce0ca4f2fedaa60a559e4e796abb798f83104fdf29c9e7a295412ca57aeece03f4ce2cb", 0x20}, 0x60) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0xffffffff) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0xffffffff) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KDDELIO(r3, 0x5406, 0x20000000) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7f) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x7f) (async) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) (async) syz_open_pts(r1, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/4096) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x540a, 0xfffffffffffffffe) (async) ioctl$KDDELIO(r2, 0x540a, 0xfffffffffffffffe) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x30, 0xb7, 0xfd, 0x4, 0x0, 0x3, 0x900}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) epoll_create1(0x0) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8042, 0x0) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) (async, rerun: 32) r2 = socket(0x8, 0x3, 0x4617) (rerun: 32) connect$nfc_llcp(r2, &(0x7f0000000180)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, "22c4a73bc229cb57f59fb7e5804d58d8258afa7525edda3150bf945ce0ca4f2fedaa60a559e4e796abb798f83104fdf29c9e7a295412ca57aeece03f4ce2cb", 0x20}, 0x60) (async, rerun: 32) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0xffffffff) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000300)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000080)={0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$KDDELIO(r3, 0x5406, 0x20000000) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x5091c2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x3) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd2a, 0x25dfdbfd, {0x2, 0x20, 0x30, 0xb7, 0xfd, 0x4, 0x0, 0x3, 0x900}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) epoll_create1(0x0) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x20) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) epoll_create1(0x0) 00:50:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x5, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2, 0xffffffffffffffff, @prog_fd, r0}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x5) ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, 0x6, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000300)={r3}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x8000, @empty, 0x7}, {0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x0, {[0xd3, 0x7, 0x80, 0x1, 0xffffffc1, 0x6, 0x1, 0x5]}}, 0x5c) r4 = socket(0x5, 0x2, 0x5) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x327e}, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}, 0x0, {[0x2, 0x8, 0x5, 0x101, 0x4e0, 0x40, 0x8000000, 0x54f6]}}, 0x5c) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5407, 0x1) getpgid(0x0) 00:50:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x5, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2, 0xffffffffffffffff, @prog_fd, r0}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x5, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2, 0xffffffffffffffff, @prog_fd, r0}, 0x20) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x20) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async, rerun: 32) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x20) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5407, 0x1) (async) ioctl$KDDELIO(r0, 0x5407, 0x1) getpgid(0x0) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x5) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, 0x6, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000300)={r3}) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x8000, @empty, 0x7}, {0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x0, {[0xd3, 0x7, 0x80, 0x1, 0xffffffc1, 0x6, 0x1, 0x5]}}, 0x5c) (async) r4 = socket(0x5, 0x2, 0x5) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x327e}, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}, 0x0, {[0x2, 0x8, 0x5, 0x101, 0x4e0, 0x40, 0x8000000, 0x54f6]}}, 0x5c) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x52b1c0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b8, 0x101, 0x4, 0x1040, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x6}, 0x48) ioctl$KDDELIO(r0, 0x5409, 0x8000000000000000) 00:50:43 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x5, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x1a, 0x2, 0xffffffffffffffff, @prog_fd, r0}, 0x20) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x20, 0x8, 0x0, 0x2, 0xfd, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x14058}, 0x0) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5407, 0x1) (async) getpgid(0x0) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x52b1c0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b8, 0x101, 0x4, 0x1040, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x6}, 0x48) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5409, 0x8000000000000000) (rerun: 32) 00:50:43 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x4b35, 0x5) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x1, 0x6, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000300)={r3}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x8000, @empty, 0x7}, {0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x0, {[0xd3, 0x7, 0x80, 0x1, 0xffffffc1, 0x6, 0x1, 0x5]}}, 0x5c) r4 = socket(0x5, 0x2, 0x5) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x327e}, {0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf}, 0x0, {[0x2, 0x8, 0x5, 0x101, 0x4e0, 0x40, 0x8000000, 0x54f6]}}, 0x5c) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001080)) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/4096) 00:50:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) 00:50:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDDELIO(r0, 0x4b35, 0xe13) 00:50:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x20, 0x8, 0x0, 0x2, 0xfd, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x14058}, 0x0) 00:50:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x52b1c0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r1, 0x2}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8b8, 0x101, 0x4, 0x1040, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x6}, 0x48) ioctl$KDDELIO(r0, 0x5409, 0x8000000000000000) 00:50:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDDELIO(r0, 0x4b35, 0xe13) (async) ioctl$KDDELIO(r0, 0x4b35, 0xe13) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001080)) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/4096) 00:50:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) 00:50:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x10000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/179) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="d154fa010552c5f38afc95a9134fd91eb27857d9b8e7cb473eaec1fc5587ccdf58") 00:50:43 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async, rerun: 32) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x20, 0x8, 0x0, 0x2, 0xfd, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x14058}, 0x0) 00:50:43 executing program 4: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44bae28b73159bd1a8f29b543ccb03c56ed14d3d5268188e97ff4e036f5bf4379e42b4a9a78148aee1d825ab7070e9f91727b3564fe625a27ebbcc4bf17808db7df7897323d60a9bf7277cdbf722bc94b044ef1ff6fee29f30dcbbc61564e7d4c11b558c7bab8dc768670af8d434908dd25b8b6830a9ccae2edda843b1dd657baabf664bf6021708495ecf0c11a1daceaac239e16037f682832e85d459a0cbb17b913671c240b9", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf251200000008003a000900000005003500d900000008000b0009000000050035000900000008000b00ff0f00000600280001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) 00:50:43 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDDELIO(r0, 0x4b35, 0xe13) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001080)) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x8000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/4096) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001080)) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async) ioctl$KDDELIO(r2, 0x4b35, 0x8000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/4096) (async) 00:50:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) 00:50:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x10000) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/179) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="d154fa010552c5f38afc95a9134fd91eb27857d9b8e7cb473eaec1fc5587ccdf58") 00:50:43 executing program 4: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44bae28b73159bd1a8f29b543ccb03c56ed14d3d5268188e97ff4e036f5bf4379e42b4a9a78148aee1d825ab7070e9f91727b3564fe625a27ebbcc4bf17808db7df7897323d60a9bf7277cdbf722bc94b044ef1ff6fee29f30dcbbc61564e7d4c11b558c7bab8dc768670af8d434908dd25b8b6830a9ccae2edda843b1dd657baabf664bf6021708495ecf0c11a1daceaac239e16037f682832e85d459a0cbb17b913671c240b9", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf251200000008003a000900000005003500d900000008000b0009000000050035000900000008000b00ff0f00000600280001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) 00:50:43 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xbf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000001180)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@ifindex=r2, 0x34, 0x1, 0x9c, &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0]}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/4096) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1ffff000) syz_open_pts(r1, 0x3) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_pts(r3, 0x200000) 00:50:43 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0x7, 0x1f, 0x8, 0xb6, &(0x7f00000001c0)=""/182, 0xad, &(0x7f0000000280)=""/173, 0xbc, &(0x7f0000000340)=""/188}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)="77c457ed2c407c6d27e30a150d3ea0007891cad9595d9a4cae331bec3bdf171cdb1d88f48c7e03ae9bc2ea5972f387931311686067f179989dfef2a8ff067a582240cc9d87aa1ca498c60f1582f8d3be4e329a7a6677427ae3890e45508594e3af0bde8a5e6fa736ff837ddea807f284cf5afcdc3870578164b0890a409914ee6e76503ce1a4d13f47c10500375701b73423f51a3776f1e06473494cac4e9e8af92eaf2dfe2e3b00cf29582d2b973ddaf3dd8d998de7eabc55d3f92a9b948f039e4269bd3d4d11") ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) 00:50:43 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:44 executing program 4: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44bae28b73159bd1a8f29b543ccb03c56ed14d3d5268188e97ff4e036f5bf4379e42b4a9a78148aee1d825ab7070e9f91727b3564fe625a27ebbcc4bf17808db7df7897323d60a9bf7277cdbf722bc94b044ef1ff6fee29f30dcbbc61564e7d4c11b558c7bab8dc768670af8d434908dd25b8b6830a9ccae2edda843b1dd657baabf664bf6021708495ecf0c11a1daceaac239e16037f682832e85d459a0cbb17b913671c240b9", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf251200000008003a000900000005003500d900000008000b0009000000050035000900000008000b00ff0f00000600280001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44bae28b73159bd1a8f29b543ccb03c56ed14d3d5268188e97ff4e036f5bf4379e42b4a9a78148aee1d825ab7070e9f91727b3564fe625a27ebbcc4bf17808db7df7897323d60a9bf7277cdbf722bc94b044ef1ff6fee29f30dcbbc61564e7d4c11b558c7bab8dc768670af8d434908dd25b8b6830a9ccae2edda843b1dd657baabf664bf6021708495ecf0c11a1daceaac239e16037f682832e85d459a0cbb17b913671c240b9", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf251200000008003a000900000005003500d900000008000b0009000000050035000900000008000b00ff0f00000600280001000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async, rerun: 64) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xbf) (async, rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x10000) (async) syz_open_pts(r0, 0x10000) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/179) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="d154fa010552c5f38afc95a9134fd91eb27857d9b8e7cb473eaec1fc5587ccdf58") 00:50:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000001180)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@ifindex=r2, 0x34, 0x1, 0x9c, &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0]}, 0x40) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/4096) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1ffff000) (async, rerun: 32) syz_open_pts(r1, 0x3) (rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) syz_open_pts(r3, 0x200000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0x7, 0x1f, 0x8, 0xb6, &(0x7f00000001c0)=""/182, 0xad, &(0x7f0000000280)=""/173, 0xbc, &(0x7f0000000340)=""/188}) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0x7, 0x1f, 0x8, 0xb6, &(0x7f00000001c0)=""/182, 0xad, &(0x7f0000000280)=""/173, 0xbc, &(0x7f0000000340)=""/188}) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)="77c457ed2c407c6d27e30a150d3ea0007891cad9595d9a4cae331bec3bdf171cdb1d88f48c7e03ae9bc2ea5972f387931311686067f179989dfef2a8ff067a582240cc9d87aa1ca498c60f1582f8d3be4e329a7a6677427ae3890e45508594e3af0bde8a5e6fa736ff837ddea807f284cf5afcdc3870578164b0890a409914ee6e76503ce1a4d13f47c10500375701b73423f51a3776f1e06473494cac4e9e8af92eaf2dfe2e3b00cf29582d2b973ddaf3dd8d998de7eabc55d3f92a9b948f039e4269bd3d4d11") ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xbf) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xbf) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) 00:50:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x80) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/227) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/46) 00:50:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000001180)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@ifindex=r2, 0x34, 0x1, 0x9c, &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=[0x0, 0x0]}, 0x40) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000140)=""/4096) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1ffff000) syz_open_pts(r1, 0x3) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_pts(r3, 0x200000) 00:50:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x80) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/227) ioctl$KDDELIO(r1, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r0, 0x80) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/227) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x48) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0x7, 0x1f, 0x8, 0xb6, &(0x7f00000001c0)=""/182, 0xad, &(0x7f0000000280)=""/173, 0xbc, &(0x7f0000000340)=""/188}) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)="77c457ed2c407c6d27e30a150d3ea0007891cad9595d9a4cae331bec3bdf171cdb1d88f48c7e03ae9bc2ea5972f387931311686067f179989dfef2a8ff067a582240cc9d87aa1ca498c60f1582f8d3be4e329a7a6677427ae3890e45508594e3af0bde8a5e6fa736ff837ddea807f284cf5afcdc3870578164b0890a409914ee6e76503ce1a4d13f47c10500375701b73423f51a3776f1e06473494cac4e9e8af92eaf2dfe2e3b00cf29582d2b973ddaf3dd8d998de7eabc55d3f92a9b948f039e4269bd3d4d11") ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000400)={0x7, 0x1f, 0x8, 0xb6, &(0x7f00000001c0)=""/182, 0xad, &(0x7f0000000280)=""/173, 0xbc, &(0x7f0000000340)=""/188}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)="77c457ed2c407c6d27e30a150d3ea0007891cad9595d9a4cae331bec3bdf171cdb1d88f48c7e03ae9bc2ea5972f387931311686067f179989dfef2a8ff067a582240cc9d87aa1ca498c60f1582f8d3be4e329a7a6677427ae3890e45508594e3af0bde8a5e6fa736ff837ddea807f284cf5afcdc3870578164b0890a409914ee6e76503ce1a4d13f47c10500375701b73423f51a3776f1e06473494cac4e9e8af92eaf2dfe2e3b00cf29582d2b973ddaf3dd8d998de7eabc55d3f92a9b948f039e4269bd3d4d11") (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80000}) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) (async) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x1) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x40) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/46) 00:50:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r0, 0x80) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/227) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x5, 0xb, 0x4, 0x1000, 0xeba6, {r0, r1/1000+60000}, {0x3, 0x2, 0x0, 0x9, 0x2, 0x1, "731e74c2"}, 0x80000000, 0x4, {}, 0x20, 0x0, r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x20000000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9657ff31851dd584c3812b2f3280f8a9c404fe050f3c9a6182c377547182e71db1b4c91f21937a7da60ac72b250122a30c15b64e216c8d5d25baa24f94486b1b5f84e892f2172bd1b4b922fdb5d8e608c629e59395a515f83d7b69b2f1") ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async, rerun: 64) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (rerun: 64) 00:50:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x40) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/46) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x800}) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x40) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/46) (async) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async, rerun: 64) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x5, 0xb, 0x4, 0x1000, 0xeba6, {r0, r1/1000+60000}, {0x3, 0x2, 0x0, 0x9, 0x2, 0x1, "731e74c2"}, 0x80000000, 0x4, {}, 0x20, 0x0, r2}) (async, rerun: 64) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x20000000) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9657ff31851dd584c3812b2f3280f8a9c404fe050f3c9a6182c377547182e71db1b4c91f21937a7da60ac72b250122a30c15b64e216c8d5d25baa24f94486b1b5f84e892f2172bd1b4b922fdb5d8e608c629e59395a515f83d7b69b2f1") (async) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x6) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="9657ff31851dd584c3812b2f3280f8a9c404fe050f3c9a6182c377547182e71db1b4c91f21937a7da60ac72b250122a30c15b64e216c8d5d25baa24f94486b1b5f84e892f2172bd1b4b922fdb5d8e608c629e59395a515f83d7b69b2f1") ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8201) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x5, 0xb, 0x4, 0x1000, 0xeba6, {r0, r1/1000+60000}, {0x3, 0x2, 0x0, 0x9, 0x2, 0x1, "731e74c2"}, 0x80000000, 0x4, {}, 0x20, 0x0, r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x20000000) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x20000000) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x6) (async) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffff7fffffff, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:50:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8201) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xffff, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x3f, 0x6, 0x7, 0x2, r2, 0x1d78, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x48) ioctl$KDDELIO(r1, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x8201) (async) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) (async) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4010, r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x8e49) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffff7fffffff, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x6) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xffff, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x3f, 0x6, 0x7, 0x2, r2, 0x1d78, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x48) ioctl$KDDELIO(r1, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xffff, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x3f, 0x6, 0x7, 0x2, r2, 0x1d78, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x48) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) (async) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) (async) 00:50:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffff7fffffff, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x8e49) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:44 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800020026010000ffeddf2502000300100000000c000880080001000e00000023000200010700000400000001880000000300eb"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8492f524c6d944a9) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xffff, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xffff, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x3f, 0x6, 0x7, 0x2, r2, 0x1d78, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x48) ioctl$KDDELIO(r1, 0x2, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 00:50:44 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x8e49) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) 00:50:44 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:44 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800020026010000ffeddf2502000300100000000c000880080001000e00000023000200010700000400000001880000000300eb"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8492f524c6d944a9) 00:50:44 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 00:50:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xfffffff7) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:44 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="a31d60d42e60133ba513092f895ab4e1ae125ed1c68b80484796ae4571b8911c379ae3a13bd88d6d7e4771bec82c8ea2971ab1d8952ac78dfa1eef514769d0b6b45e401eb76168da8b7f46119061a38f46a9069dd78bbb722d4cb39ab353b406b73293608e913e194d1bb57dd2282298f267157060959c80f1755dbec68605c0ba906dd86102c9b3050c741d3aa2605c57645c48dc7cb0221eca1933d61166437f01a70acdcb814b26a5061d43d20e73511e113850fa10c4dd807c36b6e748cdeaf3960f99302fcaf7c7ebb0ab7303350d4e259d3a9c7d252cc6c70a0b38930c0a3a8eb872") ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/167) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:44 executing program 5: close$fd_v4l2_buffer(0xffffffffffffffff) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:45 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800020026010000ffeddf2502000300100000000c000880080001000e00000023000200010700000400000001880000000300eb"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8492f524c6d944a9) 00:50:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/143) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="a31d60d42e60133ba513092f895ab4e1ae125ed1c68b80484796ae4571b8911c379ae3a13bd88d6d7e4771bec82c8ea2971ab1d8952ac78dfa1eef514769d0b6b45e401eb76168da8b7f46119061a38f46a9069dd78bbb722d4cb39ab353b406b73293608e913e194d1bb57dd2282298f267157060959c80f1755dbec68605c0ba906dd86102c9b3050c741d3aa2605c57645c48dc7cb0221eca1933d61166437f01a70acdcb814b26a5061d43d20e73511e113850fa10c4dd807c36b6e748cdeaf3960f99302fcaf7c7ebb0ab7303350d4e259d3a9c7d252cc6c70a0b38930c0a3a8eb872") (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/167) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xfffffff7) (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5406, 0x20000000) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0xdf) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$KDDELIO(r4, 0x4b35, 0xb0a) 00:50:45 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0xfffffff7) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/143) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5406, 0x20000000) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0xdf) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$KDDELIO(r4, 0x4b35, 0xb0a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r3, 0x5406, 0x20000000) (async) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0xdf) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) (async) ioctl$KDDELIO(r4, 0x4b35, 0xb0a) (async) 00:50:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x1ffff000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/143) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/143) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="a31d60d42e60133ba513092f895ab4e1ae125ed1c68b80484796ae4571b8911c379ae3a13bd88d6d7e4771bec82c8ea2971ab1d8952ac78dfa1eef514769d0b6b45e401eb76168da8b7f46119061a38f46a9069dd78bbb722d4cb39ab353b406b73293608e913e194d1bb57dd2282298f267157060959c80f1755dbec68605c0ba906dd86102c9b3050c741d3aa2605c57645c48dc7cb0221eca1933d61166437f01a70acdcb814b26a5061d43d20e73511e113850fa10c4dd807c36b6e748cdeaf3960f99302fcaf7c7ebb0ab7303350d4e259d3a9c7d252cc6c70a0b38930c0a3a8eb872") ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/167) ioctl$KDDELIO(r0, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="a31d60d42e60133ba513092f895ab4e1ae125ed1c68b80484796ae4571b8911c379ae3a13bd88d6d7e4771bec82c8ea2971ab1d8952ac78dfa1eef514769d0b6b45e401eb76168da8b7f46119061a38f46a9069dd78bbb722d4cb39ab353b406b73293608e913e194d1bb57dd2282298f267157060959c80f1755dbec68605c0ba906dd86102c9b3050c741d3aa2605c57645c48dc7cb0221eca1933d61166437f01a70acdcb814b26a5061d43d20e73511e113850fa10c4dd807c36b6e748cdeaf3960f99302fcaf7c7ebb0ab7303350d4e259d3a9c7d252cc6c70a0b38930c0a3a8eb872") (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/167) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x622000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5406, 0x20000000) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0xdf) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$KDDELIO(r4, 0x4b35, 0xb0a) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x622000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x1, 0x7}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000001c0)={r1}) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5406, 0x20000000) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000000)=0xdf) (async) r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$KDDELIO(r4, 0x4b35, 0xb0a) 00:50:45 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x622000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x622000) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1f) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x2, 0x20000000) (async) 00:50:45 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 00:50:45 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x20000000) 00:50:45 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="480be99014a0915e1c7fe43dad89bb47e4b4b740ba5b50273b6855ef361d5eb9352c2f9029f1693bdfa18f1337a14cdb163a62f5dd72a676019d05ea60837b9d4d7638da52d43563a6b03e10701d9c302ae6f8d497fb5bdca5a7b636f580f1398fb692045a47341aae96aa56b6e8df78714f588897742ee8bf2f459728f236dd08cb6c40a71b00bf4aabe3df0e1ce17cc2e79b83f77b67e547e07610d43d903880ef162aa959346bfedce8162e4782991a6f12654f544b") ioctl$KDDELIO(r0, 0x2, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x0) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:45 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x9a1b80, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff001) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x480402) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@dellinkprop={0xa4, 0x6d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28004}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_PROTO_DOWN={0x5}, @IFLA_XDP={0x54, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_LINKMODE={0x5, 0x11, 0xb3}, @IFLA_LINKMODE={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) ioctl$KDDELIO(r0, 0x2, 0x100000020000000) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 64) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:45 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 00:50:45 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x9a1b80, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff001) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x9a1b80, 0x0) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff001) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x480402) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@dellinkprop={0xa4, 0x6d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28004}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_PROTO_DOWN={0x5}, @IFLA_XDP={0x54, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_LINKMODE={0x5, 0x11, 0xb3}, @IFLA_LINKMODE={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) (async) ioctl$KDDELIO(r0, 0x2, 0x100000020000000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 00:50:45 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r1}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x68, 0x9, {0xffffffffffffffff}, {0xee00}, 0x4, 0x8}) write$damon_target_ids(r1, &(0x7f0000000080)={@val, [{' ', r6}]}, 0x1d) 00:50:45 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x9a1b80, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x540b, 0x1ffff001) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:45 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:45 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x480402) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@dellinkprop={0xa4, 0x6d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28004}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_PROTO_DOWN={0x5}, @IFLA_XDP={0x54, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_LINKMODE={0x5, 0x11, 0xb3}, @IFLA_LINKMODE={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090) ioctl$KDDELIO(r0, 0x2, 0x100000020000000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:50:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async, rerun: 64) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) (rerun: 64) 00:50:45 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000340)="07ba354a9391e6bac5ee4fc4ae34a0cbf70d78c9227db5bf6bd27f157cfeec9c5b8e3f91c46ec7ea87bbe7a0d8a6b791599a0a2d75e5df0bee17e506299693ffdd306479f3db16f20496c922178121bd136941dcffd7ddbcfa0ae13611b34a49a5c2e6918e8ef712b8a67214860889d42baacaec53f92fc0f06c761cc75da35a031ccfd54c2c428df3ce573b43e56e822bdd88bedd7e9926924b095cbb5282912920c7539ef9092d90ba0254497473baa310849aac6e2b2eb265ca97f7abf20e0ae31d") ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x0, 0x8, 0x2}) 00:50:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_pts(r0, 0x400000) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000340)="84a8e962376dfafc4e7d950417c3bce22dee5ff71dbd66dc19f80d9111b570949e399f0ee8c3cdc9045379ed9885715f4ee0b4963d77ea65ad6b81d5ba70c750159bce7845f28b84be760723ec069777f9c541bbee2b49f59cec984682df7e4c16b38504d7d53fce7a6a87a6983d59dd106290d0fac37525fa2213bd45ba892cd9fc31e046eecfc7c1c8ad1a38df7182b0d3cbb1eaffffffa2c8751007e8cc3494b18f9d824d5eb7cf85b9372fed84edaedb0beec04a1c70cfe4cb72f2234d24f02b0be9da20accbef857ac683b696761bdaef312bd0") r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff166}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000340)="07ba354a9391e6bac5ee4fc4ae34a0cbf70d78c9227db5bf6bd27f157cfeec9c5b8e3f91c46ec7ea87bbe7a0d8a6b791599a0a2d75e5df0bee17e506299693ffdd306479f3db16f20496c922178121bd136941dcffd7ddbcfa0ae13611b34a49a5c2e6918e8ef712b8a67214860889d42baacaec53f92fc0f06c761cc75da35a031ccfd54c2c428df3ce573b43e56e822bdd88bedd7e9926924b095cbb5282912920c7539ef9092d90ba0254497473baa310849aac6e2b2eb265ca97f7abf20e0ae31d") ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x0, 0x8, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x0, 0x8, 0x2}) 00:50:46 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 00:50:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_pts(r0, 0x400000) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000340)="84a8e962376dfafc4e7d950417c3bce22dee5ff71dbd66dc19f80d9111b570949e399f0ee8c3cdc9045379ed9885715f4ee0b4963d77ea65ad6b81d5ba70c750159bce7845f28b84be760723ec069777f9c541bbee2b49f59cec984682df7e4c16b38504d7d53fce7a6a87a6983d59dd106290d0fac37525fa2213bd45ba892cd9fc31e046eecfc7c1c8ad1a38df7182b0d3cbb1eaffffffa2c8751007e8cc3494b18f9d824d5eb7cf85b9372fed84edaedb0beec04a1c70cfe4cb72f2234d24f02b0be9da20accbef857ac683b696761bdaef312bd0") r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff166}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_pts(r0, 0x400000) (async) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000340)="84a8e962376dfafc4e7d950417c3bce22dee5ff71dbd66dc19f80d9111b570949e399f0ee8c3cdc9045379ed9885715f4ee0b4963d77ea65ad6b81d5ba70c750159bce7845f28b84be760723ec069777f9c541bbee2b49f59cec984682df7e4c16b38504d7d53fce7a6a87a6983d59dd106290d0fac37525fa2213bd45ba892cd9fc31e046eecfc7c1c8ad1a38df7182b0d3cbb1eaffffffa2c8751007e8cc3494b18f9d824d5eb7cf85b9372fed84edaedb0beec04a1c70cfe4cb72f2234d24f02b0be9da20accbef857ac683b696761bdaef312bd0") (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff166}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c080) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) (async) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000340)="07ba354a9391e6bac5ee4fc4ae34a0cbf70d78c9227db5bf6bd27f157cfeec9c5b8e3f91c46ec7ea87bbe7a0d8a6b791599a0a2d75e5df0bee17e506299693ffdd306479f3db16f20496c922178121bd136941dcffd7ddbcfa0ae13611b34a49a5c2e6918e8ef712b8a67214860889d42baacaec53f92fc0f06c761cc75da35a031ccfd54c2c428df3ce573b43e56e822bdd88bedd7e9926924b095cbb5282912920c7539ef9092d90ba0254497473baa310849aac6e2b2eb265ca97f7abf20e0ae31d") ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r3}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x0, 0x8, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x8, 0x0, 0x8, 0x2}) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000200)={0x7f, 0xfffffffc, 0x3, 0x36, &(0x7f0000000000)=""/54, 0xd0, &(0x7f0000000040)=""/208, 0x8b, &(0x7f0000000140)=""/139}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5a4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r1, 0x5441, 0xefa8) 00:50:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_pts(r0, 0x400000) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000340)="84a8e962376dfafc4e7d950417c3bce22dee5ff71dbd66dc19f80d9111b570949e399f0ee8c3cdc9045379ed9885715f4ee0b4963d77ea65ad6b81d5ba70c750159bce7845f28b84be760723ec069777f9c541bbee2b49f59cec984682df7e4c16b38504d7d53fce7a6a87a6983d59dd106290d0fac37525fa2213bd45ba892cd9fc31e046eecfc7c1c8ad1a38df7182b0d3cbb1eaffffffa2c8751007e8cc3494b18f9d824d5eb7cf85b9372fed84edaedb0beec04a1c70cfe4cb72f2234d24f02b0be9da20accbef857ac683b696761bdaef312bd0") (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff166}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c080) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000004) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000200)={0x7f, 0xfffffffc, 0x3, 0x36, &(0x7f0000000000)=""/54, 0xd0, &(0x7f0000000040)=""/208, 0x8b, &(0x7f0000000140)=""/139}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5a4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) (async) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r1, 0x5441, 0xefa8) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_open_pts(r0, 0x585000) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r3, 0x4b35, 0x8001) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6d2028bd7000fedbdf2501f9ff0008000300104cc1b9", @ANYRES32=0x0, @ANYBLOB="050030000000000005002d00000000000500380001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000200)={0x7f, 0xfffffffc, 0x3, 0x36, &(0x7f0000000000)=""/54, 0xd0, &(0x7f0000000040)=""/208, 0x8b, &(0x7f0000000140)=""/139}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000004) 00:50:46 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"5e4ec1390d53709f364ba5eb5cf72bba02296d1ef148fdd92c6f388f2775fef5"}) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x2) (async) ioctl$KDDELIO(r0, 0x540b, 0x1ffff000) (async) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_open_pts(r0, 0x585000) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r3, 0x4b35, 0x8001) (async) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6d2028bd7000fedbdf2501f9ff0008000300104cc1b9", @ANYRES32=0x0, @ANYBLOB="050030000000000005002d00000000000500380001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5a4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0xd0) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) ioctl$TIOCGPTPEER(r1, 0x5441, 0xefa8) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000004) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x8000000000000006) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_open_pts(r0, 0x585000) ioctl$TIOCGPTPEER(r2, 0x5441, 0xffffffffffffffff) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDDELIO(r3, 0x4b35, 0x8001) (async) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6d2028bd7000fedbdf2501f9ff0008000300104cc1b9", @ANYRES32=0x0, @ANYBLOB="050030000000000005002d00000000000500380001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:46 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x8000000000000006) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540b, 0x1ffff000) 00:50:46 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:46 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:46 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:46 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5407, 0x8000000000000006) (async) ioctl$KDDELIO(r0, 0x5407, 0x8000000000000006) 00:50:46 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/24) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="5a328d0e606dbc2e6ddd29e32c162d4e02611831c6ff7c5e153ee80e920982f0be0b62cd49d5e767116a53417b095044ffd5294ca0f21db027cf35a5bc7f7b023fde580832f1f2eea5c4c72866c33678a8974ab58f9aebfa226bc9b2342fb425ae663c58df95cde93794687ef4f6389de78c73c9aab5f393a45f2f908a854ecd401ae08b9c2b39be7aeabc04ad453835f320459e2d4d142fd8dffc16d142ad59b601b7737c8b2667eb74bc2796d2d6a3bb90012c82400475531c9a8f436b4aed59ed4f935e4ca99126e50c61f43bb009fcec56757575932eeea2ae91") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:50:47 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 00:50:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x10000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x1}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/24) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="5a328d0e606dbc2e6ddd29e32c162d4e02611831c6ff7c5e153ee80e920982f0be0b62cd49d5e767116a53417b095044ffd5294ca0f21db027cf35a5bc7f7b023fde580832f1f2eea5c4c72866c33678a8974ab58f9aebfa226bc9b2342fb425ae663c58df95cde93794687ef4f6389de78c73c9aab5f393a45f2f908a854ecd401ae08b9c2b39be7aeabc04ad453835f320459e2d4d142fd8dffc16d142ad59b601b7737c8b2667eb74bc2796d2d6a3bb90012c82400475531c9a8f436b4aed59ed4f935e4ca99126e50c61f43bb009fcec56757575932eeea2ae91") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/24) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="5a328d0e606dbc2e6ddd29e32c162d4e02611831c6ff7c5e153ee80e920982f0be0b62cd49d5e767116a53417b095044ffd5294ca0f21db027cf35a5bc7f7b023fde580832f1f2eea5c4c72866c33678a8974ab58f9aebfa226bc9b2342fb425ae663c58df95cde93794687ef4f6389de78c73c9aab5f393a45f2f908a854ecd401ae08b9c2b39be7aeabc04ad453835f320459e2d4d142fd8dffc16d142ad59b601b7737c8b2667eb74bc2796d2d6a3bb90012c82400475531c9a8f436b4aed59ed4f935e4ca99126e50c61f43bb009fcec56757575932eeea2ae91") (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) 00:50:47 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 00:50:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x10000) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x1}) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 00:50:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/24) ioctl$KDDELIO(r1, 0x2, 0x20000000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="5a328d0e606dbc2e6ddd29e32c162d4e02611831c6ff7c5e153ee80e920982f0be0b62cd49d5e767116a53417b095044ffd5294ca0f21db027cf35a5bc7f7b023fde580832f1f2eea5c4c72866c33678a8974ab58f9aebfa226bc9b2342fb425ae663c58df95cde93794687ef4f6389de78c73c9aab5f393a45f2f908a854ecd401ae08b9c2b39be7aeabc04ad453835f320459e2d4d142fd8dffc16d142ad59b601b7737c8b2667eb74bc2796d2d6a3bb90012c82400475531c9a8f436b4aed59ed4f935e4ca99126e50c61f43bb009fcec56757575932eeea2ae91") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/24) (async) ioctl$KDDELIO(r1, 0x2, 0x20000000) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000000c0)="5a328d0e606dbc2e6ddd29e32c162d4e02611831c6ff7c5e153ee80e920982f0be0b62cd49d5e767116a53417b095044ffd5294ca0f21db027cf35a5bc7f7b023fde580832f1f2eea5c4c72866c33678a8974ab58f9aebfa226bc9b2342fb425ae663c58df95cde93794687ef4f6389de78c73c9aab5f393a45f2f908a854ecd401ae08b9c2b39be7aeabc04ad453835f320459e2d4d142fd8dffc16d142ad59b601b7737c8b2667eb74bc2796d2d6a3bb90012c82400475531c9a8f436b4aed59ed4f935e4ca99126e50c61f43bb009fcec56757575932eeea2ae91") (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) 00:50:47 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, r3, 0x6}, 0xc) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x5, {0xffffffffffffffff}, {0xee00}, 0x7fb, 0xfff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r3], &(0x7f0000000100)=[0x3, 0x100000000, 0x9, 0x1f, 0x4, 0xfff], 0x1, 0x1}) pidfd_open(r1, 0x0) 00:50:47 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x10000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x1}) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x5, {0xffffffffffffffff}, {0xee00}, 0x7fb, 0xfff}) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x5, {0xffffffffffffffff}, {0xee00}, 0x7fb, 0xfff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r3], &(0x7f0000000100)=[0x3, 0x100000000, 0x9, 0x1f, 0x4, 0xfff], 0x1, 0x1}) pidfd_open(r1, 0x0) 00:50:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, r3, 0x6}, 0xc) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x9, 0x5, {0xffffffffffffffff}, {0xee00}, 0x7fb, 0xfff}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r3], &(0x7f0000000100)=[0x3, 0x100000000, 0x9, 0x1f, 0x4, 0xfff], 0x1, 0x1}) (async) pidfd_open(r1, 0x0) 00:50:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r3}, 0x48) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, r3, 0x6}, 0xc) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, r2, r2, r2], 0x5, 0x80000}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffc, 0xedb3}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x0, 0x6, 0x7, 0xf1, 0xfeb, 0x4}) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) accept4$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x100000) 00:50:47 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0xee68, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="061b00f4da4c50395715a83a35228791fac8ef9c7f6d27591ef573510b676ed6858faccfa8df287921dcb1f51112fd540d1407a67a53164f4f2755876549d0980fd6055ce9c1fb3395036814b90ff8905438", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf250f0000000a000900000000000000000008003200020000000800390000000100"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000200)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000140)) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, r2, r2, r2], 0x5, 0x80000}) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffc, 0xedb3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x0, 0x6, 0x7, 0xf1, 0xfeb, 0x4}) 00:50:47 executing program 5: syz_io_uring_setup(0xb, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r0, 0x20000) ioctl$KDDELIO(r2, 0x5406, 0x20000000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) accept4$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x100000) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, r2, r2, r2], 0x5, 0x80000}) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffc, 0xedb3}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x0, 0x6, 0x7, 0xf1, 0xfeb, 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000800) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0, r2, r2, r2], 0x5, 0x80000}) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffc, 0xedb3}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x0, 0x6, 0x7, 0xf1, 0xfeb, 0x4}) (async) 00:50:47 executing program 5: syz_io_uring_setup(0xb, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="061b00f4da4c50395715a83a35228791fac8ef9c7f6d27591ef573510b676ed6858faccfa8df287921dcb1f51112fd540d1407a67a53164f4f2755876549d0980fd6055ce9c1fb3395036814b90ff8905438", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf250f0000000a000900000000000000000008003200020000000800390000000100"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000200)) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000140)) (async) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0xb, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:47 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) accept4$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x100000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) (async) accept4$llc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x100000) (async) 00:50:47 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="061b00f4da4c50395715a83a35228791fac8ef9c7f6d27591ef573510b676ed6858faccfa8df287921dcb1f51112fd540d1407a67a53164f4f2755876549d0980fd6055ce9c1fb3395036814b90ff8905438", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdbdf250f0000000a000900000000000000000008003200020000000800390000000100"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000200)) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000140)) (async, rerun: 32) ioctl$KDDELIO(r1, 0x5406, 0x20000000) (rerun: 32) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x215}, &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffffc9, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000090}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:47 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:47 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:47 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:47 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) 00:50:47 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffffc9, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000090}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffffc9, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000090}, 0x40000) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) 00:50:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) 00:50:48 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200bc0, 0x0) syz_open_pts(r1, 0x608200) 00:50:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) 00:50:48 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200bc0, 0x0) syz_open_pts(r1, 0x608200) 00:50:48 executing program 4: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xffffffffffffffc9, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28000090}, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0]}) 00:50:48 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), 0x0, &(0x7f00000001c0)) 00:50:48 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200bc0, 0x0) syz_open_pts(r1, 0x608200) 00:50:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r2}, 0x18) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) r3 = syz_open_pts(r0, 0x111800) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x101) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{r3, 0x0, 0x1de7179faec7d702, [0x1, 0xe56]}, {0x80000000, 0x0, 0x0, [0x7ff, 0x6]}, 0x10000000, [0x7, 0xa9]}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), &(0x7f0000000180), 0x0) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)={0xffffffff, 0x3, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x1, 0x1, 0x1f, 0x7f, 0x9, 0x1, "16587330"}, 0x5, 0x4, {}, 0xff, 0x0, r5}) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x101) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{r3, 0x0, 0x1de7179faec7d702, [0x1, 0xe56]}, {0x80000000, 0x0, 0x0, [0x7ff, 0x6]}, 0x10000000, [0x7, 0xa9]}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r2}, 0x18) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async) r3 = syz_open_pts(r0, 0x111800) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 00:50:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x4, [0x5d4, 0x81]}, {0x80000000, 0x0, 0x5, [0x96a, 0x3]}, 0x7, [0x5, 0x8]}) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, r2, 0x0, 0x6, 0x1f, 0x6, "23328177d4291763e2a846c2972f80a6ff601c5336720a256fc000c3a4431e515f198c5168859ad71520b0d135bbbd5a06ebca32289e18f549e80e79a84c8e", 0x19}, 0x60) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x1) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), &(0x7f0000000180), 0x0) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$KDDELIO(r1, 0x4b35, 0x101) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async, rerun: 32) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000000), &(0x7f0000000040)=[{}, {{0x80000000}}]}) (rerun: 32) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000100)={{r3, 0x0, 0x1de7179faec7d702, [0x1, 0xe56]}, {0x80000000, 0x0, 0x0, [0x7ff, 0x6]}, 0x10000000, [0x7, 0xa9]}) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x4, [0x5d4, 0x81]}, {0x80000000, 0x0, 0x5, [0x96a, 0x3]}, 0x7, [0x5, 0x8]}) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, r2, 0x0, 0x6, 0x1f, 0x6, "23328177d4291763e2a846c2972f80a6ff601c5336720a256fc000c3a4431e515f198c5168859ad71520b0d135bbbd5a06ebca32289e18f549e80e79a84c8e", 0x19}, 0x60) (async) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, r2, 0x0, 0x6, 0x1f, 0x6, "23328177d4291763e2a846c2972f80a6ff601c5336720a256fc000c3a4431e515f198c5168859ad71520b0d135bbbd5a06ebca32289e18f549e80e79a84c8e", 0x19}, 0x60) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x1) 00:50:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r2}, 0x18) (async) ioctl$KDDELIO(r1, 0x5409, 0x1ffff000) (async, rerun: 32) r3 = syz_open_pts(r0, 0x111800) (rerun: 32) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 00:50:48 executing program 5: syz_io_uring_setup(0xb, &(0x7f0000000100), &(0x7f0000000180), 0x0) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) 00:50:48 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000000c0)={{0x80000000, 0x0, 0x4, [0x5d4, 0x81]}, {0x80000000, 0x0, 0x5, [0x96a, 0x3]}, 0x7, [0x5, 0x8]}) (async) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, r2, 0x0, 0x6, 0x1f, 0x6, "23328177d4291763e2a846c2972f80a6ff601c5336720a256fc000c3a4431e515f198c5168859ad71520b0d135bbbd5a06ebca32289e18f549e80e79a84c8e", 0x19}, 0x60) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5407, 0x1) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3f) syz_io_uring_setup(0x5f3, &(0x7f0000000000)={0x0, 0xc8ce, 0x2, 0x1, 0x11d}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) 00:50:48 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) clock_gettime(0x0, &(0x7f0000000200)) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3f) (async) syz_io_uring_setup(0x5f3, &(0x7f0000000000)={0x0, 0xc8ce, 0x2, 0x1, 0x11d}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="af668cd4a1035963162854b1cee6cda47d6ff2b762f9fbc90e4dc562548715b240aa3f31b291c83654c25fd19d3116d7613b16a526116c8f925bfb911262a4b591a3a64982a9d45814764aef665845fdd68724a2ab1f4451059b43966ad300fc76b831687fe806fa0f79f4b58a89b5491f3291b57b6f57ea6a2e3e17d6c5ccea619c350893a4a5a8b32e3665d037a107e33b2db1662d0c5451ce71d573d6e6227e824a2e06c30b30e120f71a26580779b234d7be4058c2a79865ac67b8714062d942afadc3dcbdf29326d7e1d397baaa715218c5800caa11715fce9919f8e0cd88596edcc4600e2ff26bf2e85478b5beaf1b7fc0cdf514b1") ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_open_pts(r0, 0x84002) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000000c0)=""/201) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3f) syz_io_uring_setup(0x5f3, &(0x7f0000000000)={0x0, 0xc8ce, 0x2, 0x1, 0x11d}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_MADVISE={0x19, 0x3c, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x1}, 0xc) 00:50:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="af668cd4a1035963162854b1cee6cda47d6ff2b762f9fbc90e4dc562548715b240aa3f31b291c83654c25fd19d3116d7613b16a526116c8f925bfb911262a4b591a3a64982a9d45814764aef665845fdd68724a2ab1f4451059b43966ad300fc76b831687fe806fa0f79f4b58a89b5491f3291b57b6f57ea6a2e3e17d6c5ccea619c350893a4a5a8b32e3665d037a107e33b2db1662d0c5451ce71d573d6e6227e824a2e06c30b30e120f71a26580779b234d7be4058c2a79865ac67b8714062d942afadc3dcbdf29326d7e1d397baaa715218c5800caa11715fce9919f8e0cd88596edcc4600e2ff26bf2e85478b5beaf1b7fc0cdf514b1") (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 5: syz_io_uring_setup(0x1467, &(0x7f0000000380)={0x0, 0xb218, 0x10, 0x0, 0x39d}, &(0x7f0000000400), &(0x7f0000000440)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000140)={0x4, 0x41f9, 0x1, 0xbb, &(0x7f0000000080)=""/187, 0x54, &(0x7f00000001c0)=""/84, 0x78, &(0x7f00000002c0)=""/120}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000340)) syz_open_pts(r3, 0x101000) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0xb1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000280)=""/13) accept4$llc(r4, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x800) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000540)=0xfffffffa) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="af668cd4a1035963162854b1cee6cda47d6ff2b762f9fbc90e4dc562548715b240aa3f31b291c83654c25fd19d3116d7613b16a526116c8f925bfb911262a4b591a3a64982a9d45814764aef665845fdd68724a2ab1f4451059b43966ad300fc76b831687fe806fa0f79f4b58a89b5491f3291b57b6f57ea6a2e3e17d6c5ccea619c350893a4a5a8b32e3665d037a107e33b2db1662d0c5451ce71d573d6e6227e824a2e06c30b30e120f71a26580779b234d7be4058c2a79865ac67b8714062d942afadc3dcbdf29326d7e1d397baaa715218c5800caa11715fce9919f8e0cd88596edcc4600e2ff26bf2e85478b5beaf1b7fc0cdf514b1") (async) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) socket$igmp6(0xa, 0x3, 0x2) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:48 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:48 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 64) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async, rerun: 32) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (rerun: 32) socket$igmp6(0xa, 0x3, 0x2) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:48 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:48 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:48 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:48 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) (async) ioctl$KDDELIO(r0, 0x5409, 0x1ffff000) 00:50:48 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:49 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) socket$igmp6(0xa, 0x3, 0x2) 00:50:49 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x1fffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x3, 0x1000}) 00:50:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x10000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:50:49 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/149) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x5, 0x2, 0x3f}}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) ioctl$KDDELIO(r2, 0x5406, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000855}, 0x10040) 00:50:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000200)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5409, 0x1ffff000) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000240)=[{0x80000000}], &(0x7f0000000280)}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000140)={r4, &(0x7f0000000080)=[{}, {0x80000000}], &(0x7f00000000c0)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000180)={{r5, 0x0, 0x4, [0xffffffff, 0x7f]}, {0x80000000, 0x0, 0x5, [0x59b4, 0x4]}, 0x4, [0x10001, 0x4]}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x6) 00:50:49 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) 00:50:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x5407, 0x20000000) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x10000) (async, rerun: 32) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/149) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x5, 0x2, 0x3f}}) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000855}, 0x10040) 00:50:49 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1) 00:50:49 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4051}, 0x44801) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x1ffff000) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/149) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x100000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x5, 0x2, 0x3f}}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) ioctl$KDDELIO(r2, 0x5406, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000855}, 0x10040) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/149) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x100000}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x0, 0x5, 0x2, 0x3f}}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r2, 0x5406, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) (async) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000855}, 0x10040) (async) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x2, r1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:49 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r1, 0x5407, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x10000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) (async) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x0, 0x9}}) ioctl$KDDELIO(r0, 0x540a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:49 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x1) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r2, 0x5407, 0x20000000) (async) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x0, 0x9}}) ioctl$KDDELIO(r0, 0x540a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:49 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:49 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x20000000) 00:50:49 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:49 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x0, 0x9}}) ioctl$KDDELIO(r0, 0x540a, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:49 executing program 1: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "8fce5ca9f649eb204c89cb202fbd0637fb1af8fc7d589af71ed5f5f9488e515a"}) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) 00:50:49 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @remote, 0x1c}, {0xa, 0x4e21, 0x4, @local, 0x2d}, 0xffffffffffffffff, {[0x6, 0x1, 0x6, 0x4, 0x29, 0x4, 0x1b, 0x75]}}, 0x5c) 00:50:49 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:49 executing program 1: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "8fce5ca9f649eb204c89cb202fbd0637fb1af8fc7d589af71ed5f5f9488e515a"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) 00:50:49 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @remote, 0x1c}, {0xa, 0x4e21, 0x4, @local, 0x2d}, 0xffffffffffffffff, {[0x6, 0x1, 0x6, 0x4, 0x29, 0x4, 0x1b, 0x75]}}, 0x5c) 00:50:49 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x0, 0x9}}) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x100, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008011}, 0x4c895) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x404, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40844) 00:50:49 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:49 executing program 1: ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x7fffffff, "8fce5ca9f649eb204c89cb202fbd0637fb1af8fc7d589af71ed5f5f9488e515a"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) 00:50:49 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x3, @remote, 0x1c}, {0xa, 0x4e21, 0x4, @local, 0x2d}, 0xffffffffffffffff, {[0x6, 0x1, 0x6, 0x4, 0x29, 0x4, 0x1b, 0x75]}}, 0x5c) 00:50:49 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) ioctl$TIOCGPTPEER(r4, 0x5441, 0x80) 00:50:50 executing program 1: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:50 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) (async, rerun: 32) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) ioctl$TIOCGPTPEER(r4, 0x5441, 0x80) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:50 executing program 1: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) ioctl$TIOCGPTPEER(r4, 0x5441, 0x80) 00:50:50 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) prctl$PR_SVE_SET_VL(0x32, 0x2dda3) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 1: ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000140)) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async, rerun: 32) prctl$PR_SVE_SET_VL(0x32, 0x2dda3) (rerun: 32) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x2) 00:50:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x8000000000000001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x20, 0x70bd25, 0x7fff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd06}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x20040090) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:50 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) prctl$PR_SVE_SET_VL(0x32, 0x2dda3) 00:50:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x8000000000000001) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x20, 0x70bd25, 0x7fff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd06}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x20040090) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x8000000000000001) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x20, 0x70bd25, 0x7fff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd06}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x20040090) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5406, 0x20000000) 00:50:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x0, 0x1, 0xf9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0xa, 0x21, 0xffffffffffffffff, @prog_fd, r1}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x6) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000130000042abd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="1ca0070050000000140035005fc4f32a395e4d82000000000000000008001f00000000000800240055a986e30a000100aaaaaaaaaaaa000008001b00030000000500270040000000050010000800000008001e0004000000"], 0x70}, 0x1, 0x0, 0x0, 0x44000004}, 0x4040000) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:50 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x0, 0x1, 0xf9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0xa, 0x21, 0xffffffffffffffff, @prog_fd, r1}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x6) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:50 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5407, 0x20000000) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) r1 = syz_open_pts(r0, 0x200) r2 = socket(0x11, 0x1, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={&(0x7f0000000680), 0xc, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0300002300020028bd7000ffdbdf2500000000ac0007000a010102000000000000000000000000fe9300000000000000000000000000aa4e2400204e2000060200a0801d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2009000000000000080000000000000002000000000000000100000000000000b104000000000000030000000000000004000000000000000900000000000000080000000000000009000000000000005896000000000000ff0f00000000000081060000b96b6e0000010200000000000c000f00ffffffffffffffffe4000600ffffffff000000000000000000000000640101020000000000000000000000004e2300004e2400200a0020003a000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) r5 = syz_open_pts(r1, 0x200100) ioctl$KDDELIO(r5, 0x4b35, 0x80000000) r6 = accept4$llc(r2, 0x0, &(0x7f0000000a80), 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x40000120, 0x1, {0x1}}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0]}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r10}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc10200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, r13, 0x0, 0x0, r14, r15, 0x0], 0x8, 0x80000}) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x0, 0x1, 0xf9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x0, 0x1, 0xf9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0xa, 0x21, 0xffffffffffffffff, @prog_fd, r1}, 0x20) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r2, 0x5407, 0x6) 00:50:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = syz_open_pts(r0, 0x200) (async) r2 = socket(0x11, 0x1, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={&(0x7f0000000680), 0xc, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0300002300020028bd7000ffdbdf2500000000ac0007000a010102000000000000000000000000fe9300000000000000000000000000aa4e2400204e2000060200a0801d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2009000000000000080000000000000002000000000000000100000000000000b104000000000000030000000000000004000000000000000900000000000000080000000000000009000000000000005896000000000000ff0f00000000000081060000b96b6e0000010200000000000c000f00ffffffffffffffffe4000600ffffffff000000000000000000000000640101020000000000000000000000004e2300004e2400200a0020003a000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000004d53c0000002001000000000000000000000000000000000000000000005caeffffffffffff3800000000000000ffff0000000000005ff6ffffffffffff64130000000000004df2000000000000ad71000000000000839800000000000070cc0000000000000100000000000080060000000000000040000000001000000000008029bd70000435000002000000240000000000000014000e000a0101000000000000000000000000000a00100001000000000000000a00100000000000000000003d01140067686173682d636c6d756c6e690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008807000058b651d134ed5659db3b8fbcd080bd6710a859814218794cce44a3b3d9d17ff7968258f4dbdc348bd8c7ec71c44b90a1af823e03ac1525767d0c5b45dbcf9425ef8717f2f647b002b5126d794dfefeb6c24c913a3679089915bda3c74b6ed7d2e82a670347881d69cc053f30eaee4d0ff9b8fb00d38c39a1c5010577de99bb0dcb9a643088ca293f4149d99137a6162a6241b0a7ea605f403ddc55ccf06c6918f07a3b9740707fccc57e059c20bfbb58554348f674bed8a4f0bcc202cfc9d138da66e16e1f947620bc6a72bbe89ba845d0033ad771f66e4adeec88fe9fec90b5f413cb564fb496a71b75f45872e4edfb156474387100000010000a0028bd700025bd700006000000"], 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) r5 = syz_open_pts(r1, 0x200100) ioctl$KDDELIO(r5, 0x4b35, 0x80000000) r6 = accept4$llc(r2, 0x0, &(0x7f0000000a80), 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x40000120, 0x1, {0x1}}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0]}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r10}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc10200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r7}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, r13, 0x0, 0x0, r14, r15, 0x0], 0x8, 0x80000}) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:50 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_pts(r0, 0x40000) 00:50:50 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) (async) r1 = syz_open_pts(r0, 0x200) (async) r2 = socket(0x11, 0x1, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000c00)={&(0x7f0000000680), 0xc, &(0x7f0000000a40)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0300002300020028bd7000ffdbdf2500000000ac0007000a010102000000000000000000000000fe9300000000000000000000000000aa4e2400204e2000060200a0801d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2009000000000000080000000000000002000000000000000100000000000000b104000000000000030000000000000004000000000000000900000000000000080000000000000009000000000000005896000000000000ff0f00000000000081060000b96b6e0000010200000000000c000f00ffffffffffffffffe4000600ffffffff000000000000000000000000640101020000000000000000000000004e2300004e2400200a0020003a000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x80}, 0x8c1) (async) r5 = syz_open_pts(r1, 0x200100) ioctl$KDDELIO(r5, 0x4b35, 0x80000000) (async) r6 = accept4$llc(r2, 0x0, &(0x7f0000000a80), 0x80800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x40000120, 0x1, {0x1}}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0]}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r10}, 0x48) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc10200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r12, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000600)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x1, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, r13, 0x0, 0x0, r14, r15, 0x0], 0x8, 0x80000}) 00:50:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7e8, 0x0, r1, 0xffffffe1, '\x00', r2, r1, 0x2}, 0x48) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:50 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_pts(r0, 0x40000) 00:50:51 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff003) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x24080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "baabd043975c6580da71187b4811e59d3e79051803c4755ea2bee81b68871ecb"}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:51 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1ffc000000000000) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/245) 00:50:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff003) 00:50:51 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_pts(r0, 0x40000) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$KDDELIO(r0, 0x5407, 0x20000000) (async) syz_open_pts(r0, 0x40000) (async) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:51 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x1ffff000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/24) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040040) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0xe34, 0x6, 0x4, 0x20, 0xa2c8, {0x77359400}, {0x3, 0x0, 0x3f, 0xd, 0x9, 0x80, "4f7bb4eb"}, 0x3, 0x4, {}, 0x20, 0x0, r2}) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18ef8bc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe702}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x7f) 00:50:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff003) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1ffc000000000000) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/245) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18ef8bc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe702}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x7f) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x1ffff003) 00:50:51 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18ef8bc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe702}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) ioctl$KDDELIO(r0, 0x5407, 0x20000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b35, 0x7f) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1ffc000000000000) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/245) 00:50:51 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18ef8bc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe702}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) ioctl$KDDELIO(r0, 0x5407, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x1) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1ffc000000000000) 00:50:51 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@gettaction={0x124, 0x32, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18ef8bc5}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x20}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe702}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000800}, 0x40080) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:51 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x5406, 0x20000000) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:51 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1ffff003) 00:50:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x20000000) 00:50:51 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) 00:50:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:51 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:51 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:51 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f86a3cf4c6f4d175000e9c58146474c2de05fe9b5fa5d87146e45eb54ee6bb1dac232ce828d8fd004513c340290d74c04176898812a2062eb7a64c51218c955e6fe5563e294156e481cb1d2bd7be310c9db5e66849") ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:52 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_open_pts(r0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000000)=""/108) 00:50:52 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:52 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:52 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:52 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x20000000) 00:50:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:52 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x1000000000000) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x34f589fe) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:52 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x34f589fe) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:52 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x34f589fe) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:52 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5407, 0x1000000000000) 00:50:52 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:52 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:52 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x34f589fe) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:52 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2000000000437d) 00:50:52 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:52 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5407, 0x0) 00:50:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x20000000) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:53 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000003c0)=""/4096) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = syz_open_pts(r1, 0x100) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7a) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r1, 0x2, 0x5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0xfff, 0x6, {0xffffffffffffffff}, {0xee00}, 0x5, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipv6_newroute={0xac, 0x18, 0x20, 0x70bd29, 0x25dfdbff, {0xa, 0x10, 0x0, 0x5, 0xfd, 0x3, 0xfd, 0x2, 0x1000}, [@RTA_UID={0x8, 0x19, r4}, @RTA_PREF={0x5, 0x14, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xa, 0x2, '}\xfd]^+\x00'}}}, @RTA_PRIORITY={0x8}, @RTA_METRICS={0x54, 0x8, 0x0, 0x1, "e3a851ace0beefb4964ebbf9e89624eeee27b9675186cbd155a2d165385a73ba622309732de2bf8842207ecb927120323aeadbc3591e31fa75042ae04953ef0bbbcfc63fbaf668bbb07c83a58b889e71"}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000814}, 0x40008c0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0x34, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x608, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x4040010) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000000)=0xa17) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r1, 0x540b, 0x1fffefff) 00:50:53 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:53 executing program 0: ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r1, 0x540b, 0x1fffefff) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:53 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2000000000437d) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r1, 0x540b, 0x1fffefff) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5406, 0x20000000) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x2, 0x20000000) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0xfffffffffffffffe) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[r1, r2, 0x0, 0x0, 0x0], 0x5, 0x800}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x5409, 0x80000007) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x74) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5406, 0x0) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/150) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r1, 0x540b, 0x1fffefff) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x5409, 0x80000007) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x0, 0x2}, 0xc) 00:50:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r0, 0x540b, 0x1fffefff) 00:50:53 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x5409, 0x80000007) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r0, 0x540b, 0x1fffefff) 00:50:53 executing program 5: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:53 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:53 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000300)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x5409, 0x80000007) 00:50:53 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:53 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:53 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r0, 0x540b, 0x1fffefff) 00:50:53 executing program 5: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x80000007) 00:50:54 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:54 executing program 5: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDELIO(r0, 0x540b, 0x1fffefff) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:54 executing program 4: socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x80000007) 00:50:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x1fffefff) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 4: socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:54 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:54 executing program 4: socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) 00:50:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x80000007) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:54 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:50:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x80000007) 00:50:54 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x1fffefff) 00:50:54 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x80000007) 00:50:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:54 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:50:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:54 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:54 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:54 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x2, 0x1000000000000) 00:50:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5409, 0x80000007) 00:50:54 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:54 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5460, 0x20000000) 00:50:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x0) 00:50:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:54 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x0) 00:50:54 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x2000000e) 00:50:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x3) 00:50:54 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x0) 00:50:54 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:54 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5451, 0x20000000) 00:50:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:54 executing program 4: ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:54 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5434, 0x20000000) 00:50:54 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541d, 0x1ffff000) 00:50:54 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:54 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) 00:50:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:55 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5460, 0x1ffff000) 00:50:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5413, 0x20000000) 00:50:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) 00:50:55 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) 00:50:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x10, 0x20000000) 00:50:55 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5404, 0x20000000) 00:50:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) (fail_nth: 1) 00:50:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:55 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) 00:50:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) [ 3055.209181][T27359] FAULT_INJECTION: forcing a failure. [ 3055.209181][T27359] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.221288][T27359] CPU: 1 PID: 27359 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 3055.223521][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.226100][T27359] Call trace: [ 3055.226938][T27359] dump_backtrace+0x0/0x530 [ 3055.228129][T27359] show_stack+0x2c/0x3c [ 3055.229264][T27359] dump_stack_lvl+0x108/0x170 [ 3055.230467][T27359] dump_stack+0x1c/0x58 [ 3055.231529][T27359] should_fail+0x3b8/0x514 [ 3055.232680][T27359] __should_failslab+0xbc/0x110 [ 3055.233938][T27359] should_failslab+0x10/0x28 [ 3055.235142][T27359] slab_pre_alloc_hook+0x64/0xe8 [ 3055.236406][T27359] __kmalloc+0xc0/0x4c8 [ 3055.237482][T27359] tomoyo_realpath_from_path+0xd0/0x508 [ 3055.239713][T27359] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.239733][T27359] tomoyo_file_ioctl+0x2c/0x3c 00:50:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) (fail_nth: 1) [ 3055.239743][T27359] security_file_ioctl+0x80/0xbc [ 3055.239756][T27359] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.239767][T27359] invoke_syscall+0x98/0x2b8 [ 3055.239778][T27359] el0_svc_common+0x138/0x258 [ 3055.239789][T27359] do_el0_svc+0x58/0x14c [ 3055.239799][T27359] el0_svc+0x7c/0x1f0 [ 3055.239809][T27359] el0t_64_sync_handler+0x84/0xe4 [ 3055.239819][T27359] el0t_64_sync+0x1a0/0x1a4 [ 3055.245504][T27359] ERROR: Out of memory at tomoyo_realpath_from_path. 00:50:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) (fail_nth: 2) 00:50:55 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:55 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) 00:50:55 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x0) [ 3055.306108][T27367] FAULT_INJECTION: forcing a failure. [ 3055.306108][T27367] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.311075][T27367] CPU: 1 PID: 27367 Comm: syz-executor.1 Not tainted 5.15.140-syzkaller #0 [ 3055.313318][T27367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.315965][T27367] Call trace: [ 3055.316836][T27367] dump_backtrace+0x0/0x530 [ 3055.318011][T27367] show_stack+0x2c/0x3c [ 3055.319112][T27367] dump_stack_lvl+0x108/0x170 [ 3055.320363][T27367] dump_stack+0x1c/0x58 [ 3055.321420][T27367] should_fail+0x3b8/0x514 [ 3055.322569][T27367] __should_failslab+0xbc/0x110 [ 3055.323862][T27367] should_failslab+0x10/0x28 [ 3055.325125][T27367] slab_pre_alloc_hook+0x64/0xe8 [ 3055.326400][T27367] __kmalloc+0xc0/0x4c8 [ 3055.327509][T27367] tomoyo_realpath_from_path+0xd0/0x508 [ 3055.328987][T27367] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.330433][T27367] tomoyo_file_ioctl+0x2c/0x3c [ 3055.331743][T27367] security_file_ioctl+0x80/0xbc [ 3055.333002][T27367] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.334259][T27367] invoke_syscall+0x98/0x2b8 [ 3055.335507][T27367] el0_svc_common+0x138/0x258 [ 3055.336757][T27367] do_el0_svc+0x58/0x14c [ 3055.337890][T27367] el0_svc+0x7c/0x1f0 [ 3055.338938][T27367] el0t_64_sync_handler+0x84/0xe4 [ 3055.340286][T27367] el0t_64_sync+0x1a0/0x1a4 [ 3055.358253][T27367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3055.377260][T27375] FAULT_INJECTION: forcing a failure. [ 3055.377260][T27375] name failslab, interval 1, probability 0, space 0, times 0 00:50:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) (fail_nth: 1) [ 3055.386803][T27375] CPU: 1 PID: 27375 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 3055.389132][T27375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.391841][T27375] Call trace: [ 3055.392712][T27375] dump_backtrace+0x0/0x530 [ 3055.393909][T27375] show_stack+0x2c/0x3c [ 3055.394993][T27375] dump_stack_lvl+0x108/0x170 [ 3055.396209][T27375] dump_stack+0x1c/0x58 [ 3055.397271][T27375] should_fail+0x3b8/0x514 [ 3055.398430][T27375] __should_failslab+0xbc/0x110 [ 3055.399731][T27375] should_failslab+0x10/0x28 [ 3055.400980][T27375] slab_pre_alloc_hook+0x64/0xe8 [ 3055.402270][T27375] __kmalloc+0xc0/0x4c8 [ 3055.403402][T27375] tomoyo_encode+0x270/0x4b0 [ 3055.404587][T27375] tomoyo_realpath_from_path+0x4b4/0x508 [ 3055.406051][T27375] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.407449][T27375] tomoyo_file_ioctl+0x2c/0x3c [ 3055.408690][T27375] security_file_ioctl+0x80/0xbc [ 3055.409949][T27375] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.411198][T27375] invoke_syscall+0x98/0x2b8 [ 3055.412425][T27375] el0_svc_common+0x138/0x258 [ 3055.413784][T27375] do_el0_svc+0x58/0x14c [ 3055.414915][T27375] el0_svc+0x7c/0x1f0 [ 3055.415976][T27375] el0t_64_sync_handler+0x84/0xe4 [ 3055.417350][T27375] el0t_64_sync+0x1a0/0x1a4 [ 3055.425574][T27379] FAULT_INJECTION: forcing a failure. [ 3055.425574][T27379] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.436012][T27379] CPU: 0 PID: 27379 Comm: syz-executor.5 Not tainted 5.15.140-syzkaller #0 [ 3055.438274][T27379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.440862][T27379] Call trace: [ 3055.441697][T27379] dump_backtrace+0x0/0x530 [ 3055.442896][T27379] show_stack+0x2c/0x3c [ 3055.444010][T27379] dump_stack_lvl+0x108/0x170 [ 3055.445261][T27379] dump_stack+0x1c/0x58 [ 3055.446396][T27379] should_fail+0x3b8/0x514 [ 3055.447569][T27379] __should_failslab+0xbc/0x110 [ 3055.448912][T27379] should_failslab+0x10/0x28 [ 3055.450228][T27379] slab_pre_alloc_hook+0x64/0xe8 [ 3055.451567][T27379] __kmalloc+0xc0/0x4c8 [ 3055.452650][T27379] tomoyo_realpath_from_path+0xd0/0x508 [ 3055.454186][T27379] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.455711][T27379] tomoyo_file_ioctl+0x2c/0x3c [ 3055.457110][T27379] security_file_ioctl+0x80/0xbc [ 3055.458438][T27379] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.459738][T27379] invoke_syscall+0x98/0x2b8 [ 3055.460972][T27379] el0_svc_common+0x138/0x258 [ 3055.462232][T27379] do_el0_svc+0x58/0x14c [ 3055.463420][T27379] el0_svc+0x7c/0x1f0 [ 3055.464476][T27379] el0t_64_sync_handler+0x84/0xe4 [ 3055.465856][T27379] el0t_64_sync+0x1a0/0x1a4 00:50:55 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:55 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:55 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) [ 3055.466944][T27375] ERROR: Out of memory at tomoyo_realpath_from_path. 00:50:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) (fail_nth: 2) 00:50:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) (fail_nth: 1) 00:50:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) (fail_nth: 3) [ 3055.496145][T27379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3055.502827][T27387] FAULT_INJECTION: forcing a failure. [ 3055.502827][T27387] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.516172][T27387] CPU: 1 PID: 27387 Comm: syz-executor.4 Not tainted 5.15.140-syzkaller #0 [ 3055.518431][T27387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.521055][T27387] Call trace: [ 3055.521917][T27387] dump_backtrace+0x0/0x530 [ 3055.523087][T27387] show_stack+0x2c/0x3c [ 3055.524223][T27387] dump_stack_lvl+0x108/0x170 [ 3055.525397][T27387] dump_stack+0x1c/0x58 [ 3055.526577][T27387] should_fail+0x3b8/0x514 [ 3055.527740][T27387] __should_failslab+0xbc/0x110 [ 3055.529054][T27387] should_failslab+0x10/0x28 [ 3055.530289][T27387] slab_pre_alloc_hook+0x64/0xe8 [ 3055.531619][T27387] __kmalloc+0xc0/0x4c8 [ 3055.532737][T27387] tomoyo_realpath_from_path+0xd0/0x508 [ 3055.534191][T27387] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.534354][T27390] FAULT_INJECTION: forcing a failure. [ 3055.534354][T27390] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.535579][T27387] tomoyo_file_ioctl+0x2c/0x3c [ 3055.535596][T27387] security_file_ioctl+0x80/0xbc [ 3055.535608][T27387] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.535619][T27387] invoke_syscall+0x98/0x2b8 [ 3055.541009][T27391] FAULT_INJECTION: forcing a failure. [ 3055.541009][T27391] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.541412][T27391] [ 3055.541417][T27391] ====================================================== [ 3055.541420][T27391] WARNING: possible circular locking dependency detected [ 3055.541424][T27391] 5.15.140-syzkaller #0 Not tainted [ 3055.541430][T27391] ------------------------------------------------------ [ 3055.541434][T27391] syz-executor.0/27391 is trying to acquire lock: [ 3055.541440][T27391] ffff800014ae7920 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0xe4/0x280 [ 3055.541470][T27391] [ 3055.541470][T27391] but task is already holding lock: [ 3055.541473][T27391] ffff0000d78a1158 (&port->lock){....}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x48/0x324 [ 3055.541498][T27391] [ 3055.541498][T27391] which lock already depends on the new lock. [ 3055.541498][T27391] [ 3055.541501][T27391] [ 3055.541501][T27391] the existing dependency chain (in reverse order) is: [ 3055.541504][T27391] [ 3055.541504][T27391] -> #2 (&port->lock){....}-{2:2}: [ 3055.541517][T27391] _raw_spin_lock_irqsave+0xc4/0x14c [ 3055.541528][T27391] tty_port_tty_get+0x2c/0x124 [ 3055.541538][T27391] tty_port_default_wakeup+0x20/0x54 [ 3055.541548][T27391] tty_port_tty_wakeup+0x64/0x78 [ 3055.541557][T27391] uart_write_wakeup+0x4c/0x64 [ 3055.541567][T27391] pl011_tx_chars+0xd04/0x157c [ 3055.541575][T27391] pl011_start_tx+0x364/0x8b8 [ 3055.541585][T27391] uart_write+0x62c/0x8b8 [ 3055.541593][T27391] n_tty_write+0xae0/0xf38 [ 3055.541602][T27391] file_tty_write+0x44c/0x758 [ 3055.541610][T27391] redirected_tty_write+0xc4/0x10c [ 3055.541618][T27391] vfs_write+0x87c/0xb3c [ 3055.541628][T27391] ksys_write+0x15c/0x26c [ 3055.541655][T27391] __arm64_sys_write+0x7c/0x90 [ 3055.541665][T27391] invoke_syscall+0x98/0x2b8 [ 3055.541675][T27391] el0_svc_common+0x138/0x258 [ 3055.541684][T27391] do_el0_svc+0x58/0x14c [ 3055.541693][T27391] el0_svc+0x7c/0x1f0 [ 3055.541702][T27391] el0t_64_sync_handler+0x84/0xe4 [ 3055.541710][T27391] el0t_64_sync+0x1a0/0x1a4 [ 3055.541719][T27391] [ 3055.541719][T27391] -> #1 (&port_lock_key){-...}-{2:2}: [ 3055.541732][T27391] _raw_spin_lock+0xb0/0x10c [ 3055.541739][T27391] pl011_console_write+0x1a0/0x774 [ 3055.541748][T27391] console_unlock+0xbac/0x1394 [ 3055.541757][T27391] register_console+0x560/0x870 [ 3055.541767][T27391] uart_add_one_port+0xe70/0x1540 [ 3055.541776][T27391] pl011_register_port+0x1a0/0x434 [ 3055.541786][T27391] sbsa_uart_probe+0x474/0x5dc [ 3055.541796][T27391] platform_probe+0x148/0x1c0 [ 3055.541807][T27391] really_probe+0x26c/0xaec [ 3055.541816][T27391] __driver_probe_device+0x194/0x3b4 [ 3055.541825][T27391] driver_probe_device+0x78/0x34c [ 3055.541834][T27391] __device_attach_driver+0x28c/0x4d8 [ 3055.541844][T27391] bus_for_each_drv+0x158/0x1e0 [ 3055.541852][T27391] __device_attach+0x2f0/0x480 [ 3055.541861][T27391] device_initial_probe+0x24/0x34 [ 3055.541870][T27391] bus_probe_device+0xbc/0x1c8 [ 3055.541878][T27391] device_add+0xae0/0xef4 [ 3055.541888][T27391] platform_device_add+0x3f8/0x708 [ 3055.541898][T27391] platform_device_register_full+0x508/0x618 [ 3055.541908][T27391] acpi_create_platform_device+0x4d8/0x650 [ 3055.541920][T27391] acpi_default_enumeration+0x6c/0xdc [ 3055.541929][T27391] acpi_bus_attach+0x88c/0xab4 [ 3055.541937][T27391] acpi_bus_attach+0x314/0xab4 [ 3055.541944][T27391] acpi_bus_attach+0x314/0xab4 [ 3055.541952][T27391] acpi_bus_scan+0xe4/0x20c [ 3055.541959][T27391] acpi_scan_init+0x220/0x71c [ 3055.541970][T27391] acpi_init+0x188/0x24c [ 3055.541978][T27391] do_one_initcall+0x234/0x990 [ 3055.541986][T27391] do_initcall_level+0x154/0x214 [ 3055.541995][T27391] do_initcalls+0x58/0xac [ 3055.542003][T27391] do_basic_setup+0x8c/0xa0 [ 3055.542010][T27391] kernel_init_freeable+0x460/0x640 [ 3055.542018][T27391] kernel_init+0x24/0x294 [ 3055.542027][T27391] ret_from_fork+0x10/0x20 [ 3055.542036][T27391] [ 3055.542036][T27391] -> #0 (console_owner){-...}-{0:0}: [ 3055.542048][T27391] __lock_acquire+0x32cc/0x7620 [ 3055.542058][T27391] lock_acquire+0x240/0x77c [ 3055.542067][T27391] console_trylock_spinning+0x110/0x280 [ 3055.542077][T27391] vprintk_emit+0x124/0x21c [ 3055.542087][T27391] vprintk_default+0xa0/0xe4 [ 3055.542096][T27391] vprintk+0x200/0x2d4 [ 3055.542104][T27391] _printk+0xdc/0x128 [ 3055.542113][T27391] should_fail+0x398/0x514 [ 3055.542122][T27391] __should_failslab+0xbc/0x110 [ 3055.542132][T27391] should_failslab+0x10/0x28 [ 3055.542142][T27391] slab_pre_alloc_hook+0x64/0xe8 [ 3055.542152][T27391] __kmalloc+0xc0/0x4c8 [ 3055.542161][T27391] __tty_buffer_request_room+0x1a4/0x440 [ 3055.542171][T27391] tty_insert_flip_string_and_push_buffer+0x74/0x324 [ 3055.542182][T27391] pty_write+0xb8/0xe8 [ 3055.542192][T27391] tty_send_xchar+0x27c/0x3dc [ 3055.542199][T27391] n_tty_ioctl_helper+0x238/0x318 [ 3055.542208][T27391] n_tty_ioctl+0x19c/0x48c [ 3055.542217][T27391] tty_ioctl+0x954/0xdf4 [ 3055.542224][T27391] __arm64_sys_ioctl+0x14c/0x1c8 [ 3055.542233][T27391] invoke_syscall+0x98/0x2b8 [ 3055.542243][T27391] el0_svc_common+0x138/0x258 [ 3055.542252][T27391] do_el0_svc+0x58/0x14c [ 3055.542262][T27391] el0_svc+0x7c/0x1f0 [ 3055.542269][T27391] el0t_64_sync_handler+0x84/0xe4 [ 3055.542278][T27391] el0t_64_sync+0x1a0/0x1a4 [ 3055.542286][T27391] [ 3055.542286][T27391] other info that might help us debug this: [ 3055.542286][T27391] [ 3055.542289][T27391] Chain exists of: [ 3055.542289][T27391] console_owner --> &port_lock_key --> &port->lock [ 3055.542289][T27391] [ 3055.542303][T27391] Possible unsafe locking scenario: [ 3055.542303][T27391] [ 3055.542306][T27391] CPU0 CPU1 [ 3055.542309][T27391] ---- ---- [ 3055.542311][T27391] lock(&port->lock); [ 3055.542317][T27391] lock(&port_lock_key); [ 3055.542324][T27391] lock(&port->lock); [ 3055.542330][T27391] lock(console_owner); [ 3055.542337][T27391] [ 3055.542337][T27391] *** DEADLOCK *** [ 3055.542337][T27391] [ 3055.542339][T27391] 4 locks held by syz-executor.0/27391: [ 3055.542345][T27391] #0: ffff0000c0e09098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 3055.542370][T27391] #1: ffff0000c0e09130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: tty_send_xchar+0x164/0x3dc [ 3055.542392][T27391] #2: ffff0000c0e092e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: tty_send_xchar+0x188/0x3dc [ 3055.542417][T27391] #3: ffff0000d78a1158 (&port->lock){....}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x48/0x324 [ 3055.542442][T27391] [ 3055.542442][T27391] stack backtrace: [ 3055.542591][T27387] el0_svc_common+0x138/0x258 [ 3055.542609][T27387] do_el0_svc+0x58/0x14c [ 3055.542619][T27387] el0_svc+0x7c/0x1f0 [ 3055.542628][T27387] el0t_64_sync_handler+0x84/0xe4 [ 3055.542650][T27387] el0t_64_sync+0x1a0/0x1a4 [ 3055.542661][T27391] CPU: 0 PID: 27391 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 3055.542674][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.542680][T27391] Call trace: [ 3055.542683][T27391] dump_backtrace+0x0/0x530 [ 3055.542694][T27391] show_stack+0x2c/0x3c [ 3055.542704][T27391] dump_stack_lvl+0x108/0x170 [ 3055.542711][T27391] dump_stack+0x1c/0x58 [ 3055.542719][T27391] print_circular_bug+0x150/0x1b8 [ 3055.542729][T27391] check_noncircular+0x2cc/0x378 [ 3055.542739][T27391] __lock_acquire+0x32cc/0x7620 [ 3055.542749][T27391] lock_acquire+0x240/0x77c [ 3055.542758][T27391] console_trylock_spinning+0x110/0x280 [ 3055.542768][T27391] vprintk_emit+0x124/0x21c 00:50:55 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) 00:50:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) (fail_nth: 2) [ 3055.542778][T27391] vprintk_default+0xa0/0xe4 [ 3055.542787][T27391] vprintk+0x200/0x2d4 [ 3055.542794][T27391] _printk+0xdc/0x128 [ 3055.542803][T27391] should_fail+0x398/0x514 [ 3055.542811][T27391] __should_failslab+0xbc/0x110 [ 3055.542821][T27391] should_failslab+0x10/0x28 [ 3055.542831][T27391] slab_pre_alloc_hook+0x64/0xe8 [ 3055.542840][T27391] __kmalloc+0xc0/0x4c8 [ 3055.542850][T27391] __tty_buffer_request_room+0x1a4/0x440 [ 3055.542860][T27391] tty_insert_flip_string_and_push_buffer+0x74/0x324 [ 3055.542871][T27391] pty_write+0xb8/0xe8 [ 3055.542880][T27391] tty_send_xchar+0x27c/0x3dc [ 3055.542888][T27391] n_tty_ioctl_helper+0x238/0x318 [ 3055.542897][T27391] n_tty_ioctl+0x19c/0x48c [ 3055.542906][T27391] tty_ioctl+0x954/0xdf4 [ 3055.542913][T27391] __arm64_sys_ioctl+0x14c/0x1c8 [ 3055.542922][T27391] invoke_syscall+0x98/0x2b8 [ 3055.542932][T27391] el0_svc_common+0x138/0x258 [ 3055.542941][T27391] do_el0_svc+0x58/0x14c [ 3055.542950][T27391] el0_svc+0x7c/0x1f0 [ 3055.542958][T27391] el0t_64_sync_handler+0x84/0xe4 [ 3055.542967][T27391] el0t_64_sync+0x1a0/0x1a4 [ 3055.575476][T27387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3055.576503][T27391] CPU: 0 PID: 27391 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 3055.576521][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.576528][T27391] Call trace: [ 3055.576531][T27391] dump_backtrace+0x0/0x530 [ 3055.776159][T27391] show_stack+0x2c/0x3c [ 3055.776182][T27391] dump_stack_lvl+0x108/0x170 00:50:55 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) [ 3055.778514][T27391] dump_stack+0x1c/0x58 [ 3055.778528][T27391] should_fail+0x3b8/0x514 [ 3055.778539][T27391] __should_failslab+0xbc/0x110 [ 3055.778550][T27391] should_failslab+0x10/0x28 [ 3055.778562][T27391] slab_pre_alloc_hook+0x64/0xe8 [ 3055.778573][T27391] __kmalloc+0xc0/0x4c8 [ 3055.778582][T27391] __tty_buffer_request_room+0x1a4/0x440 [ 3055.778594][T27391] tty_insert_flip_string_and_push_buffer+0x74/0x324 [ 3055.778606][T27391] pty_write+0xb8/0xe8 [ 3055.778616][T27391] tty_send_xchar+0x27c/0x3dc [ 3055.778626][T27391] n_tty_ioctl_helper+0x238/0x318 [ 3055.778651][T27391] n_tty_ioctl+0x19c/0x48c [ 3055.778660][T27391] tty_ioctl+0x954/0xdf4 [ 3055.778668][T27391] __arm64_sys_ioctl+0x14c/0x1c8 [ 3055.778678][T27391] invoke_syscall+0x98/0x2b8 [ 3055.778689][T27391] el0_svc_common+0x138/0x258 [ 3055.778699][T27391] do_el0_svc+0x58/0x14c [ 3055.778708][T27391] el0_svc+0x7c/0x1f0 [ 3055.778717][T27391] el0t_64_sync_handler+0x84/0xe4 [ 3055.778726][T27391] el0t_64_sync+0x1a0/0x1a4 [ 3055.794008][T27395] FAULT_INJECTION: forcing a failure. [ 3055.794008][T27395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3055.795359][T27390] CPU: 1 PID: 27390 Comm: syz-executor.1 Not tainted 5.15.140-syzkaller #0 [ 3055.821629][T27390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.824343][T27390] Call trace: [ 3055.825197][T27390] dump_backtrace+0x0/0x530 [ 3055.826448][T27390] show_stack+0x2c/0x3c [ 3055.827507][T27390] dump_stack_lvl+0x108/0x170 [ 3055.828698][T27390] dump_stack+0x1c/0x58 [ 3055.829804][T27390] should_fail+0x3b8/0x514 [ 3055.830971][T27390] __should_failslab+0xbc/0x110 [ 3055.832227][T27390] should_failslab+0x10/0x28 [ 3055.833373][T27390] slab_pre_alloc_hook+0x64/0xe8 [ 3055.834649][T27390] __kmalloc+0xc0/0x4c8 [ 3055.835726][T27390] tomoyo_encode+0x270/0x4b0 [ 3055.836945][T27390] tomoyo_realpath_from_path+0x4b4/0x508 [ 3055.838453][T27390] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.839912][T27390] tomoyo_file_ioctl+0x2c/0x3c [ 3055.841176][T27390] security_file_ioctl+0x80/0xbc [ 3055.842460][T27390] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.843714][T27390] invoke_syscall+0x98/0x2b8 [ 3055.844902][T27390] el0_svc_common+0x138/0x258 [ 3055.846095][T27390] do_el0_svc+0x58/0x14c [ 3055.847244][T27390] el0_svc+0x7c/0x1f0 [ 3055.848248][T27390] el0t_64_sync_handler+0x84/0xe4 [ 3055.849558][T27390] el0t_64_sync+0x1a0/0x1a4 [ 3055.850741][T27395] CPU: 0 PID: 27395 Comm: syz-executor.5 Not tainted 5.15.140-syzkaller #0 [ 3055.852967][T27395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 00:50:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) (fail_nth: 2) [ 3055.855533][T27395] Call trace: [ 3055.856460][T27395] dump_backtrace+0x0/0x530 [ 3055.857617][T27395] show_stack+0x2c/0x3c [ 3055.858744][T27395] dump_stack_lvl+0x108/0x170 [ 3055.859999][T27395] dump_stack+0x1c/0x58 [ 3055.861102][T27395] should_fail+0x3b8/0x514 [ 3055.862259][T27395] should_fail_usercopy+0x20/0x30 [ 3055.863552][T27395] kstrtouint_from_user+0xd8/0x384 [ 3055.864867][T27395] proc_fail_nth_write+0xa8/0x288 [ 3055.866227][T27395] vfs_write+0x280/0xb3c [ 3055.867383][T27395] ksys_write+0x15c/0x26c [ 3055.868526][T27395] __arm64_sys_write+0x7c/0x90 [ 3055.869834][T27395] invoke_syscall+0x98/0x2b8 [ 3055.870762][T27402] FAULT_INJECTION: forcing a failure. [ 3055.870762][T27402] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.871112][T27395] el0_svc_common+0x138/0x258 [ 3055.875601][T27395] do_el0_svc+0x58/0x14c [ 3055.876877][T27395] el0_svc+0x7c/0x1f0 [ 3055.878008][T27395] el0t_64_sync_handler+0x84/0xe4 [ 3055.879344][T27395] el0t_64_sync+0x1a0/0x1a4 [ 3055.880541][T27402] CPU: 1 PID: 27402 Comm: syz-executor.4 Not tainted 5.15.140-syzkaller #0 [ 3055.882845][T27402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.885519][T27402] Call trace: [ 3055.886345][T27402] dump_backtrace+0x0/0x530 [ 3055.887504][T27402] show_stack+0x2c/0x3c [ 3055.888153][T27390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3055.888586][T27402] dump_stack_lvl+0x108/0x170 [ 3055.888601][T27402] dump_stack+0x1c/0x58 [ 3055.888610][T27402] should_fail+0x3b8/0x514 [ 3055.893839][T27402] __should_failslab+0xbc/0x110 [ 3055.895151][T27402] should_failslab+0x10/0x28 [ 3055.896337][T27402] slab_pre_alloc_hook+0x64/0xe8 [ 3055.897657][T27402] __kmalloc+0xc0/0x4c8 [ 3055.898697][T27402] tomoyo_encode+0x270/0x4b0 [ 3055.899893][T27402] tomoyo_realpath_from_path+0x4b4/0x508 [ 3055.901405][T27402] tomoyo_path_number_perm+0x1f8/0x6b0 [ 3055.902797][T27402] tomoyo_file_ioctl+0x2c/0x3c [ 3055.904044][T27402] security_file_ioctl+0x80/0xbc [ 3055.905327][T27402] __arm64_sys_ioctl+0xa8/0x1c8 [ 3055.906630][T27402] invoke_syscall+0x98/0x2b8 [ 3055.907911][T27402] el0_svc_common+0x138/0x258 [ 3055.909172][T27402] do_el0_svc+0x58/0x14c [ 3055.910271][T27402] el0_svc+0x7c/0x1f0 [ 3055.911321][T27402] el0t_64_sync_handler+0x84/0xe4 [ 3055.912707][T27402] el0t_64_sync+0x1a0/0x1a4 00:50:55 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) (fail_nth: 4) 00:50:55 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) (fail_nth: 3) 00:50:55 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) 00:50:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:55 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) [ 3055.943012][T27402] ERROR: Out of memory at tomoyo_realpath_from_path. 00:50:55 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x2) [ 3055.960821][T27406] FAULT_INJECTION: forcing a failure. [ 3055.960821][T27406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3055.970408][T27406] CPU: 1 PID: 27406 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 3055.972654][T27406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.975316][T27406] Call trace: [ 3055.975474][T27409] FAULT_INJECTION: forcing a failure. [ 3055.975474][T27409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3055.976172][T27406] dump_backtrace+0x0/0x530 [ 3055.976193][T27406] show_stack+0x2c/0x3c [ 3055.976204][T27406] dump_stack_lvl+0x108/0x170 [ 3055.983139][T27406] dump_stack+0x1c/0x58 [ 3055.984262][T27406] should_fail+0x3b8/0x514 [ 3055.985436][T27406] should_fail_usercopy+0x20/0x30 [ 3055.986760][T27406] simple_read_from_buffer+0xd8/0x26c [ 3055.988195][T27406] proc_fail_nth_read+0x1a0/0x248 00:50:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) (fail_nth: 3) [ 3055.988213][T27406] vfs_read+0x278/0xb10 [ 3055.988224][T27406] ksys_read+0x15c/0x26c [ 3055.988234][T27406] __arm64_sys_read+0x7c/0x90 [ 3055.988244][T27406] invoke_syscall+0x98/0x2b8 [ 3055.988255][T27406] el0_svc_common+0x138/0x258 [ 3055.988265][T27406] do_el0_svc+0x58/0x14c [ 3055.988275][T27406] el0_svc+0x7c/0x1f0 [ 3055.988284][T27406] el0t_64_sync_handler+0x84/0xe4 [ 3055.988293][T27406] el0t_64_sync+0x1a0/0x1a4 [ 3055.996486][T27409] CPU: 1 PID: 27409 Comm: syz-executor.1 Not tainted 5.15.140-syzkaller #0 00:50:55 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x2) [ 3055.996505][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3055.996513][T27409] Call trace: [ 3055.996516][T27409] dump_backtrace+0x0/0x530 [ 3055.996530][T27409] show_stack+0x2c/0x3c [ 3055.996541][T27409] dump_stack_lvl+0x108/0x170 [ 3055.996550][T27409] dump_stack+0x1c/0x58 [ 3055.996558][T27409] should_fail+0x3b8/0x514 [ 3055.996568][T27409] should_fail_usercopy+0x20/0x30 [ 3055.996578][T27409] simple_read_from_buffer+0xd8/0x26c [ 3055.996589][T27409] proc_fail_nth_read+0x1a0/0x248 [ 3055.996599][T27409] vfs_read+0x278/0xb10 [ 3055.996609][T27409] ksys_read+0x15c/0x26c [ 3055.996619][T27409] __arm64_sys_read+0x7c/0x90 [ 3055.996629][T27409] invoke_syscall+0x98/0x2b8 [ 3055.996657][T27409] el0_svc_common+0x138/0x258 [ 3055.996667][T27409] do_el0_svc+0x58/0x14c [ 3055.996677][T27409] el0_svc+0x7c/0x1f0 [ 3055.996686][T27409] el0t_64_sync_handler+0x84/0xe4 [ 3055.996695][T27409] el0t_64_sync+0x1a0/0x1a4 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x3) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000000) [ 3056.061241][T27417] FAULT_INJECTION: forcing a failure. [ 3056.061241][T27417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3056.064796][T27417] CPU: 0 PID: 27417 Comm: syz-executor.4 Not tainted 5.15.140-syzkaller #0 [ 3056.067090][T27417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3056.069723][T27417] Call trace: [ 3056.070553][T27417] dump_backtrace+0x0/0x530 [ 3056.071749][T27417] show_stack+0x2c/0x3c [ 3056.072848][T27417] dump_stack_lvl+0x108/0x170 [ 3056.074067][T27417] dump_stack+0x1c/0x58 [ 3056.075192][T27417] should_fail+0x3b8/0x514 [ 3056.076406][T27417] should_fail_usercopy+0x20/0x30 [ 3056.077739][T27417] simple_read_from_buffer+0xd8/0x26c [ 3056.079142][T27417] proc_fail_nth_read+0x1a0/0x248 [ 3056.080481][T27417] vfs_read+0x278/0xb10 [ 3056.081641][T27417] ksys_read+0x15c/0x26c [ 3056.082769][T27417] __arm64_sys_read+0x7c/0x90 [ 3056.083987][T27417] invoke_syscall+0x98/0x2b8 [ 3056.085161][T27417] el0_svc_common+0x138/0x258 [ 3056.086449][T27417] do_el0_svc+0x58/0x14c [ 3056.087534][T27417] el0_svc+0x7c/0x1f0 [ 3056.088605][T27417] el0t_64_sync_handler+0x84/0xe4 [ 3056.090004][T27417] el0t_64_sync+0x1a0/0x1a4 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x3) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x1000000) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x100000000000000) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4, 0x1000000000000) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x10, 0x3) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x7, 0x1000000000000) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x2, 0x0) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x8, 0x1000000000000) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5402, 0x3) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x10, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x10, 0x1000000000000) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x6, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000400)=[{}], 0x1, 0x0, &(0x7f0000000440)=[{}]}) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5408, 0x3) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b2f, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541b, 0x1000000000000) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5409, 0x3) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008003c00cf0600000a000900aaaaaaaaaabb000005002a000000000005002d000100820005002a000000000008003c000010000005002a000100000008000b000900000008000b00070000000632a2152a7d4d899e0b92f70742731ab6ab53215b61a12ff71df534e0c4fad3f368099005269d720d34bd581728d97a08ce4915"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0xffffffffffffff46}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x4) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b30, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x540b, 0x2) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x3) [ 3056.414049][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5421, 0x1000000000000) 00:50:56 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540b, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540c, 0x3) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b31, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008003c00cf0600000a000900aaaaaaaaaabb000005002a000000000005002d000100820005002a000000000008003c000010000005002a000100000008000b000900000008000b00070000000632a2152a7d4d899e0b92f70742731ab6ab53215b61a12ff71df534e0c4fad3f368099005269d720d34bd581728d97a08ce4915"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0xffffffffffffff46}]}, 0x2c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x4) [ 3056.484873][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5450, 0x1000000000000) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b32, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b31, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540d, 0x3) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008003c00cf0600000a000900aaaaaaaaaabb000005002a000000000005002d000100820005002a000000000008003c000010000005002a000100000008000b000900000008000b00070000000632a2152a7d4d899e0b92f70742731ab6ab53215b61a12ff71df534e0c4fad3f368099005269d720d34bd581728d97a08ce4915"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250c00000008003c00cf0600000a000900aaaaaaaaaabb000005002a000000000005002d000100820005002a000000000008003c000010000005002a000100000008000b000900000008000b00070000000632a2152a7d4d899e0b92f70742731ab6ab53215b61a12ff71df534e0c4fad3f368099005269d720d34bd581728d97a08ce4915"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0xffffffffffffff46}]}, 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}}, 0x4) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b33, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5451, 0x1000000000000) 00:50:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b31, 0x0) [ 3056.564928][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540e, 0x3) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b3a, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040)=0x8000, 0x4) 00:50:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b31, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540f, 0x3) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b3b, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040)=0x8000, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x5) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040)=0x8000, 0x4) (async) 00:50:56 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5460, 0x1000000000000) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b3c, 0x0) 00:50:56 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5410, 0x3) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040)=0x8000, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000)) (async) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000100)=0x5) (async) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000040)=0x8000, 0x4) (async) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b3d, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x8933, 0x1000000000000) 00:50:56 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5411, 0x3) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b40, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400448c9, 0x1000000000000) 00:50:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b31, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b41, 0x0) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400448dd, 0x1000000000000) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:56 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5412, 0x3) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b44, 0x0) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400454ca, 0x1000000000000) 00:50:56 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x0) 00:50:56 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5413, 0x3) 00:50:56 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40049409, 0x1000000000000) 00:50:56 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b31, 0x0) 00:50:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) socket(0xf, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:50:56 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5414, 0x3) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x1000000000000) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b46, 0x0) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x0) 00:50:57 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:57 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) socket(0xf, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b47, 0x0) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5415, 0x3) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40186366, 0x1000000000000) 00:50:57 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b48, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5416, 0x3) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) socket(0xf, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x0) (async) socket(0xf, 0x3, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r5}, 0x48) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b49, 0x0) 00:50:57 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x1000000000000) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x401c5820, 0x1000000000000) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5417, 0x3) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b4a, 0x0) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b4b, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4020940d, 0x1000000000000) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5418, 0x3) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80086301, 0x1000000000000) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b4c, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541b, 0x3) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0x7, 0x20}) ioctl$KDDELIO(r0, 0x5409, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x5452, 0x1000000000000) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b45, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b4d, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80086601, 0x1000000000000) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541d, 0x3) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x0) 00:50:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0x7, 0x20}) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x801c581f, 0x1000000000000) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b4e, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541e, 0x3) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x0) 00:50:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0x7, 0x20}) (async) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x0, 0x7, 0x20}) ioctl$KDDELIO(r0, 0x5409, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b52, 0x0) 00:50:57 executing program 5: exit_group(0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b62, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x541e, 0x3) 00:50:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b45, 0x0) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5421, 0x3) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b63, 0x0) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b62, 0x0) 00:50:57 executing program 5: exit_group(0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b64, 0x0) 00:50:57 executing program 5: exit_group(0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0189436, 0x1000000000000) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b62, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5422, 0x3) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 5: r0 = socket(0x1a, 0xa, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, r1}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r2, 0x5409, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b65, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5423, 0x3) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc020660b, 0x1000000000000) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b62, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b66, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000002) 00:50:57 executing program 5: r0 = socket(0x1a, 0xa, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, r1}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r2, 0x5409, 0x0) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5424, 0x3) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b67, 0x0) 00:50:57 executing program 5: r0 = socket(0x1a, 0xa, 0x6) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, r1}, 0xc) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r2, 0x5409, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000003) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b68, 0x0) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5425, 0x3) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000004) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:57 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b69, 0x0) 00:50:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b62, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000005) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5427, 0x3) 00:50:57 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b6a, 0x0) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000006) 00:50:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b70, 0x0) 00:50:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:57 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:57 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000007) 00:50:57 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5428, 0x3) 00:50:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b71, 0x0) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b72, 0x0) 00:50:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b62, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5429, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000008) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x1000000000000) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4bfa, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000009) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b72, 0x0) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5437, 0x3) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4bfb, 0x0) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b72, 0x0) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_io_uring_setup(0x747, &(0x7f0000000280)={0x0, 0x6cca, 0x0, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x319, 0x80, 0x2, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000140)=""/205) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r3, 0x6, {0x0, r4}, 0xfffffffc, 0xc, 0x1, {0x0, 0x0, r0}}) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000000a) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5441, 0x3) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_io_uring_setup(0x747, &(0x7f0000000280)={0x0, 0x6cca, 0x0, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x319, 0x80, 0x2, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000140)=""/205) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r3, 0x6, {0x0, r4}, 0xfffffffc, 0xc, 0x1, {0x0, 0x0, r0}}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) syz_io_uring_setup(0x747, &(0x7f0000000280)={0x0, 0x6cca, 0x0, 0x0, 0x352}, &(0x7f0000000300), &(0x7f0000000340)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) (async) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x319, 0x80, 0x2, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000140)=""/205) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r3, 0x6, {0x0, r4}, 0xfffffffc, 0xc, 0x1, {0x0, 0x0, r0}}) (async) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b72, 0x0) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0xc0045878, 0x1000000000000) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000000b) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5450, 0x3) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5451, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000000c) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) syz_io_uring_setup(0x747, &(0x7f0000000280)={0x0, 0x6cca, 0x0, 0x0, 0x352}, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000500)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c}) syz_io_uring_setup(0x55ae, &(0x7f0000000000)={0x0, 0x319, 0x80, 0x2, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, 0x0) (async) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000140)=""/205) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r3, 0x6, {0x0, r4}, 0xfffffffc, 0xc, 0x1, {0x0, 0x0, r0}}) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540c, 0x0) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b72, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5452, 0x3) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c010000310000022dbd7000ffdbdf25000000005c00010010000f000b00010073616d706c6500000c001c0008000300070000000c001200080003000900000014001f000f00010074756e6e656c5f6b65790000100002000b000100706f6c69636500000c0007000800010069707400300001000c00180008000300030000001000170009000100766c616e00000000100010000c000100736b62656469740004000100500001000c00180008000300000200000c00120008000300030000000c000d0008000300000008000c000e0008000300060000000c001a000800030001010000100015000b00010073616d707fc9ad3540481422cc04d9feb1bc3e7b274f6c650000380001000c001a0008000100627066000c001e00080003000400000010000c000b00010073616d706c6500000c0005000800030000000000200001000c000a000800030007000000100001000a000100706564697400"], 0x15c}, 0x1, 0x0, 0x0, 0x94}, 0x800) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) syz_open_pts(r1, 0x40) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000000d) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540d, 0x0) 00:50:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x545d, 0x3) 00:50:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000000e) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x94}, 0x800) (rerun: 64) ioctl$KDDELIO(r0, 0x5409, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_open_pts(r1, 0x40) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5411, 0x0) 00:50:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x5460, 0x3) 00:50:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000010) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5412, 0x0) 00:50:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b72, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x8933, 0x3) 00:50:58 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000011) 00:50:58 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000010) 00:50:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c010000310000022dbd7000ffdbdf25000000005c00010010000f000b00010073616d706c6500000c001c0008000300070000000c001200080003000900000014001f000f00010074756e6e656c5f6b65790000100002000b000100706f6c69636500000c0007000800010069707400300001000c00180008000300030000001000170009000100766c616e00000000100010000c000100736b62656469740004000100500001000c00180008000300000200000c00120008000300030000000c000d0008000300000008000c000e0008000300060000000c001a000800030001010000100015000b00010073616d707fc9ad3540481422cc04d9feb1bc3e7b274f6c650000380001000c001a0008000100627066000c001e00080003000400000010000c000b00010073616d706c6500000c0005000800030000000000200001000c000a000800030007000000100001000a000100706564697400"], 0x15c}, 0x1, 0x0, 0x0, 0x94}, 0x800) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) syz_open_pts(r1, 0x40) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5413, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400448c9, 0x3) 00:50:58 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000012) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5414, 0x0) 00:50:58 executing program 3: ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5413, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400448dd, 0x3) 00:50:58 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000018) 00:50:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x540a, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5415, 0x0) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5413, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x400454ca, 0x3) 00:50:58 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5416, 0x0) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000025) 00:50:58 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5413, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40049409, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000005c) 00:50:58 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:58 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5417, 0x0) 00:50:58 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x540a, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000300) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5418, 0x0) 00:50:58 executing program 5: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0xc9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x100000000005c) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000500) 00:50:58 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x541b, 0x0) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40186366, 0x3) 00:50:58 executing program 5: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0xc9) (async, rerun: 64) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async, rerun: 64) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (rerun: 64) 00:50:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5413, 0x0) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000600) 00:50:58 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x401c5820, 0x3) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x541c, 0x0) 00:50:58 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:58 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:58 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000700) 00:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x541d, 0x0) 00:50:59 executing program 5: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0xc9) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000040)=0xc9) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) (async) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x4020940d, 0x3) 00:50:59 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x541e, 0x0) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000900) 00:50:59 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x5413, 0x0) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x541e, 0x0) 00:50:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r0, 0x4b35, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1e) ioctl$KDDELIO(r1, 0x5409, 0x26) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000a00) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045440, 0x3) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5421, 0x0) 00:50:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 64) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 64) ioctl$KDDELIO(r0, 0x4b35, 0x2) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1e) (async) ioctl$KDDELIO(r1, 0x5409, 0x26) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000b00) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80086301, 0x3) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5423, 0x0) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80086601, 0x3) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5424, 0x0) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5425, 0x0) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000c00) 00:50:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r0, 0x4b35, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1e) ioctl$KDDELIO(r1, 0x5409, 0x26) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDDELIO(r0, 0x4b35, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1e) (async) ioctl$KDDELIO(r1, 0x5409, 0x26) (async) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x801c581f, 0x3) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5427, 0x0) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000d00) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000000e00) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5428, 0x0) 00:50:59 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x3) 00:50:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000075af9c0d0f00000008003900000000000800340000000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x5409, 0x0) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5437, 0x0) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000001100) 00:50:59 executing program 3: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0045878, 0x3) 00:50:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000075af9c0d0f00000008003900000000000800340000000000"], 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x5409, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000075af9c0d0f00000008003900000000000800340000000000"], 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r4, 0x5409, 0x0) (async) 00:50:59 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc0189436, 0x3) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000001200) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5441, 0x0) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5450, 0x0) 00:50:59 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000075af9c0d0f00000008003900000000000800340000000000"], 0x24}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9f}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r4, 0x5409, 0x0) 00:50:59 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0xc020660b, 0x3) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000001800) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 2: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x2) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000002500) 00:50:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x202801) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x6) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5451, 0x0) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x40086602, 0x3) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x4) 00:50:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x202801) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x6) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x202801) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x6) (async) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000000005c00) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5452, 0x0) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x40086602, 0x0) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x7) 00:50:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x202801) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000000)=0x6) ioctl$KDDELIO(r0, 0x5409, 0x0) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x4) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x80045432, 0x3) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000001000000) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x545d, 0x0) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x18) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x4) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000002000000) 00:50:59 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x4b35, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x68) ioctl$KDDELIO(r0, 0x4b35, 0x0) 00:50:59 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x80045432, 0x0) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5460, 0x0) 00:50:59 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0xff7) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000003000000) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x540a, 0x4) 00:50:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x545d, 0x0) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000004000000) 00:50:59 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) (async) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x4b35, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x68) (async) ioctl$KDDELIO(r0, 0x5409, 0x68) ioctl$KDDELIO(r0, 0x4b35, 0x0) 00:50:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x3) syz_clone(0x200000, &(0x7f0000000000)="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", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="79e0d4be817514465bac06b03a0f27a9f82efe0d296fdecbab10c3727c7af559a877792d9d061c") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000010c0)={0x1000, 0x7fff, {}, {0xee00}, 0x3ff, 0x1f}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) ioctl$KDDELIO(r2, 0x4b35, 0x5) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5600, 0x0) 00:50:59 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 00:50:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x545d, 0x0) 00:50:59 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000005000000) 00:50:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5601, 0x0) 00:50:59 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x4b35, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0xffffffffffffffff) (async) ioctl$KDDELIO(r0, 0x4b35, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x5409, 0x68) ioctl$KDDELIO(r0, 0x4b35, 0x0) (async) ioctl$KDDELIO(r0, 0x4b35, 0x0) 00:51:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) (rerun: 32) ioctl$KDDELIO(r1, 0x540a, 0x3) (async) syz_clone(0x200000, &(0x7f0000000000)="cea429e7bc816da39dae822ba07440453c507f170c95ae0c2fcfcbd3b2689a3af2a04c3aee1b9755d4b4466848f9a86e5f945d86ccf29f166da1a090a15323465903273ac1e069966af2f90b89ef039cc36a91212b202fec6dceae5a17f7f20f96d1acbdc459ff789a69965ed7fe25a90fa4f30b532648671cbae9fd7570abf9e7257bbd692efdec6b07bfa16d61ef0bc7ef41256a7c4d1d9f1cf76b2f0722df5628ab9dbc38763c507f2937fa0dadfcf0611518096f1fd40056476f74d7b32c1f503b7c6067541836082c59fc58fa32d606370450fe8d7aa444001ab175be7e1a46cb657755c055c81250795e927a677757ab12b0f1ace9edf9f2beaea2fb4b022627fac7fafe12e3120bf8e88b6a8d72b900daec438ca34b4c7cec5200cb47c1f7972bd55ced3a62f349c299bf2f4b5652dea921b9b706f8e584d458c7fff89c0f5f44c4874c3bf3542de59c67c5a8317d9f8136582a580a26eeb8e41bf4943461cb0c62535fba1ca04fd91ccf3603a42d854e10ee301f91c1b235b231b3ad8a3522d4f0ae6d21fad09c9585398731966fcf21a06310c5c18a049056db449bb5dcd4c30fb97dc67b30ab6dd8f6b8e5e790f86b120ba8dbdd062124e597ba27a47c9bfa48dd7de0ac55560f6473f21d4622afd4c0dd0e5594b4740a0972e13ba3b8e8320ef5e8ef38ac8c6ec16c261340ee8370593bb4f63a1d845c52630c25b82becbe69b2fa4c9619abef3558bda8543b3e9d2c89261025db18c080ab1338aaa6c4398aaba8e81ed36ddb6e38487b838e9efdb4123b637c4b705780876608291a8a48fb8ecca213b57e9ccfce043e56a50dc6a8cf556a15406a8670523f934c5a655c03a4fbc7078c528f2d246031e4b478d8a2115f8e89e7730242b60929a3f1687469a84304d4d829fb2f5ba01341e7bbefc790c5dac29a613ee9a980e134bdaa910109f97ab8bb958e7f5978080647fd00e33fa6ea942a8ac365ca054fb6944dbcc4118343457464f8230b40c9cc9887ee2191449a9a9652cc80106dda42c1df1903bdc97a5c5355e16cf97da82ae4de53ae5c12880c3018bb75e34b7d3ceb8c40a8d077047563547e6a005ffd87cd43f52e8886fba2dd8920c6e985dcf88fb79e0581a15d18513515197bdde93ee1ab153717254c2c1eed1f502cb762c14ff4165275670376cdc5cee9fbefde5fd42d3b3aa778ba9b05732c3fcb1a06657e9fd5c1a6e2397c21395311dbe0b24d4d34519f904747138379a490f86c22287cdf4e34904cc281d3aa0dc17102607c829a892d21af3ce958ac82c22e543c22a02c807613cbb82ef07ffda5af52b15fd43fe1e92b6203a1a7747aa974eeac6ad1545f5343f9c38be403a7929cceaa7d3be25daaf4311404f8a9172ad7b9caffee6d779d8eb33f6b372cd8060841034a12e2807c13838b0461e3acbdb0953384ffa8ee0c2c228eb9b89df0b12ec9330d34579e4b50ac540b96873a162527047922c78cd3ab683350f9eded94b906cbffa864777c13d635118d5c3f87fab681a22714b90a20075ef9b88daf8b7740f85145bf4e51076ba221fa2a1831f620a7094c9297ed35f40ed447f4a985fc736f41a31bcc5ee7b7071495e1b9ff24138a591186bffc4878661a815fe8ddd974f0b0c779946070f3c80ef22a2b9528792b7b07ca9617fac3c2f268f57c51c66daae13067d44fcc7de1f99976f050e5429f0bc4304285e5f36990f336a19e0aa5d260e3aaf671b3d183abffe6465e9cc6729be5af4c05eef905ed2df3d872caeafab2badd3407626976d9cc75158286ea76c1f4a3e489768e3b469aef630635b99b7b81ff8c2db217b6b8447b03bab77e80c75bf11cafce93f2c8708fab4656eff39c0010e91d184503c9a3c56efe0193498ddfc26735458d3289676fc83805a2e166817ac3151da8138e11740293d7f57de3dd85671ec90be1057579941891f3a7754c42c020743097ec5d67ba930bd96bfff842204d0044d05949aafb35dd0e526c0427bed62294a48508a1af15953b3540a5ddcb0ac8746995d4c014278506d9ffa842053e90b45ec7669534476ccdd2288106287b3205fa0232ed87cc30988fec3f16d0d2cc2c06ec0a98c69a0b2cce4e4031de86bd755357550ca8b760fd42f4366fdd6db52ae35e9aafb507c6070c9ade3a5447d31a986659c91bc4d437494a00d58c10ec7a30e2bb1498d7f4e1236dcfe153cf2776a29abceb0e9f8962fbbba9b99b10e1e398ea7287ba82ff21eee20978ae77d157b03af57ccc773f05dd5b6f5f3f7bb8d192936c142c79cd3927e00f6f86ef38ac62cc2b0226315c0a03b13a7bd1b8cb1e17788daf8fba40956dca3dd8156c88a78191da4bfc749ad7d8136470be342335565db58832f5eb5fb17981be32dede808e5d12b82c27568d8d7bfff32fd2756a9564c0ecf20a472c0f259240303a329e88a6bc101a30badb0e76434d65103239198fe4ecedace0bbf1a173fe13184a3347884bf2769f0efcdd95c8d5914f7a8683458180a2d0318c784abfcc87d730771d4b5316017c7571e93c02b38a20c5b41432dc4919000774430e7b435b7203550a24185cb3a27cc7420617c55206a1aa21a181024aaa65fbfee16bf6bf8a0ae6d1c6de4bfa846cf9d3a9c03d8010e147317db00bfe5261b6c6d2ff54e9b50af4182c82d01a613268b4a9e09b9c3907ee64a6472ebddeb0dcd25ea2562b9f4cbde7870838f6e5a933326edb26f62eb28c7124574949fd07e364b7d6cba504c255bfbdcc7ec13798cdc532f344d45087f20ea0d2154b041cd3706b016712f9de57700add550583feefa25c675360a46bca8be60d77a3260a26db07b8649a65540392633adf22cabb3328f6c931d535adefb95029fb080bdb443c827394df59c3e31c580596a727d60b8c218cc50a178b8f3e83e1885e6d4a47996a432a2fbc26bfb7471f64154a98966083244b15289e0a4215bcdff6becf4a168338f64c107cf40176ae29baaba8a8f03450496374b5ed456b759452c18c7994b2e41485532b79ae8a46cccfd38aab00c7a88c64d52f3ad7d3401ba70f4356d5848a346ac4afa989209255ce4641ac987c173e670d83e4a85a0fc2bbf50698163be7899ec88663c766a023c08902e53fd41715475ed554e92cd1f9f78e70bfaed4a17a340cfce9be3aa2f947a70f1f85abe7d21fde18f6d0fdba6c0f45186cbadf357dbfe94cec5b65320aeb3dfde23a3f777698be9bab6048ec6cd50d296caca9b4fb0fb3b63b4dcb0856235e9869bf3b76a36755c35948dc44f8a0ef54e6301e61bdff3db61436fb93fbb8194858bdddb8a83b62f6404f9b340c11f5058a38d3823764605be6928d07327e04baace0de58c945c696003983f750f9ec3720f2af01d72094ebd23999817710c73275b696666e354b083fab8bd35fccd647ceba7b0a03fe682a3a5ff02ff3be24d6855dec4add3a0b6fd04b0a23dc0033413f8d0472d6c971f454aa86a50a4727eeda41d6796799800fb7e077719f76223fc9b73e2800ca5153ee816bfcec5a2af625688e6f3eb43bfb608f06685fd8f784e17e270113726c9c007ed836b052b9794ada95062cac7275bd10b2ae7b07f321629a100b1d7b5a145a682dc7ada36edbef9ea0ee884c96a6c4db1fe1535a403109d4c1a2889c46ac346325314a7b9fdff6439871c2626a0741fa43723722c23f24607541530d906589a3897b56d7cc282d800104586d114f1436bc89103e5a48f72e5372372309aab2583f199f78d0f7c3427f740cefac242a551a21dfe45a0fcce0f9c1952b5b0bbf86cbf0e9a9656da851dec7202b9d736c4f1bcf25b28d6fed0895e296edb6007147f934de88a8dc3274de4dd64a7e5f39bf201af8cbd3a0838c25ebffbbc5f9be412643417300cd409060cb8dd5fa8c2ac1c187a4fb9d80cca9f3c2da0263e58481215b36a519a31c5d96666920f550445a8e9af1a559518f86c11ea5f432d53c24b1d66e0509d86036b225537c50affd863a26bf3c142e89c33f1b2294488064ff7d1929fb695fb6b4bb93c266b53c7c311e92408f940b99d6781631abae5763a62c4d5e7420a57a64d8ecda11a93bc6d290f550640138d5d734fd140c234d9ce03e12ad6ed7c30832a4f7da8ce762f28e9c37ba8eccb628e2a43d744aa5c15a25e916d9f92db3cdaa98a1fdf7229b5a5bbad801dfaff0a67cd4162b80868306fa574e4e2a6d394fcb615f285d83b73af43e4a2dcabfc9cfe176b66e6b365098d241972bc0fe49561af294214ac404a54915861018bace87bc9a63c9f50034eb1af1b545c9d223ddb8f4d0fde67134308fa5fe5c6ae7583121d06d2fda144afbcb0098e219943493660029b82504eab5b496514c9045d2909f5eb2f0a5cf3f3069832681e932399718337dcf5e90a90f6b67ddf1207f4bdedeb6ce062e02b5bb5568cfe5fa09dee52fdca5c2a4206c671655a855519682408a70f567352503a3f3993e99bf3ff0d676c5bd49abb2e829bcc2926ceda0e097c9d52d9320391bc617bfe7b3596ec3fac054669fdf52e6bc9e9720389c38511443ecebaf8d5cab3fe4d710b0ce07dd70a8802c833dd09bbac284678da8736468a33e98823107350f7a0eddc2fdc1830b4e5682a51b8f60a6b3f3217b86cfcb2950db87c07c55838b7139ff30768663206683bb8e66696c8307ea1768d338bf2c739b8abeb4e7e27c2ac48386054719cd106ea6b7ae3a4d091be5f864b5ba18c0b951ffe47d1ec22bdcf8d7c44d5e8563f06aeb88ea31f900f1f128211e6affe38adb0e803344142a31c69e820ac49ca974451feffc7f470f49f05a753e4b9965a74e8199f5795d9019edc4ae5f2af6b8f3b0c371b8e4238ade1a597aadedc8b41691e851922b17e7a6d6eb8dd64c5795535d9894485db64de4aa00764765079973d786114d36b58de8ecf6955942b3b5ec2fc6fc58c8227ed0da2774b107ddb4a5a59538a78a6d7cf8d431d5646b7b970d9a18246a94f9c4acb2c96c8eb4e966af8ccacc4adcea868fcacd1aa93a9c75c1f1d97fe218b0df45493bdedf662cdff47daf3b15ea6f67da563941d50d888b8dd2c4e7416b21d7ba75f14d46cf16fb43c6dd11eefed3204bb311b862fe1032b34e7249a882c40b416309f07f1ce642fe5434e1881e1d14f1a736f1f44148b7d75bd8f5f16774a4cf3023096a63f6bd7ae175fa03467a120fe1d2730972dfff65d006a79edf2f12266a3955f332bb9616a5a06841f7148d0e049b43ade784e0e8946147e23b3b824f84c80c0c222b354b2263c697fe180bb6b48ffa80264b377618992a32ba9ecce29141472bdb833d25e197fb225b6c16180f73e6b3a2dd547a62ef40ea8fb32a3e8a411e754503456d3a2e395d865a1184936523db52aeaaba162ba91e3198881eb0026a53fa4edf61aca066dc8e5895b656f909e6bdd7d5602000ec0cb1a432eb42e3e1b43a762cc92555f6ef777b9be69837ef0ecadb6451c66cf8a14ea486146c2f98882e28610e3b0eef9f2c0d354540937f76e23c4cc6b9e29b4bf4a224ff080f0a2ab36dbb5362198ddcd4e39f6853b629508431072c20992334515096f80846882d2233985164b584c5600a0b0afd2e86b37995ac00022d8a9a3af8067e3626baadacca0ebbf714948bf6666c49ed07d3d1a9cba07b6b115f46de0d61fb1029ce46198bf285f8b28ea38f4ab7b9a640a171229376eee95350e046e64a30718a21d47c57f4e663b4816b01765a002a17176bccda56a205cf779613d33fbb840aac88e3eb2181", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="79e0d4be817514465bac06b03a0f27a9f82efe0d296fdecbab10c3727c7af559a877792d9d061c") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000010c0)={0x1000, 0x7fff, {}, {0xee00}, 0x3ff, 0x1f}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) ioctl$KDDELIO(r2, 0x4b35, 0x5) 00:51:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x545d, 0x0) 00:51:00 executing program 3: syz_open_dev$ptys(0xc, 0x3, 0x0) 00:51:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5602, 0x0) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:51:00 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000006000000) 00:51:00 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x545d, 0x0) 00:51:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5603, 0x0) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:51:00 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x3) syz_clone(0x200000, &(0x7f0000000000)="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", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="79e0d4be817514465bac06b03a0f27a9f82efe0d296fdecbab10c3727c7af559a877792d9d061c") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000010c0)={0x1000, 0x7fff, {}, {0xee00}, 0x3ff, 0x1f}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80000001) ioctl$KDDELIO(r2, 0x4b35, 0x5) 00:51:00 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x545d, 0x0) 00:51:00 executing program 3: syz_open_dev$ptys(0xc, 0x3, 0x0) 00:51:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5605, 0x0) 00:51:00 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000007000000) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) 00:51:00 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/169) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x3) 00:51:00 executing program 2: ioctl$KDDELIO(0xffffffffffffffff, 0x545d, 0x0) 00:51:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5606, 0x0) 00:51:00 executing program 3: syz_open_dev$ptys(0xc, 0x3, 0x0) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:51:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x545d, 0x0) 00:51:00 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000008000000) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r0, 0x5409, 0x0) (async) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:51:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5607, 0x0) 00:51:00 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/169) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r1, 0x540a, 0x3) 00:51:00 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000009000000) 00:51:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r0, 0x5409, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 00:51:00 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDDELIO(r0, 0x2, 0x1000008000000) 00:51:00 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x545d, 0x0) 00:51:00 executing progr