0000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:07:56 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:56 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(r0, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000180)) 09:07:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:07:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x2, 0x7}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x1d, 0xde, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:07:56 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(r0, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async, rerun: 64) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000180)) 09:07:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x2, 0x7}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x1d, 0xde, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0xe000) (async) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x2, 0x7}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x1d, 0xde, &(0x7f0000000480)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:07:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0xe000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x2, 0x7}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x1d, 0xde, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:07:57 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:07:57 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x450, 0x3f, 0x800, 0x16, "561cd1161f1a74106c5d91b25607af9e7654d3"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) socketpair(0x23, 0x5, 0x1, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f00000001c0)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r1, 0x5404, 0x0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x450, 0x3f, 0x800, 0x16, "561cd1161f1a74106c5d91b25607af9e7654d3"}) (async) syz_open_pts(r1, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) socketpair(0x23, 0x5, 0x1, &(0x7f0000000100)) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:07:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000006c0)={0xffffffb8, 0x6, 0x80, 0x8, 0x0, "43e4d7fc79a4de2a49c4d9249238ee59ad24a9"}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0xfffffffffffffe35}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x48}}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf255e0000000800270001000000050019010d0000000800a0008885c4dd05003b2099a300000800a100ee090000050018013200008008002201ab00000008000019010700000000000000000000602b171ae8394377aae03ee9c0fa27a29eef7b152d06e830df8714b25e78df52955bd230fe7854fc6d6da2705a720d04bc134a4711b663f7b9a8b507e9f652619c7900000080101bc9273ecca808e40760495d77774711baffab1e7c150ccb19e3e553e7c08ba3"], 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r8 = socket(0xa, 0xa, 0x834) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000004c0)) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socket(0xa, 0x80000, 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x119}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x8c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4098}, 0x4001) socketpair(0x2c, 0x2, 0x200, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c4dbc6cb49b9241607b53210aa19d9ba"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d05170873cc1f7f4d7b2565d7510ebb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x51) 09:07:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0xb, 0x49, "1aee6797b9d3f76e269561f654ed8b468835c4", 0xc5e}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 09:07:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) socket$l2tp6(0xa, 0x2, 0x73) 09:07:57 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) socket$l2tp6(0xa, 0x2, 0x73) 09:07:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000006c0)={0xffffffb8, 0x6, 0x80, 0x8, 0x0, "43e4d7fc79a4de2a49c4d9249238ee59ad24a9"}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0xfffffffffffffe35}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x48}}, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf255e0000000800270001000000050019010d0000000800a0008885c4dd05003b2099a300000800a100ee090000050018013200008008002201ab00000008000019010700000000000000000000602b171ae8394377aae03ee9c0fa27a29eef7b152d06e830df8714b25e78df52955bd230fe7854fc6d6da2705a720d04bc134a4711b663f7b9a8b507e9f652619c7900000080101bc9273ecca808e40760495d77774711baffab1e7c150ccb19e3e553e7c08ba3"], 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) (async) r8 = socket(0xa, 0xa, 0x834) (async) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000004c0)) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) socket(0xa, 0x80000, 0x7) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x119}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x8c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4098}, 0x4001) (async) socketpair(0x2c, 0x2, 0x200, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c4dbc6cb49b9241607b53210aa19d9ba"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d05170873cc1f7f4d7b2565d7510ebb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x51) 09:07:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0xb, 0x49, "1aee6797b9d3f76e269561f654ed8b468835c4", 0xc5e}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 09:07:57 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) socket$l2tp6(0xa, 0x2, 0x73) 09:07:57 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x7, 0x1, 0x1, 0xb, 0x49, "1aee6797b9d3f76e269561f654ed8b468835c4", 0xc5e}) (async, rerun: 64) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) (rerun: 64) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 09:07:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000006c0)={0xffffffb8, 0x6, 0x80, 0x8, 0x0, "43e4d7fc79a4de2a49c4d9249238ee59ad24a9"}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0xfffffffffffffe35}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x48}}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000700), &(0x7f0000000740)=0x4) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fcdbdf255e0000000800270001000000050019010d0000000800a0008885c4dd05003b2099a300000800a100ee090000050018013200008008002201ab00000008000019010700000000000000000000602b171ae8394377aae03ee9c0fa27a29eef7b152d06e830df8714b25e78df52955bd230fe7854fc6d6da2705a720d04bc134a4711b663f7b9a8b507e9f652619c7900000080101bc9273ecca808e40760495d77774711baffab1e7c150ccb19e3e553e7c08ba3"], 0x5c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) (async) r8 = socket(0xa, 0xa, 0x834) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000004c0)) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) socket(0xa, 0x80000, 0x7) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r9, 0x119}, 0x14}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)={0x8c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4098}, 0x4001) socketpair(0x2c, 0x2, 0x200, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c4dbc6cb49b9241607b53210aa19d9ba"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9d05170873cc1f7f4d7b2565d7510ebb"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x51) (rerun: 64) 09:07:58 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:07:58 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d8586787a8"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f04b3b7bf533eac5a58e84905"}, @NL80211_KEY_SEQ={0x10, 0x4, "d69ff26fbb21316a025aa1ad"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a9748084a88253516e032424d8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c67e195903cb8676846c53c6db"}, @NL80211_KEY_SEQ={0x8, 0x4, "cde76854"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8659676d53682df3fd43ed97f"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82}) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x2, 0x8000, 0x7, 0x6, 0x7, "64f00ffe1be7e72f2846600dd7f01fc5a90cb3"}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:07:58 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x168) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x8, "6c97f3081f82f753199d751f2781d3cbac25df86e9e8fbc4a591fbed5a1bba12db0fcf92e1170d247db73a7cb1487803feaec4c8fd3e74d46fa832b7a6eccc74e65a06a2e736026ee099d4657f793866584464c7a552d550a90c9609d0d44436c3f41c07cfbf6d6a207f79a7b55d3daa03589e79ee84979f3be08561238e4790567ed7223c64acff0ee10453f433e4a93a1dba92001a0b7366c57b00b8dde8b5cd69828cc74d0dd482a86607d00da1b275fdbd6c12a629a77eaee15ec3e25fdad2d54308436a60fbe653b03b4f5c1dd62e1b71e8f37066d1ca70dd2a09e0dc7fef8c3f5a9b0131bf5b2f97e8010a2744e13742674f04704086a2ea8b068ba10f756fcbc8f4b3ab348012759f8f48ca0aea54cc844d3a035f7bc017dd6de7829615996f281c47883388b9c16259fac8b8a7578ecebd6a0e145abfb8410439b33de041e5e9e48bcd08219463e174af677ea35ca76d49cae2bd4a88d98e6452d68aef6db640ca9e92c590021f41670ec0c25b43a4dad157ddb4afad52630912d3d25bbd7dee42e0c95cb130bd0446c9e0869bdf487f744f2938ed8e7bf4f05b8f8a599f084dd20dda4d50dbdfd745c7a03a46467e4960cdd6f785ef031097566e5a67a07d4f406b59a51d5b50bf94dfbaee1683eb7ed929e327b9829c7ed1da120e64ecb648a35f9ff6ab913208b4105531ac43758a025f45b64995df0c450ef559"}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x1b, 0x160, &(0x7f0000000040)}) 09:07:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:07:58 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:58 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x168) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x8, "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"}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x1b, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x168) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x8, "6c97f3081f82f753199d751f2781d3cbac25df86e9e8fbc4a591fbed5a1bba12db0fcf92e1170d247db73a7cb1487803feaec4c8fd3e74d46fa832b7a6eccc74e65a06a2e736026ee099d4657f793866584464c7a552d550a90c9609d0d44436c3f41c07cfbf6d6a207f79a7b55d3daa03589e79ee84979f3be08561238e4790567ed7223c64acff0ee10453f433e4a93a1dba92001a0b7366c57b00b8dde8b5cd69828cc74d0dd482a86607d00da1b275fdbd6c12a629a77eaee15ec3e25fdad2d54308436a60fbe653b03b4f5c1dd62e1b71e8f37066d1ca70dd2a09e0dc7fef8c3f5a9b0131bf5b2f97e8010a2744e13742674f04704086a2ea8b068ba10f756fcbc8f4b3ab348012759f8f48ca0aea54cc844d3a035f7bc017dd6de7829615996f281c47883388b9c16259fac8b8a7578ecebd6a0e145abfb8410439b33de041e5e9e48bcd08219463e174af677ea35ca76d49cae2bd4a88d98e6452d68aef6db640ca9e92c590021f41670ec0c25b43a4dad157ddb4afad52630912d3d25bbd7dee42e0c95cb130bd0446c9e0869bdf487f744f2938ed8e7bf4f05b8f8a599f084dd20dda4d50dbdfd745c7a03a46467e4960cdd6f785ef031097566e5a67a07d4f406b59a51d5b50bf94dfbaee1683eb7ed929e327b9829c7ed1da120e64ecb648a35f9ff6ab913208b4105531ac43758a025f45b64995df0c450ef559"}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x1b, 0x160, &(0x7f0000000040)}) (async) 09:07:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82}) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x2, 0x8000, 0x7, 0x6, 0x7, "64f00ffe1be7e72f2846600dd7f01fc5a90cb3"}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000240)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82}) (async) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x2, 0x8000, 0x7, 0x6, 0x7, "64f00ffe1be7e72f2846600dd7f01fc5a90cb3"}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) (async) 09:07:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:07:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:07:58 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x168) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x8, "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"}) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x1b, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x168) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x8, "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"}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x12, 0x1b, 0x160, &(0x7f0000000040)}) (async) 09:07:58 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/82}) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0xfffffffd, 0x4) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x2, 0x8000, 0x7, 0x6, 0x7, "64f00ffe1be7e72f2846600dd7f01fc5a90cb3"}) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) (rerun: 64) 09:07:58 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x33) 09:07:58 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d8586787a8"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f04b3b7bf533eac5a58e84905"}, @NL80211_KEY_SEQ={0x10, 0x4, "d69ff26fbb21316a025aa1ad"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a9748084a88253516e032424d8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c67e195903cb8676846c53c6db"}, @NL80211_KEY_SEQ={0x8, 0x4, "cde76854"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8659676d53682df3fd43ed97f"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x400019, 0x19, 0x145, 0x0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000380)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000003c0)={0x7, 0x1, 0x101}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x5, 0x3f, 0x7, 0x1f, 0x15, "0a5f41f809eb507298ba9f93c8e38311edf93e"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xe400, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000300)={0x8, 0x1000, 0x7a98, 0x3, 0xf, "5f45f879aea60d11"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x2, 0x4a0, 0x7, 0x40}) pipe(&(0x7f0000000140)) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x2, 0x5}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/96}) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000040)) 09:07:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TCSBRKP(r1, 0x5425, 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000840)={0x1da, 0x3, &(0x7f0000000440)}) r3 = syz_open_pts(r0, 0x1) syz_open_pts(r3, 0x501400) 09:07:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() migrate_pages(r2, 0x5, &(0x7f0000000080)=0x2, &(0x7f0000000180)=0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8d, 0x2, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x8020, 0x1, 0x1}}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000740)={0x2, 0x0, 0x14, 0xc, 0x42, &(0x7f0000000200)="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"}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', r10, 0x29, 0x9, 0x80, 0x7, 0x40, @mcast2, @remote, 0x1, 0x20, 0x80000000, 0x2000006}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r5, 0x0, 0x5, 0x0, 0x20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x9aba72255138a946, 0x8000, 0x8001, 0x6}}) 09:07:59 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x400019, 0x19, 0x145, 0x0}) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000380)) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000003c0)={0x7, 0x1, 0x101}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x5, 0x3f, 0x7, 0x1f, 0x15, "0a5f41f809eb507298ba9f93c8e38311edf93e"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xe400, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000300)={0x8, 0x1000, 0x7a98, 0x3, 0xf, "5f45f879aea60d11"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x2, 0x4a0, 0x7, 0x40}) pipe(&(0x7f0000000140)) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x2, 0x5}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/96}) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000040)) 09:07:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x8, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() migrate_pages(r2, 0x5, &(0x7f0000000080)=0x2, &(0x7f0000000180)=0x1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8d, 0x2, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x8020, 0x1, 0x1}}) (rerun: 64) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000740)={0x2, 0x0, 0x14, 0xc, 0x42, &(0x7f0000000200)="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"}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', r10, 0x29, 0x9, 0x80, 0x7, 0x40, @mcast2, @remote, 0x1, 0x20, 0x80000000, 0x2000006}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r5, 0x0, 0x5, 0x0, 0x20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x9aba72255138a946, 0x8000, 0x8001, 0x6}}) 09:07:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TCSBRKP(r1, 0x5425, 0x2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000840)={0x1da, 0x3, &(0x7f0000000440)}) r3 = syz_open_pts(r0, 0x1) syz_open_pts(r3, 0x501400) 09:07:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TCSBRKP(r1, 0x5425, 0x2) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000840)={0x1da, 0x3, &(0x7f0000000440)}) (async) r3 = syz_open_pts(r0, 0x1) syz_open_pts(r3, 0x501400) 09:07:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x400019, 0x19, 0x145, 0x0}) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000380)) (async) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000003c0)={0x7, 0x1, 0x101}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x5, 0x3f, 0x7, 0x1f, 0x15, "0a5f41f809eb507298ba9f93c8e38311edf93e"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xe400, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000300)={0x8, 0x1000, 0x7a98, 0x3, 0xf, "5f45f879aea60d11"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async, rerun: 64) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) (rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x2, 0x4a0, 0x7, 0x40}) pipe(&(0x7f0000000140)) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000100)={{@my=0x0, 0x1f}, 0x2, 0x5}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/96}) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000040)) (rerun: 64) 09:07:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8, 0x80000, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = gettid() (rerun: 64) migrate_pages(r2, 0x5, &(0x7f0000000080)=0x2, &(0x7f0000000180)=0x1) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8d, 0x2, 0x1c, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x80, 0x8020, 0x1, 0x1}}) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (async) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r6, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000740)={0x2, 0x0, 0x14, 0xc, 0x42, &(0x7f0000000200)="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"}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', r10, 0x29, 0x9, 0x80, 0x7, 0x40, @mcast2, @remote, 0x1, 0x20, 0x80000000, 0x2000006}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r5, 0x0, 0x5, 0x0, 0x20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x9aba72255138a946, 0x8000, 0x8001, 0x6}}) 09:07:59 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x33) 09:07:59 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb4, 0x0, 0x710, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d8586787a8"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1f04b3b7bf533eac5a58e84905"}, @NL80211_KEY_SEQ={0x10, 0x4, "d69ff26fbb21316a025aa1ad"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a9748084a88253516e032424d8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c67e195903cb8676846c53c6db"}, @NL80211_KEY_SEQ={0x8, 0x4, "cde76854"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e8659676d53682df3fd43ed97f"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async, rerun: 32) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async, rerun: 32) ioctl$TCSETSF(r2, 0x5404, 0x0) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:07:59 executing program 5: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0xb0000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:07:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCCONS(r1, 0x541d) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfff, 0x1ff, 0x7f, 0x80, 0x4, "f87abee84fef639e"}) 09:07:59 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xc, 0x1, 0x16f, &(0x7f00000000c0)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:00 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:00 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xc, 0x1, 0x16f, &(0x7f00000000c0)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:00 executing program 5: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0xb0000) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfff, 0x1ff, 0x7f, 0x80, 0x4, "f87abee84fef639e"}) 09:08:00 executing program 5: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0xb0000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0xb0000) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCCONS(r1, 0x541d) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xfff, 0x1ff, 0x7f, 0x80, 0x4, "f87abee84fef639e"}) 09:08:00 executing program 2: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xc, 0x1, 0x16f, &(0x7f00000000c0)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xc, 0x1, 0x16f, &(0x7f00000000c0)}) (async) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:00 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x33) 09:08:00 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x1000, 0x7fffffff, 0x80009, 0x10000081, 0x0, "3b40ca007a000800"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xe, 0x1e, 0x15c, &(0x7f0000000040)}) 09:08:00 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) r1 = socket(0x23, 0xa, 0x80000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x33}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa8341da41bd15f80fc3c0c140ebff7cb599b948533d40c7fdb323f5109084d4"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2dcef04d3acf3796162956253b3b2522"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6037ac6dcdfbbef8d941e304daa3b68c612272f7c302e01d05a1775779a2df70"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="03c2ce5c1e95fa01a0c78868d7674c2f0437958325c0dd03"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e8de7b2a253e8a6abe6a26f57d980c9f3c6153003c561f48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d51187958ce05ca3519c2c1eef296c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd66dae212f52a36"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d33ca06b6b08fe2"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="909c573627382bfafa6aaafa314904b9f08caf41160942b2"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6584adee7055485f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a777415b739f84ab27ef86d235e3ef53"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9f14d2c34017cba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "29f4863c1a8a216d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21f52ebfbe83b193"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="623ff005a25b59cab5886d953bdc6a0a"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17587e4dacec4d0c5b508b42b9897569"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "288438a86ad22b98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e6cc718bf418d12"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54a273095875aa87a8880e80c71d2d16ba2db83c952a58170c6fa886ef11ebe1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="812e56c76945d434105a5498264aa6fa7b94dc3f7c4b10832705ef755ae560ae"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24044890}, 0x8040) 09:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = socket(0x21, 0x1, 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}}, 0x20}}, 0x4000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:00 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = socket(0x21, 0x1, 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}}, 0x20}}, 0x4000) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:00 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) r1 = socket(0x23, 0xa, 0x80000001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x33}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa8341da41bd15f80fc3c0c140ebff7cb599b948533d40c7fdb323f5109084d4"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2dcef04d3acf3796162956253b3b2522"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6037ac6dcdfbbef8d941e304daa3b68c612272f7c302e01d05a1775779a2df70"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="03c2ce5c1e95fa01a0c78868d7674c2f0437958325c0dd03"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e8de7b2a253e8a6abe6a26f57d980c9f3c6153003c561f48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d51187958ce05ca3519c2c1eef296c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd66dae212f52a36"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d33ca06b6b08fe2"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="909c573627382bfafa6aaafa314904b9f08caf41160942b2"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6584adee7055485f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a777415b739f84ab27ef86d235e3ef53"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9f14d2c34017cba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "29f4863c1a8a216d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21f52ebfbe83b193"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="623ff005a25b59cab5886d953bdc6a0a"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17587e4dacec4d0c5b508b42b9897569"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "288438a86ad22b98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e6cc718bf418d12"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54a273095875aa87a8880e80c71d2d16ba2db83c952a58170c6fa886ef11ebe1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="812e56c76945d434105a5498264aa6fa7b94dc3f7c4b10832705ef755ae560ae"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24044890}, 0x8040) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) socket(0x23, 0xa, 0x80000001) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x33}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa8341da41bd15f80fc3c0c140ebff7cb599b948533d40c7fdb323f5109084d4"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2dcef04d3acf3796162956253b3b2522"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6037ac6dcdfbbef8d941e304daa3b68c612272f7c302e01d05a1775779a2df70"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="03c2ce5c1e95fa01a0c78868d7674c2f0437958325c0dd03"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e8de7b2a253e8a6abe6a26f57d980c9f3c6153003c561f48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d51187958ce05ca3519c2c1eef296c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd66dae212f52a36"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d33ca06b6b08fe2"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="909c573627382bfafa6aaafa314904b9f08caf41160942b2"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6584adee7055485f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a777415b739f84ab27ef86d235e3ef53"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9f14d2c34017cba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "29f4863c1a8a216d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21f52ebfbe83b193"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="623ff005a25b59cab5886d953bdc6a0a"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17587e4dacec4d0c5b508b42b9897569"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "288438a86ad22b98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e6cc718bf418d12"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54a273095875aa87a8880e80c71d2d16ba2db83c952a58170c6fa886ef11ebe1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="812e56c76945d434105a5498264aa6fa7b94dc3f7c4b10832705ef755ae560ae"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24044890}, 0x8040) (async) 09:08:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xe, 0x1e, 0x15c, &(0x7f0000000040)}) 09:08:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) r2 = socket(0x21, 0x1, 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) (async) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5c}}}}}, 0x20}}, 0x4000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xe, 0x1e, 0x15c, &(0x7f0000000040)}) 09:08:01 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) r1 = socket(0x23, 0xa, 0x80000001) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x204, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x33}}}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aa8341da41bd15f80fc3c0c140ebff7cb599b948533d40c7fdb323f5109084d4"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2dcef04d3acf3796162956253b3b2522"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6037ac6dcdfbbef8d941e304daa3b68c612272f7c302e01d05a1775779a2df70"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="03c2ce5c1e95fa01a0c78868d7674c2f0437958325c0dd03"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e8de7b2a253e8a6abe6a26f57d980c9f3c6153003c561f48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d51187958ce05ca3519c2c1eef296c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd66dae212f52a36"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d33ca06b6b08fe2"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="909c573627382bfafa6aaafa314904b9f08caf41160942b2"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6584adee7055485f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a777415b739f84ab27ef86d235e3ef53"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a9f14d2c34017cba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "29f4863c1a8a216d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21f52ebfbe83b193"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="623ff005a25b59cab5886d953bdc6a0a"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17587e4dacec4d0c5b508b42b9897569"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "288438a86ad22b98"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e6cc718bf418d12"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54a273095875aa87a8880e80c71d2d16ba2db83c952a58170c6fa886ef11ebe1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="812e56c76945d434105a5498264aa6fa7b94dc3f7c4b10832705ef755ae560ae"}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x24044890}, 0x8040) 09:08:01 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:01 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x1000, 0x7fffffff, 0x80009, 0x10000081, 0x0, "3b40ca007a000800"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$KDENABIO(r0, 0x4b36) 09:08:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x800000, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 09:08:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x7, 0x9, 0x7, 0xe, "17902ccc7c67b220"}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:01 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 09:08:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x800000, 0x0}) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) 09:08:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x7, 0x9, 0x7, 0xe, "17902ccc7c67b220"}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:01 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x7, 0x9, 0x7, 0xe, "17902ccc7c67b220"}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x7, 0x9, 0x7, 0xe, "17902ccc7c67b220"}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 09:08:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x800000, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 09:08:02 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:02 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x1000, 0x7fffffff, 0x80009, 0x10000081, 0x0, "3b40ca007a000800"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="fb6d2c2a760518d65e18a126171884a5c61dffff0995877bcdca8b5d12c1e1559a692ff55c5c58872987ead0621cbd8a83a40b5bd3a1cace1b7ae6916689aaec5cb7817898df3113c264b749d1fc872b680a29a7e80ec5bceb9863ee7f6e40c113d9fe4674165a153d3dbde79165e6366a42818ddfd1884f109624f8890db5011b5364a425b0ebf4066ba4882e38c59ec3e86ca5a7bc7ea431543063d958222d921ca0d5d2930aec547ba38151776f2d7c32eb18faa1588bd481d46f963ca44723024dcf601a759bff5fb0657bfb80e4c0b5ede4840874d8adfed1d6") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000880)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x7, 0xd, 0x1e7, &(0x7f0000000480)}) 09:08:02 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="fb6d2c2a760518d65e18a126171884a5c61dffff0995877bcdca8b5d12c1e1559a692ff55c5c58872987ead0621cbd8a83a40b5bd3a1cace1b7ae6916689aaec5cb7817898df3113c264b749d1fc872b680a29a7e80ec5bceb9863ee7f6e40c113d9fe4674165a153d3dbde79165e6366a42818ddfd1884f109624f8890db5011b5364a425b0ebf4066ba4882e38c59ec3e86ca5a7bc7ea431543063d958222d921ca0d5d2930aec547ba38151776f2d7c32eb18faa1588bd481d46f963ca44723024dcf601a759bff5fb0657bfb80e4c0b5ede4840874d8adfed1d6") (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000880)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x7, 0xd, 0x1e7, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000880)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x7, 0xd, 0x1e7, &(0x7f0000000480)}) (async) 09:08:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="fb6d2c2a760518d65e18a126171884a5c61dffff0995877bcdca8b5d12c1e1559a692ff55c5c58872987ead0621cbd8a83a40b5bd3a1cace1b7ae6916689aaec5cb7817898df3113c264b749d1fc872b680a29a7e80ec5bceb9863ee7f6e40c113d9fe4674165a153d3dbde79165e6366a42818ddfd1884f109624f8890db5011b5364a425b0ebf4066ba4882e38c59ec3e86ca5a7bc7ea431543063d958222d921ca0d5d2930aec547ba38151776f2d7c32eb18faa1588bd481d46f963ca44723024dcf601a759bff5fb0657bfb80e4c0b5ede4840874d8adfed1d6") (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000880)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x7, 0xd, 0x1e7, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000880)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x7, 0xd, 0x1e7, &(0x7f0000000480)}) (async) 09:08:02 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) accept$netrom(r0, 0x0, &(0x7f0000000000)) 09:08:02 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:02 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:02 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1e, 0x1, 0x30, &(0x7f0000000040)}) 09:08:02 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) accept$netrom(r0, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async) accept$netrom(r0, 0x0, &(0x7f0000000000)) (async) 09:08:03 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:03 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r4, 0x4b36) 09:08:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1e, 0x1, 0x30, &(0x7f0000000040)}) 09:08:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async, rerun: 64) accept$netrom(r0, 0x0, &(0x7f0000000000)) 09:08:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1e, 0x1, 0x30, &(0x7f0000000040)}) 09:08:03 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r4, 0x4b36) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDENABIO(r4, 0x4b36) (async) 09:08:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7f, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:03 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:03 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) syz_open_pts(r2, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TCSBRKP(r2, 0x5425, 0x19697278) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:03 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r4, 0x4b36) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDENABIO(r4, 0x4b36) (async) 09:08:03 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7f, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:04 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:04 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7f, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TCSBRKP(r2, 0x5425, 0x19697278) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1c, 0x16c, &(0x7f0000000640)}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x1, 0x400, 0x4, 0x28, 0x16, "59be1c26b1825faec509636dffba7847fdbca1"}) ioctl$TIOCCONS(r3, 0x541d) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0xffffffff, 0x9, "73325c31ea19a24f76f149a3ea1a52855287f3", 0x1f, 0x307a145d}) 09:08:04 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x14103, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1c, 0x16c, &(0x7f0000000640)}) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x1, 0x400, 0x4, 0x28, 0x16, "59be1c26b1825faec509636dffba7847fdbca1"}) ioctl$TIOCCONS(r3, 0x541d) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0xffffffff, 0x9, "73325c31ea19a24f76f149a3ea1a52855287f3", 0x1f, 0x307a145d}) 09:08:04 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x14103, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TCSBRKP(r2, 0x5425, 0x19697278) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:04 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) (async, rerun: 64) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (rerun: 64) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:04 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x14103, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:04 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1c, 0x16c, &(0x7f0000000640)}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x1, 0x400, 0x4, 0x28, 0x16, "59be1c26b1825faec509636dffba7847fdbca1"}) ioctl$TIOCCONS(r3, 0x541d) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0xffffffff, 0x9, "73325c31ea19a24f76f149a3ea1a52855287f3", 0x1f, 0x307a145d}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDENABIO(r0, 0x4b36) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1c, 0x16c, &(0x7f0000000640)}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x1, 0x400, 0x4, 0x28, 0x16, "59be1c26b1825faec509636dffba7847fdbca1"}) (async) ioctl$TIOCCONS(r3, 0x541d) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0xffffffff, 0x9, "73325c31ea19a24f76f149a3ea1a52855287f3", 0x1f, 0x307a145d}) (async) 09:08:04 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7bee, 0x20}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 09:08:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair(0x21, 0xaa19c10947311ba6, 0x14000000, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept$netrom(r1, &(0x7f00000002c0)={{0x3, @rose}, [@null, @bcast, @rose, @netrom, @default, @rose, @null, @default]}, &(0x7f0000000340)=0x48) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdad46e2d6df25860000000800030093d2d923c94477cdf87095fa500902eee9f39d", @ANYRES32=r3, @ANYBLOB="0c009900ff0100007d0000000800a100010000000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x800) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:04 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x524, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 09:08:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7bee, 0x20}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 09:08:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair(0x21, 0xaa19c10947311ba6, 0x14000000, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept$netrom(r1, &(0x7f00000002c0)={{0x3, @rose}, [@null, @bcast, @rose, @netrom, @default, @rose, @null, @default]}, &(0x7f0000000340)=0x48) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdad46e2d6df25860000000800030093d2d923c94477cdf87095fa500902eee9f39d", @ANYRES32=r3, @ANYBLOB="0c009900ff0100007d0000000800a100010000000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x800) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:04 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async, rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x524, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 09:08:05 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7bee, 0x20}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x44010}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7bee, 0x20}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x158}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) 09:08:05 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x44042) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair(0x21, 0xaa19c10947311ba6, 0x14000000, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept$netrom(r1, &(0x7f00000002c0)={{0x3, @rose}, [@null, @bcast, @rose, @netrom, @default, @rose, @null, @default]}, &(0x7f0000000340)=0x48) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdad46e2d6df25860000000800030093d2d923c94477cdf87095fa500902eee9f39d", @ANYRES32=r3, @ANYBLOB="0c009900ff0100007d0000000800a100010000000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x800) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x11, 0x1e, 0x160, &(0x7f0000000040)}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x78, &(0x7f0000000480)=0x1) socket$inet_udp(0x2, 0x2, 0x0) 09:08:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x524, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 09:08:05 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:05 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x11, 0x1e, 0x160, &(0x7f0000000040)}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x78, &(0x7f0000000480)=0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x11, 0x1e, 0x160, &(0x7f0000000040)}) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x78, &(0x7f0000000480)=0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 09:08:05 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)) r1 = socket(0x1, 0x6, 0x8ba) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:05 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)) r1 = socket(0x1, 0x6, 0x8ba) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x11, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x78, &(0x7f0000000480)=0x1) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) 09:08:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}]}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x40, 0xa, "7bd2189d729f2ddd1a3c491a2b4382397f15df"}) 09:08:06 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) (async) pipe(&(0x7f0000000080)) (async) r1 = socket(0x1, 0x6, 0x8ba) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:06 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x44042) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) syz_open_pts(r2, 0x44042) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}]}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:06 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:06 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x3c, 0x6a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x40, 0xa, "7bd2189d729f2ddd1a3c491a2b4382397f15df"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x40, 0xa, "7bd2189d729f2ddd1a3c491a2b4382397f15df"}) (async) 09:08:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r1, &(0x7f00000000c0)=""/162, 0xa2, 0x2060, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x3c, 0x6a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (rerun: 64) 09:08:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x40, 0xa, "7bd2189d729f2ddd1a3c491a2b4382397f15df"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x40, 0xa, "7bd2189d729f2ddd1a3c491a2b4382397f15df"}) (async) 09:08:06 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r1, &(0x7f00000000c0)=""/162, 0xa2, 0x2060, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) recvfrom$netrom(r1, &(0x7f00000000c0)=""/162, 0xa2, 0x2060, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) (async) pipe(&(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnexthop={0x3c, 0x6a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x800f, 0x1e, 0x161, &(0x7f0000000040)}) ioctl$TCSBRKP(r0, 0x5425, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1f, 0x0, 0x0, 0x51, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x10, 0x1, 0x9}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d4, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba75}}, {0x8, 0x6, r7}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000814) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000900)={0x800, 0x4, 0x80, 0x7, 0x1d, "c138b70803db7fb3f61e3e593b5810ebcd9190"}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x9f, 0x20, &(0x7f0000000480)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r9, 0x4b33, &(0x7f0000000880)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000940)={0x5, 0x10000, 0x7, 0x400, 0x8, "3ab75c04b6837d2ac2c690bd300202df8be55a", 0x3, 0x3}) 09:08:07 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x44042) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:07 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvfrom$netrom(r1, &(0x7f00000000c0)=""/162, 0xa2, 0x2060, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) (async) pipe(&(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:07 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:07 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x1, 0x0, 0x0}) 09:08:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x800f, 0x1e, 0x161, &(0x7f0000000040)}) ioctl$TCSBRKP(r0, 0x5425, 0x7ff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1f, 0x0, 0x0, 0x51, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x10, 0x1, 0x9}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d4, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba75}}, {0x8, 0x6, r7}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000814) (async) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000900)={0x800, 0x4, 0x80, 0x7, 0x1d, "c138b70803db7fb3f61e3e593b5810ebcd9190"}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x9f, 0x20, &(0x7f0000000480)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r9, 0x4b33, &(0x7f0000000880)) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000940)={0x5, 0x10000, 0x7, 0x400, 0x8, "3ab75c04b6837d2ac2c690bd300202df8be55a", 0x3, 0x3}) 09:08:07 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/255, 0xff}, {&(0x7f00000011c0)=""/114, 0x72}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, &(0x7f0000001540)=""/13, 0xd}, 0x2000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000002700)={&(0x7f00000015c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/147, 0x93}, 0x2001) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x1, 0x0, 0x0}) 09:08:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x800f, 0x1e, 0x161, &(0x7f0000000040)}) (async) ioctl$TCSBRKP(r0, 0x5425, 0x7ff) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1f, 0x0, 0x0, 0x51, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x10, 0x1, 0x9}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a80)={0x1d4, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba75}}, {0x8, 0x6, r7}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20040050}, 0x20000814) (async, rerun: 64) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) (rerun: 64) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000900)={0x800, 0x4, 0x80, 0x7, 0x1d, "c138b70803db7fb3f61e3e593b5810ebcd9190"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x9f, 0x20, &(0x7f0000000480)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r9, 0x4b33, &(0x7f0000000880)) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000940)={0x5, 0x10000, 0x7, 0x400, 0x8, "3ab75c04b6837d2ac2c690bd300202df8be55a", 0x3, 0x3}) 09:08:07 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/255, 0xff}, {&(0x7f00000011c0)=""/114, 0x72}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, &(0x7f0000001540)=""/13, 0xd}, 0x2000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000002700)={&(0x7f00000015c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/147, 0x93}, 0x2001) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/255, 0xff}, {&(0x7f00000011c0)=""/114, 0x72}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, &(0x7f0000001540)=""/13, 0xd}, 0x2000) (async) pipe(&(0x7f0000000080)) (async) recvmsg$can_bcm(r0, &(0x7f0000002700)={&(0x7f00000015c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/147, 0x93}, 0x2001) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x1, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x1, 0x0, 0x0}) (async) 09:08:07 executing program 0: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x80000000, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xe, 0x0, 0x0}) 09:08:08 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x17, 0x52, &(0x7f0000000480)}) 09:08:08 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:08 executing program 0: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x80000000, 0x4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xe, 0x0, 0x0}) 09:08:08 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/255, 0xff}, {&(0x7f00000011c0)=""/114, 0x72}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x7, &(0x7f0000001540)=""/13, 0xd}, 0x2000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000002700)={&(0x7f00000015c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002640)=""/147, 0x93}, 0x2001) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:08 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x17, 0x52, &(0x7f0000000480)}) 09:08:08 executing program 0: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x80000000, 0x4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xe, 0x0, 0x0}) 09:08:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x17, 0x52, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x17, 0x52, &(0x7f0000000480)}) (async) 09:08:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x202) inotify_rm_watch(r0, r1) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x2}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2e0000, 0x2, 0x9, 0x7, 0x9, "53fc6f8bb64016ffb24e6c924c6c33b2a05e53"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4) 09:08:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x20, 0x160, &(0x7f0000000480)}) 09:08:08 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) (async, rerun: 64) r3 = syz_open_pts(r2, 0x0) (rerun: 64) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async, rerun: 64) pipe(&(0x7f0000000600)) (async, rerun: 64) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x202) inotify_rm_watch(r0, r1) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:08 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x2}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2e0000, 0x2, 0x9, 0x7, 0x9, "53fc6f8bb64016ffb24e6c924c6c33b2a05e53"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x2}) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2e0000, 0x2, 0x9, 0x7, 0x9, "53fc6f8bb64016ffb24e6c924c6c33b2a05e53"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4) (async) 09:08:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x20, 0x160, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x20, 0x160, &(0x7f0000000480)}) (async) 09:08:09 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x202) inotify_rm_watch(r0, r1) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x20, 0x160, &(0x7f0000000480)}) 09:08:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x2}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2e0000, 0x2, 0x9, 0x7, 0x9, "53fc6f8bb64016ffb24e6c924c6c33b2a05e53"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) syz_open_pts(r0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x2}) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x2e0000, 0x2, 0x9, 0x7, 0x9, "53fc6f8bb64016ffb24e6c924c6c33b2a05e53"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000040)=0x4) (async) 09:08:09 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x50}, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x82, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0xe2, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f00000005c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x1f4, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x7841, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xb0, 0x1ea, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x80, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 09:08:09 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x50}, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:09 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x82, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0xe2, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f00000005c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x1f4, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x7841, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xb0, 0x1ea, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x80, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 09:08:09 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:09 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x50}, 0x2) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:09 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:09 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x82, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0xe2, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f00000005c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x1f4, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x7841, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xb0, 0x1ea, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x80, 0x3, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x82, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0xe2, 0x6}}) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f00000005c0)) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x1f4, 0x2, @private2, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8, 0x7841, 0x3, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xb0, 0x1ea, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x80, 0x3, 0x1}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x258, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1f4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78e}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) 09:08:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000480)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) 09:08:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) (async) 09:08:10 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000005c0)) ioctl$TCSETSF(r3, 0x5404, 0x0) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x1c, 0x173, &(0x7f00000001c0)="a1043a07d62e69c1a1b588310ae6d9871d69d9df3844c29034be40a0a694577c874940404fc9c7a6693c3e3600cb3e9e37a5e11a3d67c05843e71c2f0bd7b7e2ae6d4fa259227e3d301f1d2ed51543e4735c067826a2870de50b702fd68c9e80de144739a7fbee4c12eab039991cb854237f7154b645b62fc7c625a59695cd9b7ee1a4afa461f2b53587c71459fe0eb658407043a335ed9bea062f642d4eb650bfaeefcf06841b331388908b32865c91631bb4a7235391934a16d8f5d4fb8dca318414df898d139b1e32c3f8b625a172ddcc47a5821866386c0062167077825cb7d67d3a56e1dfff83cd255356c7378dfec4ff6b7a6aa2921eca1434bd391895dc893c81d7ad6831f7ea433febf2141a38bbf1ab299f089ed7a888787448981333749c07cf61d33d1c4a3ba3cd9736da0d73eb0da2b4777807f6c16d874c446fd4f051d55331771882812574bd4c21386f20dc87828b36d90deb97385cf10f8814c105888018ccd6793eeb3a638f6814b3d9d6c120694e620570250f9d787b690363c402c08ef7a6b1365a23db58333680b1de949dfad61071b56c6fc9c5bb6fbc67ce9b3e2358ec2011b0c36afddc9d4ef63b12d30e76b67cad1570561ff349536c4b74f7f80e67ca33cc5cf759f4b981b3729a7c2d30821ffa037f14d9c5c1d42551da68afe5a7ae73caff34399975c3aac59efc9461972f5165ce5700b59a7eaf5f11129ed3a91327a6f35dec347630116effbff4b39cd3adf7ee1592522a2b4c97f75856e782e3ca97c4657997d3561920eb9c1c4f2cbac378a00ca1169d2aac21868b0284298e7503d0822deac33f1cb64e5bf65ce27b140c8ad1a48bc23daa28b2b5eb4cd78f961ca11f35782df1eea03ecd42a80195badf92cebb0bef5ef319258be70fb79e43a626dadc16b30ee47d026981e63a8ecd6665fb933be2a3d05437b71b3706308fe441840caa2fcbc2e0f53ec5303ef79140874f087ebbb2952fe30dc25b89a02ce6af8d0f7416c8c4c001baad27d52df0d962f2c4f4729a266317fc6fe26509e70e5c7d23901d014469f510564ad0aeddd8f74dea8a5923b27acc2317c7751fc0dd9855b39118b533568265a3311ebfec1c7aeeebb765fb45f1f78dd38fd2cf96a6ad14b6042ff672f1190fbe8f538345e1073be7d64ea9d35376cc7b1bd3fae017ce68432e14622a179cf12e94a2f4a2aac10a9ac3c74c7c9e8dfcc32854ccbf53f77de6bec37d2e565252be892480170e91e9b749aba28df6709fa080c54bd05ead2a059619624901bbda035f17ad60b02e721f4beba460bad133e19968bcb44224b11ccbaa028058d6c2edf545f2c7c740329495bef0d14b600d0b9caa7de3cba417b71d319588574f4c5b2560fac53b84280978787a8dc78190b154d80c8813b5bb26fa742478ba0011d280541a7556d82239924c"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x6, 0x1ff, 0xb, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x50b241, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000480)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:10 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1f, 0x2, 0x7874, 0x4, 0x4, "b9cc13dfa0a0f646b023361641d34dd76df54f"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000002c0)="668838c187a11cdfd43dff7f0a78ef4383a450eb9656a04c8f1c66430d8622d6c8cf3b4db3ec2814a79f1e6342ee9a54da1b8d46fb86704b4ee34013f534e9014323dd0c0e3ba0099d7d8632946f6de51eee310db793c11643a1371c544ae77eb9d21367772eb0bed6e924f07d7a089ac7b8c6c0864bf1b7208e004262700d93a96f6e61a7125c9513dabf003266cc5d2556896a432df00ee6112de9a241c8e5645e743712db46478f3fd6fbfc87e5b32f309c12f51b6df4b4a3e3d6705e5bc89d812c833d6cd3ff35ea74defdf881c973c9cce9f0295d5cf7325128c96bd551da27a0ec5fea30721db45a7c44d5e0a163aba5e94b") ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x1, 0x1f, 0x1, 0x468, 0x13, "96bcddadfdc6847a"}) 09:08:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnexthop={0x1c, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4011) 09:08:10 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000480)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x9) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0xd20, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "0f1db45e65c4804652e6af7a29b41cd2e60b0ce42a54990bae4c9117eaed99cf195e53d1daa8f4c5f693a9c18f356ae46399dfe95a6adf20ab75d044ba8c95ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) accept4$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 09:08:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1f, 0x2, 0x7874, 0x4, 0x4, "b9cc13dfa0a0f646b023361641d34dd76df54f"}) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000002c0)="668838c187a11cdfd43dff7f0a78ef4383a450eb9656a04c8f1c66430d8622d6c8cf3b4db3ec2814a79f1e6342ee9a54da1b8d46fb86704b4ee34013f534e9014323dd0c0e3ba0099d7d8632946f6de51eee310db793c11643a1371c544ae77eb9d21367772eb0bed6e924f07d7a089ac7b8c6c0864bf1b7208e004262700d93a96f6e61a7125c9513dabf003266cc5d2556896a432df00ee6112de9a241c8e5645e743712db46478f3fd6fbfc87e5b32f309c12f51b6df4b4a3e3d6705e5bc89d812c833d6cd3ff35ea74defdf881c973c9cce9f0295d5cf7325128c96bd551da27a0ec5fea30721db45a7c44d5e0a163aba5e94b") (async) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x1, 0x1f, 0x1, 0x468, 0x13, "96bcddadfdc6847a"}) 09:08:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x1f, 0x2, 0x7874, 0x4, 0x4, "b9cc13dfa0a0f646b023361641d34dd76df54f"}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f00000002c0)="668838c187a11cdfd43dff7f0a78ef4383a450eb9656a04c8f1c66430d8622d6c8cf3b4db3ec2814a79f1e6342ee9a54da1b8d46fb86704b4ee34013f534e9014323dd0c0e3ba0099d7d8632946f6de51eee310db793c11643a1371c544ae77eb9d21367772eb0bed6e924f07d7a089ac7b8c6c0864bf1b7208e004262700d93a96f6e61a7125c9513dabf003266cc5d2556896a432df00ee6112de9a241c8e5645e743712db46478f3fd6fbfc87e5b32f309c12f51b6df4b4a3e3d6705e5bc89d812c833d6cd3ff35ea74defdf881c973c9cce9f0295d5cf7325128c96bd551da27a0ec5fea30721db45a7c44d5e0a163aba5e94b") ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x1, 0x1f, 0x1, 0x468, 0x13, "96bcddadfdc6847a"}) 09:08:10 executing program 5: connect$netrom(0xffffffffffffffff, &(0x7f0000000740)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4048004) getpeername$netrom(r2, &(0x7f0000000500)={{0x3, @default}, [@bcast, @remote, @netrom, @default, @null, @rose, @default, @default]}, &(0x7f0000000580)=0x48) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x9, 0x9, 0x5, 0xfc, "db5d4b60a4719b8cc7dc250e9f8f9a34bf726b", 0x61ce7cd4, 0x6}) 09:08:10 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x9) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0xd20, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "0f1db45e65c4804652e6af7a29b41cd2e60b0ce42a54990bae4c9117eaed99cf195e53d1daa8f4c5f693a9c18f356ae46399dfe95a6adf20ab75d044ba8c95ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) accept4$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x1d, 0x2, 0x9) (async) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0xd20, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "0f1db45e65c4804652e6af7a29b41cd2e60b0ce42a54990bae4c9117eaed99cf195e53d1daa8f4c5f693a9c18f356ae46399dfe95a6adf20ab75d044ba8c95ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) accept4$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) 09:08:11 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000005c0)) (async, rerun: 64) ioctl$TCSETSF(r3, 0x5404, 0x0) (async, rerun: 64) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x1c, 0x173, &(0x7f00000001c0)="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"}) (async, rerun: 32) r4 = syz_open_pts(r3, 0x0) (rerun: 32) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x6, 0x1ff, 0xb, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x50b241, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async, rerun: 64) pipe(&(0x7f0000000600)) (async, rerun: 64) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 09:08:11 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:11 executing program 5: connect$netrom(0xffffffffffffffff, &(0x7f0000000740)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4048004) getpeername$netrom(r2, &(0x7f0000000500)={{0x3, @default}, [@bcast, @remote, @netrom, @default, @null, @rose, @default, @default]}, &(0x7f0000000580)=0x48) (async, rerun: 64) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x9, 0x9, 0x5, 0xfc, "db5d4b60a4719b8cc7dc250e9f8f9a34bf726b", 0x61ce7cd4, 0x6}) (rerun: 64) 09:08:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x9) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0xd20, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "0f1db45e65c4804652e6af7a29b41cd2e60b0ce42a54990bae4c9117eaed99cf195e53d1daa8f4c5f693a9c18f356ae46399dfe95a6adf20ab75d044ba8c95ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) accept4$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket(0x1d, 0x2, 0x9) (async) sendmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x3, 0xd20, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2b, 0x1, 0x0, 0x0, "0f1db45e65c4804652e6af7a29b41cd2e60b0ce42a54990bae4c9117eaed99cf195e53d1daa8f4c5f693a9c18f356ae46399dfe95a6adf20ab75d044ba8c95ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) accept4$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) 09:08:11 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 09:08:11 executing program 5: connect$netrom(0xffffffffffffffff, &(0x7f0000000740)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async, rerun: 32) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4048004) (async, rerun: 64) getpeername$netrom(r2, &(0x7f0000000500)={{0x3, @default}, [@bcast, @remote, @netrom, @default, @null, @rose, @default, @default]}, &(0x7f0000000580)=0x48) (async, rerun: 64) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x1, 0x9, 0x9, 0x5, 0xfc, "db5d4b60a4719b8cc7dc250e9f8f9a34bf726b", 0x61ce7cd4, 0x6}) 09:08:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x4, 0x0, 0x4, 0x100000, 0x1000, {0x0, 0x2710}, {0x1, 0x8, 0xfe, 0x22, 0x0, 0x5, "9c687272"}, 0x3f, 0x3, {&(0x7f0000000140)=[{0x2, 0x3, {0x9}, 0x9}, {0xdee, 0x8, {0x6}, 0x6}]}, 0x4}) r2 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x40001) 09:08:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) 09:08:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:11 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x4, 0x0, 0x4, 0x100000, 0x1000, {0x0, 0x2710}, {0x1, 0x8, 0xfe, 0x22, 0x0, 0x5, "9c687272"}, 0x3f, 0x3, {&(0x7f0000000140)=[{0x2, 0x3, {0x9}, 0x9}, {0xdee, 0x8, {0x6}, 0x6}]}, 0x4}) r2 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x40001) 09:08:12 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000005c0)) ioctl$TCSETSF(r3, 0x5404, 0x0) (async) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x1c, 0x173, &(0x7f00000001c0)="a1043a07d62e69c1a1b588310ae6d9871d69d9df3844c29034be40a0a694577c874940404fc9c7a6693c3e3600cb3e9e37a5e11a3d67c05843e71c2f0bd7b7e2ae6d4fa259227e3d301f1d2ed51543e4735c067826a2870de50b702fd68c9e80de144739a7fbee4c12eab039991cb854237f7154b645b62fc7c625a59695cd9b7ee1a4afa461f2b53587c71459fe0eb658407043a335ed9bea062f642d4eb650bfaeefcf06841b331388908b32865c91631bb4a7235391934a16d8f5d4fb8dca318414df898d139b1e32c3f8b625a172ddcc47a5821866386c0062167077825cb7d67d3a56e1dfff83cd255356c7378dfec4ff6b7a6aa2921eca1434bd391895dc893c81d7ad6831f7ea433febf2141a38bbf1ab299f089ed7a888787448981333749c07cf61d33d1c4a3ba3cd9736da0d73eb0da2b4777807f6c16d874c446fd4f051d55331771882812574bd4c21386f20dc87828b36d90deb97385cf10f8814c105888018ccd6793eeb3a638f6814b3d9d6c120694e620570250f9d787b690363c402c08ef7a6b1365a23db58333680b1de949dfad61071b56c6fc9c5bb6fbc67ce9b3e2358ec2011b0c36afddc9d4ef63b12d30e76b67cad1570561ff349536c4b74f7f80e67ca33cc5cf759f4b981b3729a7c2d30821ffa037f14d9c5c1d42551da68afe5a7ae73caff34399975c3aac59efc9461972f5165ce5700b59a7eaf5f11129ed3a91327a6f35dec347630116effbff4b39cd3adf7ee1592522a2b4c97f75856e782e3ca97c4657997d3561920eb9c1c4f2cbac378a00ca1169d2aac21868b0284298e7503d0822deac33f1cb64e5bf65ce27b140c8ad1a48bc23daa28b2b5eb4cd78f961ca11f35782df1eea03ecd42a80195badf92cebb0bef5ef319258be70fb79e43a626dadc16b30ee47d026981e63a8ecd6665fb933be2a3d05437b71b3706308fe441840caa2fcbc2e0f53ec5303ef79140874f087ebbb2952fe30dc25b89a02ce6af8d0f7416c8c4c001baad27d52df0d962f2c4f4729a266317fc6fe26509e70e5c7d23901d014469f510564ad0aeddd8f74dea8a5923b27acc2317c7751fc0dd9855b39118b533568265a3311ebfec1c7aeeebb765fb45f1f78dd38fd2cf96a6ad14b6042ff672f1190fbe8f538345e1073be7d64ea9d35376cc7b1bd3fae017ce68432e14622a179cf12e94a2f4a2aac10a9ac3c74c7c9e8dfcc32854ccbf53f77de6bec37d2e565252be892480170e91e9b749aba28df6709fa080c54bd05ead2a059619624901bbda035f17ad60b02e721f4beba460bad133e19968bcb44224b11ccbaa028058d6c2edf545f2c7c740329495bef0d14b600d0b9caa7de3cba417b71d319588574f4c5b2560fac53b84280978787a8dc78190b154d80c8813b5bb26fa742478ba0011d280541a7556d82239924c"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x6, 0x1ff, 0xb, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x50b241, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:12 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xd, 0x0, 0x0}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0xa, 0x4, 0xf9, &(0x7f00000004c0)}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40881) 09:08:12 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_overlay={0x4, 0x0, 0x4, 0x100000, 0x1000, {0x0, 0x2710}, {0x1, 0x8, 0xfe, 0x22, 0x0, 0x5, "9c687272"}, 0x3f, 0x3, {&(0x7f0000000140)=[{0x2, 0x3, {0x9}, 0x9}, {0xdee, 0x8, {0x6}, 0x6}]}, 0x4}) (async) r2 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x40001) 09:08:12 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:12 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xd, 0x0, 0x0}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0xa, 0x4, 0xf9, &(0x7f00000004c0)}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40881) 09:08:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1b, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket(0x9, 0x6, 0x1) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x700, 0x7f, 0xbe, {{0x18, 0x4, 0x1, 0x3b, 0x60, 0x68, 0x0, 0x2, 0x2, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xfff}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xf0, [@local, @multicast1, @private=0xa010102, @broadcast, @multicast2, @local, @local]}, @timestamp={0x44, 0x14, 0xfa, 0x0, 0x2, [0x4ce3b68, 0x7, 0x7, 0x1ac]}, @ssrr={0x89, 0x7, 0xbf, [@multicast1]}, @end]}}}}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x0, 0x4, @loopback, @mcast2, 0x10, 0x8, 0xe6, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x368, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff6502}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x0, 0x0, 0x7ff}, {0x8, 0xbc, 0xd3, 0x5}, {0x9, 0x40, 0x3, 0x4}, {0x6, 0xff, 0x3f, 0x4}, {0xfffe, 0x4, 0x44, 0x2}, {0xfff, 0x48, 0x9, 0x47233359}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000005}, 0x20044045) 09:08:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x40160, &(0x7f0000000480)}) 09:08:12 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async, rerun: 32) r2 = socket(0x9, 0x6, 0x1) (rerun: 32) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x700, 0x7f, 0xbe, {{0x18, 0x4, 0x1, 0x3b, 0x60, 0x68, 0x0, 0x2, 0x2, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xfff}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xf0, [@local, @multicast1, @private=0xa010102, @broadcast, @multicast2, @local, @local]}, @timestamp={0x44, 0x14, 0xfa, 0x0, 0x2, [0x4ce3b68, 0x7, 0x7, 0x1ac]}, @ssrr={0x89, 0x7, 0xbf, [@multicast1]}, @end]}}}}}) (rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x0, 0x4, @loopback, @mcast2, 0x10, 0x8, 0xe6, 0x9}}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x368, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff6502}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x0, 0x0, 0x7ff}, {0x8, 0xbc, 0xd3, 0x5}, {0x9, 0x40, 0x3, 0x4}, {0x6, 0xff, 0x3f, 0x4}, {0xfffe, 0x4, 0x44, 0x2}, {0xfff, 0x48, 0x9, 0x47233359}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000005}, 0x20044045) 09:08:12 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3a) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0xd, 0x0, 0x0}) (async) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0xa, 0x4, 0xf9, &(0x7f00000004c0)}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x40881) 09:08:13 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x700, 0x9, 0x7}}) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x40160, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x40160, &(0x7f0000000480)}) (async) 09:08:13 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) 09:08:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket(0x9, 0x6, 0x1) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x700, 0x7f, 0xbe, {{0x18, 0x4, 0x1, 0x3b, 0x60, 0x68, 0x0, 0x2, 0x2, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xfff}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xf0, [@local, @multicast1, @private=0xa010102, @broadcast, @multicast2, @local, @local]}, @timestamp={0x44, 0x14, 0xfa, 0x0, 0x2, [0x4ce3b68, 0x7, 0x7, 0x1ac]}, @ssrr={0x89, 0x7, 0xbf, [@multicast1]}, @end]}}}}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x0, 0x4, @loopback, @mcast2, 0x10, 0x8, 0xe6, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x368, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff6502}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x0, 0x0, 0x7ff}, {0x8, 0xbc, 0xd3, 0x5}, {0x9, 0x40, 0x3, 0x4}, {0x6, 0xff, 0x3f, 0x4}, {0xfffe, 0x4, 0x44, 0x2}, {0xfff, 0x48, 0x9, 0x47233359}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000005}, 0x20044045) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) socket(0x9, 0x6, 0x1) (async) getpeername$packet(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x700, 0x7f, 0xbe, {{0x18, 0x4, 0x1, 0x3b, 0x60, 0x68, 0x0, 0x2, 0x2, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xfff}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xf0, [@local, @multicast1, @private=0xa010102, @broadcast, @multicast2, @local, @local]}, @timestamp={0x44, 0x14, 0xfa, 0x0, 0x2, [0x4ce3b68, 0x7, 0x7, 0x1ac]}, @ssrr={0x89, 0x7, 0xbf, [@multicast1]}, @end]}}}}}) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x3, 0x0, 0x4, @loopback, @mcast2, 0x10, 0x8, 0xe6, 0x9}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x368, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff6502}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x0, 0x0, 0x7ff}, {0x8, 0xbc, 0xd3, 0x5}, {0x9, 0x40, 0x3, 0x4}, {0x6, 0xff, 0x3f, 0x4}, {0xfffe, 0x4, 0x44, 0x2}, {0xfff, 0x48, 0x9, 0x47233359}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000005}, 0x20044045) (async) 09:08:13 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x40160, &(0x7f0000000480)}) 09:08:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) 09:08:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) 09:08:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) 09:08:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) 09:08:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 09:08:13 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x700, 0x9, 0x7}}) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0xfffffffc, 0x13, 0x7, 0x9b, &(0x7f0000000040)}) 09:08:14 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:14 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) 09:08:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 09:08:14 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0xfffffffc, 0x13, 0x7, 0x9b, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0xfffffffc, 0x13, 0x7, 0x9b, &(0x7f0000000040)}) (async) 09:08:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 09:08:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0xfffffffc, 0x13, 0x7, 0x9b, &(0x7f0000000040)}) 09:08:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) 09:08:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:14 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async, rerun: 32) r3 = syz_open_pts(r2, 0x0) (rerun: 32) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x700, 0x9, 0x7}}) (rerun: 32) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async, rerun: 32) pipe(&(0x7f0000000600)) (async, rerun: 32) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) 09:08:14 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:14 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) 09:08:15 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) 09:08:15 executing program 2: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x5, 0x0, 0x4, 0x1000, 0x7fff, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x7, 0x7f, 0x81, "971f2de6"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x400, 0x0, r2}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:15 executing program 2: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x8, 0x4) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x5, 0x0, 0x4, 0x1000, 0x7fff, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x7, 0x7f, 0x81, "971f2de6"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x400, 0x0, r2}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:15 executing program 2: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x8, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x5, 0x0, 0x4, 0x1000, 0x7fff, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x7, 0x7f, 0x81, "971f2de6"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x400, 0x0, r2}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x8, 0x4) (async) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x5, 0x0, 0x4, 0x1000, 0x7fff, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0x7, 0x7f, 0x81, "971f2de6"}, 0x1000, 0x2, {&(0x7f0000000080)}, 0x400, 0x0, r2}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000480)) 09:08:15 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000480)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000480)) (async) 09:08:15 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) pipe(&(0x7f00000000c0)) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0xfffffc41) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000480)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000480)) (async) 09:08:15 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x3) 09:08:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f00000000c0)) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0xfffffc41) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) (async) 09:08:15 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f00000000c0)) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0xfffffc41) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) (async) 09:08:16 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) syz_open_pts(r2, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x610700) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x2, 0xfff, 0x6, 0x360, 0x0, "6866b684ac503556e80a59880a65ac7b3036e0"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:16 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x5}, {0x0, 0x2}], "bccca690cc501375"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) 09:08:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x610700) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x2, 0xfff, 0x6, 0x360, 0x0, "6866b684ac503556e80a59880a65ac7b3036e0"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x610700) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x2, 0xfff, 0x6, 0x360, 0x0, "6866b684ac503556e80a59880a65ac7b3036e0"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:16 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1c, 0x19, 0x0, 0x0}) 09:08:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x610700) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x2, 0xfff, 0x6, 0x360, 0x0, "6866b684ac503556e80a59880a65ac7b3036e0"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x610700) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x2, 0xfff, 0x6, 0x360, 0x0, "6866b684ac503556e80a59880a65ac7b3036e0"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x5}, {0x0, 0x2}], "bccca690cc501375"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x5}, {0x0, 0x2}], "bccca690cc501375"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) (async) 09:08:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1c, 0x19, 0x0, 0x0}) 09:08:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x4, 0x5}, {0x0, 0x2}], "bccca690cc501375"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) 09:08:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:16 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1c, 0x19, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1c, 0x19, 0x0, 0x0}) (async) 09:08:16 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:08:17 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) 09:08:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:08:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async, rerun: 32) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) (async) 09:08:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 09:08:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x10, 0x1e, 0x12b, &(0x7f0000000480)}) 09:08:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) 09:08:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0xfffffc01, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) sched_getscheduler(0x0) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)) 09:08:17 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x10, 0x1e, 0x12b, &(0x7f0000000480)}) 09:08:17 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = syz_open_pts(r5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000200)=0x20, 0x4) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000000)={0x9, 0x496}) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1f, 0x15, 0x0, &(0x7f0000000840)}) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000420bd70000000000100355a00000008000372944ee2d0a8f2d8171d3cffa393fc366c227e6415f274dc9034a85a9adee54a1f6190adbb4968c3b85d6850", @ANYRES32=0x0, @ANYBLOB="34007a8014000200a3afedab4b487b02f624cf0ed0f280581c00020015d198a822347859a1caa755b22594e8c7b853901234baa2"], 0x50}, 0x1, 0x0, 0x0, 0x280480c0}, 0x488c1) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) getsockopt$llc_int(r8, 0x10c, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 09:08:17 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:17 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0xfffffc01, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) sched_getscheduler(0x0) socket$l2tp(0x2, 0x2, 0x73) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)) 09:08:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x2}) 09:08:17 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x10, 0x1e, 0x12b, &(0x7f0000000480)}) 09:08:17 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r5, 0x5404, 0x0) (async) r6 = syz_open_pts(r5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000200)=0x20, 0x4) (async) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000000)={0x9, 0x496}) (async) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1f, 0x15, 0x0, &(0x7f0000000840)}) (async) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000420bd70000000000100355a00000008000372944ee2d0a8f2d8171d3cffa393fc366c227e6415f274dc9034a85a9adee54a1f6190adbb4968c3b85d6850", @ANYRES32=0x0, @ANYBLOB="34007a8014000200a3afedab4b487b02f624cf0ed0f280581c00020015d198a822347859a1caa755b22594e8c7b853901234baa2"], 0x50}, 0x1, 0x0, 0x0, 0x280480c0}, 0x488c1) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) (async) getsockopt$llc_int(r8, 0x10c, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 09:08:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x2}) (async) 09:08:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @null, 0xfffffc01, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) sched_getscheduler(0x0) socket$l2tp(0x2, 0x2, 0x73) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000140)) 09:08:18 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = syz_open_pts(r5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000200)=0x20, 0x4) (async) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000000)={0x9, 0x496}) (async) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1f, 0x15, 0x0, &(0x7f0000000840)}) (async) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000420bd70000000000100355a00000008000372944ee2d0a8f2d8171d3cffa393fc366c227e6415f274dc9034a85a9adee54a1f6190adbb4968c3b85d6850", @ANYRES32=0x0, @ANYBLOB="34007a8014000200a3afedab4b487b02f624cf0ed0f280581c00020015d198a822347859a1caa755b22594e8c7b853901234baa2"], 0x50}, 0x1, 0x0, 0x0, 0x280480c0}, 0x488c1) (async) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) (async) getsockopt$llc_int(r8, 0x10c, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 09:08:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x2}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local, 0x2}) (async) 09:08:18 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:18 executing program 5: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x15c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x6}, {0x7, 0x2}, {0x9, 0x5}, {0xf7, 0x6}, {0xfd, 0x2}, {0x5}, {0x8, 0x4}, {0x9, 0x4}, {0xff}, {0x4, 0x6}, {0x4}, {0xa2, 0x2}], "acc3e6b0430a0535"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x5}, {0xef, 0x3}, {0x8, 0x4}, {0x1}, {0x57, 0x6}, {0x14, 0x3}, {0x70}, {0x80, 0x5}, {0x6, 0x1}, {0x6, 0x6}], "612720cf3b023f0d"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x4}, {0xee, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x1f, 0x4}, {0x7, 0x7}, {0x8, 0x3}, {0x5, 0x3}, {0x8, 0x3}, {0x0, 0x7}, {0x40}, {0x0, 0x2}], "94b47f2053a35a02"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa2, 0x1}, {0x56, 0x2}, {0xdf, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {}, {0x4, 0x3}, {0x4c, 0x4}, {0xfd, 0x5}, {0x1, 0x4}, {0x3f, 0x7}, {0x2, 0x5}, {0x1, 0x7}], "13d05d402c54a19c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7d, 0x4}, {0x2, 0x6}, {0xff, 0x2}, {0x8, 0x2}, {0x2, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0xeb, 0x7}, {0x2, 0x7}, {0xff, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}], "9f94f33bf22ff3f1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xff, 0x2}, {0x5}, {0x9, 0x1}, {0xb5, 0x4}, {0x1f, 0x7}, {0x9, 0x2}, {}, {0x9, 0x4}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x9}, {0x7, 0x2}, {0x12, 0x6}, {0x20, 0x1}, {0x5, 0x3}], "ecd4cf6bfc64b7fb"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x5}, {0x81, 0x3}, {0x0, 0x3}], "8848e81f948f8a9f"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7f, 0x3}, {0x20, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x7, 0x7}, {0x8, 0x7}, {0x6, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0xff}, {0x9, 0x5}], "5096a2278736c62c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x6c, 0x2}, {0x9, 0x4}, {0x81, 0x1}, {0x81, 0x3}, {0x1, 0x4}, {0xd7, 0x5}], "7a8e95d904b2110c"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x848d0}, 0x4000004) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:18 executing program 2: pipe(&(0x7f0000000080)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:18 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:18 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000380)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socketpair(0x11, 0x3, 0xda00, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000340), 0x4) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fc926512f3990071000000300000000000001900"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) setsockopt$llc_int(r9, 0x10c, 0x7, &(0x7f00000001c0)=0xc278, 0x4) ioctl$KDENABIO(r8, 0x4b36) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_open_pts(r3, 0x800) ioctl$TIOCGETD(r10, 0x5424, &(0x7f0000000000)) 09:08:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="050019010b00000008002201b60300000800a0000900000005001801150000000800a10006000000080027000300000008009f0003000000630adcd01596fb27954758ac6194a6a819fa7229d449a04f5e3194743432422a83cf13b174fbc27903b1b1f2e279220cda3ac8f4783632161d5fd833c9998acc317d06fc2a2cbb6d0ccb90d49c714461862e836414d0ff3731cd023c7b1161cfb48eee12f2eef1b2a945b89f8ab9baabe55b19409154ba79547deb6b9b"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) socketpair(0x29, 0x80000, 0xa25d, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 09:08:18 executing program 5: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x15c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x6}, {0x7, 0x2}, {0x9, 0x5}, {0xf7, 0x6}, {0xfd, 0x2}, {0x5}, {0x8, 0x4}, {0x9, 0x4}, {0xff}, {0x4, 0x6}, {0x4}, {0xa2, 0x2}], "acc3e6b0430a0535"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x5}, {0xef, 0x3}, {0x8, 0x4}, {0x1}, {0x57, 0x6}, {0x14, 0x3}, {0x70}, {0x80, 0x5}, {0x6, 0x1}, {0x6, 0x6}], "612720cf3b023f0d"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x4}, {0xee, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x1f, 0x4}, {0x7, 0x7}, {0x8, 0x3}, {0x5, 0x3}, {0x8, 0x3}, {0x0, 0x7}, {0x40}, {0x0, 0x2}], "94b47f2053a35a02"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa2, 0x1}, {0x56, 0x2}, {0xdf, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {}, {0x4, 0x3}, {0x4c, 0x4}, {0xfd, 0x5}, {0x1, 0x4}, {0x3f, 0x7}, {0x2, 0x5}, {0x1, 0x7}], "13d05d402c54a19c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7d, 0x4}, {0x2, 0x6}, {0xff, 0x2}, {0x8, 0x2}, {0x2, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0xeb, 0x7}, {0x2, 0x7}, {0xff, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}], "9f94f33bf22ff3f1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xff, 0x2}, {0x5}, {0x9, 0x1}, {0xb5, 0x4}, {0x1f, 0x7}, {0x9, 0x2}, {}, {0x9, 0x4}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x9}, {0x7, 0x2}, {0x12, 0x6}, {0x20, 0x1}, {0x5, 0x3}], "ecd4cf6bfc64b7fb"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x5}, {0x81, 0x3}, {0x0, 0x3}], "8848e81f948f8a9f"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7f, 0x3}, {0x20, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x7, 0x7}, {0x8, 0x7}, {0x6, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0xff}, {0x9, 0x5}], "5096a2278736c62c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x6c, 0x2}, {0x9, 0x4}, {0x81, 0x1}, {0x81, 0x3}, {0x1, 0x4}, {0xd7, 0x5}], "7a8e95d904b2110c"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x848d0}, 0x4000004) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:18 executing program 2: pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:18 executing program 5: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x15c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x6}, {0x7, 0x2}, {0x9, 0x5}, {0xf7, 0x6}, {0xfd, 0x2}, {0x5}, {0x8, 0x4}, {0x9, 0x4}, {0xff}, {0x4, 0x6}, {0x4}, {0xa2, 0x2}], "acc3e6b0430a0535"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x5}, {0xef, 0x3}, {0x8, 0x4}, {0x1}, {0x57, 0x6}, {0x14, 0x3}, {0x70}, {0x80, 0x5}, {0x6, 0x1}, {0x6, 0x6}], "612720cf3b023f0d"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x4}, {0xee, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x1f, 0x4}, {0x7, 0x7}, {0x8, 0x3}, {0x5, 0x3}, {0x8, 0x3}, {0x0, 0x7}, {0x40}, {0x0, 0x2}], "94b47f2053a35a02"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa2, 0x1}, {0x56, 0x2}, {0xdf, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {}, {0x4, 0x3}, {0x4c, 0x4}, {0xfd, 0x5}, {0x1, 0x4}, {0x3f, 0x7}, {0x2, 0x5}, {0x1, 0x7}], "13d05d402c54a19c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7d, 0x4}, {0x2, 0x6}, {0xff, 0x2}, {0x8, 0x2}, {0x2, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0xeb, 0x7}, {0x2, 0x7}, {0xff, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}], "9f94f33bf22ff3f1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xff, 0x2}, {0x5}, {0x9, 0x1}, {0xb5, 0x4}, {0x1f, 0x7}, {0x9, 0x2}, {}, {0x9, 0x4}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x9}, {0x7, 0x2}, {0x12, 0x6}, {0x20, 0x1}, {0x5, 0x3}], "ecd4cf6bfc64b7fb"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x5}, {0x81, 0x3}, {0x0, 0x3}], "8848e81f948f8a9f"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7f, 0x3}, {0x20, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x7, 0x7}, {0x8, 0x7}, {0x6, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0xff}, {0x9, 0x5}], "5096a2278736c62c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x6c, 0x2}, {0x9, 0x4}, {0x81, 0x1}, {0x81, 0x3}, {0x1, 0x4}, {0xd7, 0x5}], "7a8e95d904b2110c"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x848d0}, 0x4000004) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x15c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4d}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3, 0x6}, {0x7, 0x2}, {0x9, 0x5}, {0xf7, 0x6}, {0xfd, 0x2}, {0x5}, {0x8, 0x4}, {0x9, 0x4}, {0xff}, {0x4, 0x6}, {0x4}, {0xa2, 0x2}], "acc3e6b0430a0535"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x0, 0x5}, {0xef, 0x3}, {0x8, 0x4}, {0x1}, {0x57, 0x6}, {0x14, 0x3}, {0x70}, {0x80, 0x5}, {0x6, 0x1}, {0x6, 0x6}], "612720cf3b023f0d"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5, 0x4}, {0xee, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x1f, 0x4}, {0x7, 0x7}, {0x8, 0x3}, {0x5, 0x3}, {0x8, 0x3}, {0x0, 0x7}, {0x40}, {0x0, 0x2}], "94b47f2053a35a02"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xa2, 0x1}, {0x56, 0x2}, {0xdf, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {}, {0x4, 0x3}, {0x4c, 0x4}, {0xfd, 0x5}, {0x1, 0x4}, {0x3f, 0x7}, {0x2, 0x5}, {0x1, 0x7}], "13d05d402c54a19c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7d, 0x4}, {0x2, 0x6}, {0xff, 0x2}, {0x8, 0x2}, {0x2, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0xeb, 0x7}, {0x2, 0x7}, {0xff, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x1}], "9f94f33bf22ff3f1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xff, 0x2}, {0x5}, {0x9, 0x1}, {0xb5, 0x4}, {0x1f, 0x7}, {0x9, 0x2}, {}, {0x9, 0x4}, {0x0, 0x3}, {0x5}, {0x0, 0x6}, {0x9}, {0x7, 0x2}, {0x12, 0x6}, {0x20, 0x1}, {0x5, 0x3}], "ecd4cf6bfc64b7fb"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x5}, {0x81, 0x3}, {0x0, 0x3}], "8848e81f948f8a9f"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7f, 0x3}, {0x20, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x7, 0x7}, {0x8, 0x7}, {0x6, 0x6}, {0x80, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0xff}, {0x9, 0x5}], "5096a2278736c62c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x1}, {0x6c, 0x2}, {0x9, 0x4}, {0x81, 0x1}, {0x81, 0x3}, {0x1, 0x4}, {0xd7, 0x5}], "7a8e95d904b2110c"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x848d0}, 0x4000004) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:18 executing program 2: pipe(&(0x7f0000000080)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="050019010b00000008002201b60300000800a0000900000005001801150000000800a10006000000080027000300000008009f0003000000630adcd01596fb27954758ac6194a6a819fa7229d449a04f5e3194743432422a83cf13b174fbc27903b1b1f2e279220cda3ac8f4783632161d5fd833c9998acc317d06fc2a2cbb6d0ccb90d49c714461862e836414d0ff3731cd023c7b1161cfb48eee12f2eef1b2a945b89f8ab9baabe55b19409154ba79547deb6b9b"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) socketpair(0x29, 0x80000, 0xa25d, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 09:08:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)={0x7, 0x3ff, 0x7fff, 0x5}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x20, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:19 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:19 executing program 2: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="050019010b00000008002201b60300000800a0000900000005001801150000000800a10006000000080027000300000008009f0003000000630adcd01596fb27954758ac6194a6a819fa7229d449a04f5e3194743432422a83cf13b174fbc27903b1b1f2e279220cda3ac8f4783632161d5fd833c9998acc317d06fc2a2cbb6d0ccb90d49c714461862e836414d0ff3731cd023c7b1161cfb48eee12f2eef1b2a945b89f8ab9baabe55b19409154ba79547deb6b9b"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) socketpair(0x29, 0x80000, 0xa25d, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 09:08:19 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:19 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000380)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r3, 0x5404, 0x0) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) socketpair(0x11, 0x3, 0xda00, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000340), 0x4) (async) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fc926512f3990071000000300000000000001900"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) setsockopt$llc_int(r9, 0x10c, 0x7, &(0x7f00000001c0)=0xc278, 0x4) (async) ioctl$KDENABIO(r8, 0x4b36) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_open_pts(r3, 0x800) ioctl$TIOCGETD(r10, 0x5424, &(0x7f0000000000)) 09:08:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)={0x7, 0x3ff, 0x7fff, 0x5}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x20, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:19 executing program 2: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1ff, 0x86a0, 0x1, 0x5, 0x7, "8fc1fe003fe26f470b3d1958686a82ca04f1a9"}) 09:08:19 executing program 2: pipe(&(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000480)={0x7, 0x3ff, 0x7fff, 0x5}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x20, 0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1ff, 0x86a0, 0x1, 0x5, 0x7, "8fc1fe003fe26f470b3d1958686a82ca04f1a9"}) 09:08:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @remote, @netrom, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000100)=0x48, 0x7f09e0b3e57feb16) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 09:08:19 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1f, 0x1c, 0x1a0, &(0x7f0000000040)}) 09:08:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1ff, 0x86a0, 0x1, 0x5, 0x7, "8fc1fe003fe26f470b3d1958686a82ca04f1a9"}) 09:08:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @remote, @netrom, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000100)=0x48, 0x7f09e0b3e57feb16) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 09:08:19 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000380)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async, rerun: 64) setsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async, rerun: 64) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async, rerun: 64) socketpair(0x11, 0x3, 0xda00, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000d00), 0x12) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000340), 0x4) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fc926512f3990071000000300000000000001900"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) setsockopt$llc_int(r9, 0x10c, 0x7, &(0x7f00000001c0)=0xc278, 0x4) (async) ioctl$KDENABIO(r8, 0x4b36) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_open_pts(r3, 0x800) ioctl$TIOCGETD(r10, 0x5424, &(0x7f0000000000)) 09:08:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1f, 0x1c, 0x1a0, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1f, 0x1c, 0x1a0, &(0x7f0000000040)}) (async) 09:08:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x83}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x24) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x19, 0x1dd, &(0x7f0000000280)="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"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 09:08:19 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1f, 0x1c, 0x1a0, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x1f, 0x1c, 0x1a0, &(0x7f0000000040)}) (async) 09:08:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x83}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x24) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x19, 0x1dd, &(0x7f0000000280)="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"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 09:08:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) accept4$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@null, @remote, @netrom, @default, @bcast, @netrom, @bcast, @rose]}, &(0x7f0000000100)=0x48, 0x7f09e0b3e57feb16) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000040)) 09:08:20 executing program 5: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:20 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x83}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x24) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x19, 0x1dd, &(0x7f0000000280)="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"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 09:08:20 executing program 5: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x9) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) 09:08:20 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x9, 0x1d7, &(0x7f00000001c0)="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"}) 09:08:20 executing program 5: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x9) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x9) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) (async) 09:08:20 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x183400, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x400, 0x4, "8802df3b221668ab63660a612314c878c6a6f0", 0x355f2c7d, 0x1}) 09:08:20 executing program 5: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x10, 0x8e, &(0x7f0000000480)="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"}) 09:08:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) (async) 09:08:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x183400, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x400, 0x4, "8802df3b221668ab63660a612314c878c6a6f0", 0x355f2c7d, 0x1}) 09:08:21 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:21 executing program 5: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), 0x4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x10, 0x8e, &(0x7f0000000480)="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"}) 09:08:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x183400, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x400, 0x4, "8802df3b221668ab63660a612314c878c6a6f0", 0x355f2c7d, 0x1}) 09:08:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x2000c051) 09:08:21 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x9, 0x1d7, &(0x7f00000001c0)="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"}) 09:08:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:21 executing program 5: setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000), 0x4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000880)={0x2, 0x0, 0x1d, 0x10, 0x8e, &(0x7f0000000480)="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"}) 09:08:21 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:21 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x2000c051) 09:08:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:21 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:22 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:22 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) 09:08:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000104}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:22 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x9, 0x1d7, &(0x7f00000001c0)="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"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) syz_open_pts(r2, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x9, 0x1d7, &(0x7f00000001c0)="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"}) (async) 09:08:22 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x11d, &(0x7f0000000040)}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x5, 0x300000, 0x5, 0x8, "801075cb87d6e7717c1d573225f4a31a0100f0"}) 09:08:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000104}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:22 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000814}, 0x2000c051) 09:08:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x11d, &(0x7f0000000040)}) (async) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x5, 0x300000, 0x5, 0x8, "801075cb87d6e7717c1d573225f4a31a0100f0"}) 09:08:22 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x600, 0x5, 0x87, 0x3f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @bcast}, [@null, @netrom, @bcast, @default, @remote, @remote, @null, @bcast]}, &(0x7f0000000400)=0x48) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x4001) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f00000002c0)={&(0x7f0000000d40)=[0x0, 0x95, 0x3, 0x4, 0x9, 0x40, 0x10001, 0x80000000, 0x8f7, 0x1000, 0x5, 0x5, 0x1, 0x3, 0x942, 0xec8, 0x1, 0x3c0, 0x9, 0xb090, 0xfff, 0x5, 0xaef, 0x4, 0x0, 0x6, 0x6, 0x10000, 0x9, 0xfffffff7, 0x3, 0x200, 0x4, 0x20, 0x1, 0x1, 0xd9f, 0x0, 0x100, 0x401, 0x5, 0x0, 0x6, 0x2, 0x5, 0x0, 0x6, 0x6, 0x2, 0x100, 0x2, 0x7, 0x1, 0x800, 0x3f, 0x6, 0x8001, 0x0, 0x2, 0x4ce, 0x6, 0x8, 0x570caf09, 0x7, 0x4, 0x8000, 0x7fffffff, 0x1, 0x29b, 0x80, 0x7, 0x7fc0000, 0x101, 0x9, 0x890d2bd, 0x4, 0x81, 0xc5, 0xd5, 0x81, 0xd4a, 0x8, 0x642, 0x6, 0x80000000, 0x8, 0x1, 0x3, 0x1, 0x1, 0x1, 0x40, 0x3, 0x7f, 0xfff, 0x4, 0x0, 0x7, 0x3, 0x4, 0x2, 0x81, 0x4, 0x6, 0x1f, 0x8, 0x2, 0x5, 0x800, 0x4, 0x5, 0x6, 0x7, 0x7fff, 0x9, 0xaf71, 0x0, 0x3, 0x3a81, 0x5, 0x1ff, 0x9, 0x7f, 0x0, 0x2, 0x8, 0xbc9, 0x5, 0x4, 0xc8, 0x37, 0x7, 0x7bc9, 0x9, 0x3, 0x0, 0x4, 0x8, 0x1f, 0x3, 0x0, 0x9, 0x5, 0x9, 0xa2, 0x5a6e, 0x8, 0x5, 0x4, 0xb1, 0x9, 0x8ab6, 0xa4, 0x8a62, 0xffff, 0x5d, 0x4, 0x2, 0x8, 0x9, 0x1, 0x7, 0x101, 0x3, 0xff, 0x2, 0x1, 0x0, 0x8, 0x4, 0xff, 0x9, 0xff, 0x5, 0x708, 0x9, 0x9, 0x6, 0x5a, 0x8000, 0x78000000, 0x54, 0x3f, 0x3, 0x8001, 0xfffffff8, 0x7fff, 0x4, 0x7f, 0x3f, 0x1000, 0x5, 0x7, 0x20, 0x10001, 0x8, 0xc25, 0x1ff, 0x9, 0x3f, 0x1199, 0xfffffffe, 0x0, 0x400, 0x0, 0xffffa8a2, 0xc0, 0x4, 0x0, 0x1, 0x6, 0x43c, 0x8, 0x5, 0xb0, 0x40, 0x7fffffff, 0x7, 0x20, 0x200, 0x0, 0x5, 0x4, 0x20, 0xffff, 0xaa, 0x80, 0x8, 0xfffffffa, 0x1, 0x7f, 0x2, 0x100, 0x200, 0x80, 0x22, 0x5, 0x7, 0x9, 0x1, 0x4, 0x8, 0xffff0001, 0x0, 0xca, 0x40, 0x18d, 0x3d, 0x3, 0x3f, 0x80, 0x0, 0x8, 0xbc, 0xffff, 0x1000, 0xaffc, 0x9, 0x6ca, 0xffff, 0x6, 0x25c2, 0x80, 0x1, 0x0, 0x6, 0x0, 0x6, 0x9, 0x709, 0x4, 0x5, 0xff, 0xfffffffc, 0x800, 0x2, 0x8, 0x80, 0x40, 0x7, 0x6, 0xd631, 0x5, 0x9, 0x200, 0x1, 0x7fff, 0x9, 0x7bf5, 0x8, 0x679d, 0x9, 0x9, 0x200, 0x9, 0x0, 0x20000000, 0x7, 0x6, 0x400, 0xfff, 0x1, 0xff99, 0x7, 0x24ff, 0xfff, 0x7, 0x2, 0x54, 0xb5, 0xfffffffc, 0x4, 0x78, 0x1, 0xffffffff, 0x6, 0x7ff, 0x215, 0x20, 0x4, 0x7fc0, 0x8, 0x0, 0x800, 0x0, 0x41, 0x16, 0x4, 0x7968, 0x7f, 0x1, 0x401, 0x101, 0xffff, 0x800, 0x3, 0x80000001, 0x7fff, 0x2, 0x1, 0x4, 0x7fffffff, 0x1ff, 0x1, 0x8, 0x7ff, 0x3, 0x6413, 0x4, 0x2, 0x6e, 0x7fffffff, 0x1f93, 0x7, 0x10001, 0x8001, 0x6, 0xfffffffa, 0x0, 0x10000, 0xfffffc01, 0x4, 0x6, 0x101, 0x2, 0xfff, 0x40, 0x9, 0x401, 0x765a, 0xcd1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xffff0001, 0x20, 0xae8, 0x4, 0x6, 0x6, 0x3, 0x0, 0x0, 0x100, 0xd, 0x184c9e5d, 0x88, 0x2, 0xffff, 0x6, 0x9, 0x6, 0x9, 0xffffffff, 0x7, 0x37d, 0x401, 0x993, 0x9, 0x0, 0x7a13, 0x2, 0x2, 0x9, 0x800, 0x5abe, 0x3f, 0x4, 0xff, 0x6, 0x1ff, 0x3dee, 0x32, 0x20, 0x56, 0xa3d2, 0x6, 0xe12, 0x1, 0x9, 0x8, 0x9, 0x9, 0x4, 0x8, 0x1, 0x9, 0x4, 0x10001, 0x3, 0x80000001, 0x3, 0x2, 0x9, 0x2, 0x80000001, 0xfffffe01, 0x67, 0x1, 0x7, 0x5, 0x400, 0x4, 0x0, 0x8, 0xfffffff9, 0x3, 0x3a0d, 0x9, 0x800000, 0x3, 0x7fffffff, 0x81, 0x1, 0x0, 0x6c6aafc4, 0x2, 0x9, 0x80000000, 0x1, 0xfffffffe, 0x8, 0xd2, 0x5, 0x3, 0x6, 0x2, 0x20, 0x4, 0x0, 0x40, 0x9, 0x24bb, 0x0, 0xeac, 0x0, 0x6, 0x9, 0x3f, 0x0, 0x8000, 0x8, 0x8, 0xfffffff8, 0x8, 0xbaca, 0x8, 0x4, 0x8000, 0x10001, 0x5, 0x1f, 0x1, 0x0, 0x85d, 0x400, 0x62, 0x80000000, 0x8, 0x608, 0x8, 0xecc, 0x80000001, 0x7f, 0x100, 0x6, 0xffffffff, 0x8, 0x1, 0x5, 0x7fffffff, 0x56, 0x80, 0x4518, 0x7af4, 0x8, 0x2, 0x9, 0xfff, 0x8000, 0x1000, 0x20, 0x401, 0x80000001, 0x9, 0x7, 0x3, 0x1f, 0x8, 0x401, 0x2, 0x2, 0xffffffff, 0x80000000, 0x100, 0x7f, 0x4, 0x6, 0x0, 0xa4d, 0x3, 0x80000000, 0xffffffe0, 0x7, 0xfff, 0x1, 0x28e4, 0x43, 0x400, 0x7fff, 0x2, 0x551c, 0x1, 0x3, 0x8b4, 0xbe0, 0x49f8, 0x6, 0x76, 0x10000, 0x5, 0x8, 0x7fff, 0x80000000, 0x2ed, 0x1, 0x8, 0x9, 0xdd4e, 0x4c87cd52, 0x1a4, 0xfffff47a, 0x0, 0x8f, 0x7, 0xfffffff9, 0x4, 0x9, 0x2, 0x9bf2, 0xfff, 0x3000000, 0x6, 0x2, 0x1, 0xfffff90d, 0x96, 0x800, 0xfffffffe, 0x4, 0x4, 0x9, 0x7, 0x5, 0x6, 0x3, 0x5, 0x30f, 0x80000000, 0xfc, 0x9, 0x1, 0x6, 0x2, 0x3, 0xffff8000, 0x1, 0x0, 0x7fff, 0x8000, 0x1b1, 0x4, 0x1, 0xe6, 0x6, 0x10000, 0x9b, 0x81, 0x4, 0x1, 0x9, 0xfffffc00, 0x8978, 0x8, 0x1, 0x2, 0x80000000, 0x7f, 0x101, 0x7fffffff, 0xffffffff, 0x7, 0x800, 0x3f, 0x9, 0x2, 0x3ff, 0xffff, 0x3, 0x6, 0x1, 0x2, 0x7fff, 0xad33, 0x52a71cd9, 0x1, 0x10000, 0x4, 0xfff, 0x7f, 0x1, 0x1f, 0x7ff, 0x0, 0x8, 0x6, 0x100, 0x9, 0x182, 0x6, 0xade0, 0xff, 0x4, 0xff, 0x2, 0x3, 0x0, 0x2, 0x8, 0x8, 0x8c, 0xc000000, 0xff, 0x7ff, 0x80000001, 0x200, 0x9b0, 0x8, 0x3d3, 0x81, 0x3ff, 0x7, 0x1, 0x10000, 0x824, 0x9, 0x8, 0x2, 0x4, 0x0, 0x40, 0x8, 0x1, 0x101, 0x5, 0x8, 0x0, 0x3800, 0x0, 0xffff, 0xffffffff, 0x3, 0xe2, 0x10001, 0xffffffaf, 0x22, 0xc37c, 0x7b00, 0x9, 0x2, 0x10001, 0x4, 0x2, 0xbbe1, 0x6, 0x0, 0xfffff31e, 0x6, 0x1, 0x2, 0x7fffffff, 0x6, 0x80000000, 0xfee, 0x3, 0x3, 0x88, 0xa18f, 0xad58, 0x2, 0xe5dc, 0x4, 0xffff, 0x3, 0x40, 0x8, 0x9, 0x200, 0xfff, 0x4, 0x6c4, 0x4, 0x100, 0x8, 0x0, 0x4, 0x4, 0x7ff, 0xffffffff, 0x6a9, 0x1ff, 0x3ff, 0x7, 0x5, 0x7, 0x8, 0xffffffc1, 0x0, 0x3f, 0x6, 0xfb, 0x8, 0xfd6, 0x0, 0x10001, 0x5, 0x7f, 0xffffffff, 0x7, 0x80, 0x7fffffff, 0x0, 0xfffffff9, 0x9, 0x0, 0x200, 0xffff, 0x401, 0x6, 0x0, 0x1, 0x5822, 0xfffffffa, 0x81, 0x0, 0x9, 0x3, 0x9, 0x8, 0x6, 0x1, 0xfaf, 0x1000, 0x7fffffff, 0x7, 0x8000, 0x7ff, 0xe1, 0x5, 0xbaa, 0xc5, 0x1, 0x80, 0x5, 0x8000, 0x2, 0x800, 0x3, 0x0, 0x814d, 0x9, 0x7, 0x5f8c, 0x82, 0x4, 0x0, 0x100, 0x4, 0x6, 0xca7, 0x6, 0xfe000, 0x80000000, 0x6, 0x6, 0x5, 0xf5e1, 0x3, 0x3, 0x2, 0x4, 0x928a, 0x8, 0x1, 0x2, 0x0, 0x0, 0x5c7, 0x800, 0x3, 0x800, 0x0, 0x4, 0x9, 0xe1, 0xda4, 0x1, 0x1000, 0x3, 0xffff, 0x9c8000, 0x80000000, 0x9, 0x1106, 0x3, 0x401, 0x7, 0x535, 0x822, 0xbf, 0x3, 0x3, 0x4, 0x400, 0x3, 0x10000, 0x7, 0x81, 0x401, 0x6db00000, 0x7, 0x7ff, 0x377f233e, 0x10001, 0xc633, 0xffff7fff, 0x20, 0x2, 0x3, 0x0, 0xffff, 0x3, 0x2, 0x5, 0x7, 0x5, 0x6, 0x5, 0x1, 0x3f, 0xff43b0b9, 0xc9b7, 0x9, 0xffffffff, 0x5, 0x3, 0x101, 0x946, 0x1000, 0x2, 0x0, 0x1, 0x4, 0x3ff, 0x9, 0xffffffff, 0x7d51, 0x400, 0x8, 0xe66, 0x7, 0x5, 0x8, 0x0, 0x8001, 0x5, 0xcfb, 0x1, 0x0, 0x5974af2a, 0xdfe, 0x8, 0x0, 0xef1, 0x7, 0x3, 0x1, 0x9, 0x20, 0x400, 0xffffffff, 0x7ff, 0x100, 0xfffffffd, 0x0, 0x2, 0x88, 0x80000000, 0x8, 0xffffff9c, 0x3, 0x9, 0x10000, 0x4, 0x400, 0x40, 0xf7f4, 0x3, 0x2, 0x40, 0x6, 0x101, 0x7fff, 0x8, 0x109, 0x1, 0x9, 0x9, 0x7, 0x9, 0x6, 0x40, 0x661, 0x6178, 0x1, 0x9, 0x7, 0xff, 0x63254afb, 0x5, 0x2, 0x100, 0x101, 0x8, 0xfff, 0x8, 0x8, 0x4, 0x5, 0xf1d, 0x8a5, 0x7, 0x9, 0x3, 0x9, 0x3ae, 0x5, 0xfffffff9, 0x0, 0x1, 0x0, 0x8001, 0x20, 0x6, 0x3, 0x1, 0x9, 0x8001, 0x2, 0x9, 0x81, 0x80000001, 0xe54d, 0x200, 0x3, 0x9, 0x3, 0x82, 0x80, 0x1, 0x9, 0xe3, 0xfffffffc, 0x4, 0x20000000, 0x5, 0xffffffc0, 0x8001, 0x3, 0x4, 0x4], 0x5, 0x400, 0x18c}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}}, 0x44) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000240)={0x2, 0x0, 0x16, 0x2, 0x2c, &(0x7f00000007c0)="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"}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 09:08:22 executing program 0: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000104}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x4001) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000104}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40000) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:23 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x11d, &(0x7f0000000040)}) r1 = syz_open_pts(r0, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x5, 0x300000, 0x5, 0x8, "801075cb87d6e7717c1d573225f4a31a0100f0"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x11d, &(0x7f0000000040)}) (async) syz_open_pts(r0, 0x1) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x5, 0x300000, 0x5, 0x8, "801075cb87d6e7717c1d573225f4a31a0100f0"}) (async) 09:08:23 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x1362761b, 0x2, @stepwise={0x0, 0xe6e7, 0x7b800001, 0x8001, 0x9, 0x7fff000}}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @rose, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000180)=0x48, 0x0) 09:08:23 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x600, 0x5, 0x87, 0x3f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @bcast}, [@null, @netrom, @bcast, @default, @remote, @remote, @null, @bcast]}, &(0x7f0000000400)=0x48) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x4001) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f00000002c0)={&(0x7f0000000d40)=[0x0, 0x95, 0x3, 0x4, 0x9, 0x40, 0x10001, 0x80000000, 0x8f7, 0x1000, 0x5, 0x5, 0x1, 0x3, 0x942, 0xec8, 0x1, 0x3c0, 0x9, 0xb090, 0xfff, 0x5, 0xaef, 0x4, 0x0, 0x6, 0x6, 0x10000, 0x9, 0xfffffff7, 0x3, 0x200, 0x4, 0x20, 0x1, 0x1, 0xd9f, 0x0, 0x100, 0x401, 0x5, 0x0, 0x6, 0x2, 0x5, 0x0, 0x6, 0x6, 0x2, 0x100, 0x2, 0x7, 0x1, 0x800, 0x3f, 0x6, 0x8001, 0x0, 0x2, 0x4ce, 0x6, 0x8, 0x570caf09, 0x7, 0x4, 0x8000, 0x7fffffff, 0x1, 0x29b, 0x80, 0x7, 0x7fc0000, 0x101, 0x9, 0x890d2bd, 0x4, 0x81, 0xc5, 0xd5, 0x81, 0xd4a, 0x8, 0x642, 0x6, 0x80000000, 0x8, 0x1, 0x3, 0x1, 0x1, 0x1, 0x40, 0x3, 0x7f, 0xfff, 0x4, 0x0, 0x7, 0x3, 0x4, 0x2, 0x81, 0x4, 0x6, 0x1f, 0x8, 0x2, 0x5, 0x800, 0x4, 0x5, 0x6, 0x7, 0x7fff, 0x9, 0xaf71, 0x0, 0x3, 0x3a81, 0x5, 0x1ff, 0x9, 0x7f, 0x0, 0x2, 0x8, 0xbc9, 0x5, 0x4, 0xc8, 0x37, 0x7, 0x7bc9, 0x9, 0x3, 0x0, 0x4, 0x8, 0x1f, 0x3, 0x0, 0x9, 0x5, 0x9, 0xa2, 0x5a6e, 0x8, 0x5, 0x4, 0xb1, 0x9, 0x8ab6, 0xa4, 0x8a62, 0xffff, 0x5d, 0x4, 0x2, 0x8, 0x9, 0x1, 0x7, 0x101, 0x3, 0xff, 0x2, 0x1, 0x0, 0x8, 0x4, 0xff, 0x9, 0xff, 0x5, 0x708, 0x9, 0x9, 0x6, 0x5a, 0x8000, 0x78000000, 0x54, 0x3f, 0x3, 0x8001, 0xfffffff8, 0x7fff, 0x4, 0x7f, 0x3f, 0x1000, 0x5, 0x7, 0x20, 0x10001, 0x8, 0xc25, 0x1ff, 0x9, 0x3f, 0x1199, 0xfffffffe, 0x0, 0x400, 0x0, 0xffffa8a2, 0xc0, 0x4, 0x0, 0x1, 0x6, 0x43c, 0x8, 0x5, 0xb0, 0x40, 0x7fffffff, 0x7, 0x20, 0x200, 0x0, 0x5, 0x4, 0x20, 0xffff, 0xaa, 0x80, 0x8, 0xfffffffa, 0x1, 0x7f, 0x2, 0x100, 0x200, 0x80, 0x22, 0x5, 0x7, 0x9, 0x1, 0x4, 0x8, 0xffff0001, 0x0, 0xca, 0x40, 0x18d, 0x3d, 0x3, 0x3f, 0x80, 0x0, 0x8, 0xbc, 0xffff, 0x1000, 0xaffc, 0x9, 0x6ca, 0xffff, 0x6, 0x25c2, 0x80, 0x1, 0x0, 0x6, 0x0, 0x6, 0x9, 0x709, 0x4, 0x5, 0xff, 0xfffffffc, 0x800, 0x2, 0x8, 0x80, 0x40, 0x7, 0x6, 0xd631, 0x5, 0x9, 0x200, 0x1, 0x7fff, 0x9, 0x7bf5, 0x8, 0x679d, 0x9, 0x9, 0x200, 0x9, 0x0, 0x20000000, 0x7, 0x6, 0x400, 0xfff, 0x1, 0xff99, 0x7, 0x24ff, 0xfff, 0x7, 0x2, 0x54, 0xb5, 0xfffffffc, 0x4, 0x78, 0x1, 0xffffffff, 0x6, 0x7ff, 0x215, 0x20, 0x4, 0x7fc0, 0x8, 0x0, 0x800, 0x0, 0x41, 0x16, 0x4, 0x7968, 0x7f, 0x1, 0x401, 0x101, 0xffff, 0x800, 0x3, 0x80000001, 0x7fff, 0x2, 0x1, 0x4, 0x7fffffff, 0x1ff, 0x1, 0x8, 0x7ff, 0x3, 0x6413, 0x4, 0x2, 0x6e, 0x7fffffff, 0x1f93, 0x7, 0x10001, 0x8001, 0x6, 0xfffffffa, 0x0, 0x10000, 0xfffffc01, 0x4, 0x6, 0x101, 0x2, 0xfff, 0x40, 0x9, 0x401, 0x765a, 0xcd1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xffff0001, 0x20, 0xae8, 0x4, 0x6, 0x6, 0x3, 0x0, 0x0, 0x100, 0xd, 0x184c9e5d, 0x88, 0x2, 0xffff, 0x6, 0x9, 0x6, 0x9, 0xffffffff, 0x7, 0x37d, 0x401, 0x993, 0x9, 0x0, 0x7a13, 0x2, 0x2, 0x9, 0x800, 0x5abe, 0x3f, 0x4, 0xff, 0x6, 0x1ff, 0x3dee, 0x32, 0x20, 0x56, 0xa3d2, 0x6, 0xe12, 0x1, 0x9, 0x8, 0x9, 0x9, 0x4, 0x8, 0x1, 0x9, 0x4, 0x10001, 0x3, 0x80000001, 0x3, 0x2, 0x9, 0x2, 0x80000001, 0xfffffe01, 0x67, 0x1, 0x7, 0x5, 0x400, 0x4, 0x0, 0x8, 0xfffffff9, 0x3, 0x3a0d, 0x9, 0x800000, 0x3, 0x7fffffff, 0x81, 0x1, 0x0, 0x6c6aafc4, 0x2, 0x9, 0x80000000, 0x1, 0xfffffffe, 0x8, 0xd2, 0x5, 0x3, 0x6, 0x2, 0x20, 0x4, 0x0, 0x40, 0x9, 0x24bb, 0x0, 0xeac, 0x0, 0x6, 0x9, 0x3f, 0x0, 0x8000, 0x8, 0x8, 0xfffffff8, 0x8, 0xbaca, 0x8, 0x4, 0x8000, 0x10001, 0x5, 0x1f, 0x1, 0x0, 0x85d, 0x400, 0x62, 0x80000000, 0x8, 0x608, 0x8, 0xecc, 0x80000001, 0x7f, 0x100, 0x6, 0xffffffff, 0x8, 0x1, 0x5, 0x7fffffff, 0x56, 0x80, 0x4518, 0x7af4, 0x8, 0x2, 0x9, 0xfff, 0x8000, 0x1000, 0x20, 0x401, 0x80000001, 0x9, 0x7, 0x3, 0x1f, 0x8, 0x401, 0x2, 0x2, 0xffffffff, 0x80000000, 0x100, 0x7f, 0x4, 0x6, 0x0, 0xa4d, 0x3, 0x80000000, 0xffffffe0, 0x7, 0xfff, 0x1, 0x28e4, 0x43, 0x400, 0x7fff, 0x2, 0x551c, 0x1, 0x3, 0x8b4, 0xbe0, 0x49f8, 0x6, 0x76, 0x10000, 0x5, 0x8, 0x7fff, 0x80000000, 0x2ed, 0x1, 0x8, 0x9, 0xdd4e, 0x4c87cd52, 0x1a4, 0xfffff47a, 0x0, 0x8f, 0x7, 0xfffffff9, 0x4, 0x9, 0x2, 0x9bf2, 0xfff, 0x3000000, 0x6, 0x2, 0x1, 0xfffff90d, 0x96, 0x800, 0xfffffffe, 0x4, 0x4, 0x9, 0x7, 0x5, 0x6, 0x3, 0x5, 0x30f, 0x80000000, 0xfc, 0x9, 0x1, 0x6, 0x2, 0x3, 0xffff8000, 0x1, 0x0, 0x7fff, 0x8000, 0x1b1, 0x4, 0x1, 0xe6, 0x6, 0x10000, 0x9b, 0x81, 0x4, 0x1, 0x9, 0xfffffc00, 0x8978, 0x8, 0x1, 0x2, 0x80000000, 0x7f, 0x101, 0x7fffffff, 0xffffffff, 0x7, 0x800, 0x3f, 0x9, 0x2, 0x3ff, 0xffff, 0x3, 0x6, 0x1, 0x2, 0x7fff, 0xad33, 0x52a71cd9, 0x1, 0x10000, 0x4, 0xfff, 0x7f, 0x1, 0x1f, 0x7ff, 0x0, 0x8, 0x6, 0x100, 0x9, 0x182, 0x6, 0xade0, 0xff, 0x4, 0xff, 0x2, 0x3, 0x0, 0x2, 0x8, 0x8, 0x8c, 0xc000000, 0xff, 0x7ff, 0x80000001, 0x200, 0x9b0, 0x8, 0x3d3, 0x81, 0x3ff, 0x7, 0x1, 0x10000, 0x824, 0x9, 0x8, 0x2, 0x4, 0x0, 0x40, 0x8, 0x1, 0x101, 0x5, 0x8, 0x0, 0x3800, 0x0, 0xffff, 0xffffffff, 0x3, 0xe2, 0x10001, 0xffffffaf, 0x22, 0xc37c, 0x7b00, 0x9, 0x2, 0x10001, 0x4, 0x2, 0xbbe1, 0x6, 0x0, 0xfffff31e, 0x6, 0x1, 0x2, 0x7fffffff, 0x6, 0x80000000, 0xfee, 0x3, 0x3, 0x88, 0xa18f, 0xad58, 0x2, 0xe5dc, 0x4, 0xffff, 0x3, 0x40, 0x8, 0x9, 0x200, 0xfff, 0x4, 0x6c4, 0x4, 0x100, 0x8, 0x0, 0x4, 0x4, 0x7ff, 0xffffffff, 0x6a9, 0x1ff, 0x3ff, 0x7, 0x5, 0x7, 0x8, 0xffffffc1, 0x0, 0x3f, 0x6, 0xfb, 0x8, 0xfd6, 0x0, 0x10001, 0x5, 0x7f, 0xffffffff, 0x7, 0x80, 0x7fffffff, 0x0, 0xfffffff9, 0x9, 0x0, 0x200, 0xffff, 0x401, 0x6, 0x0, 0x1, 0x5822, 0xfffffffa, 0x81, 0x0, 0x9, 0x3, 0x9, 0x8, 0x6, 0x1, 0xfaf, 0x1000, 0x7fffffff, 0x7, 0x8000, 0x7ff, 0xe1, 0x5, 0xbaa, 0xc5, 0x1, 0x80, 0x5, 0x8000, 0x2, 0x800, 0x3, 0x0, 0x814d, 0x9, 0x7, 0x5f8c, 0x82, 0x4, 0x0, 0x100, 0x4, 0x6, 0xca7, 0x6, 0xfe000, 0x80000000, 0x6, 0x6, 0x5, 0xf5e1, 0x3, 0x3, 0x2, 0x4, 0x928a, 0x8, 0x1, 0x2, 0x0, 0x0, 0x5c7, 0x800, 0x3, 0x800, 0x0, 0x4, 0x9, 0xe1, 0xda4, 0x1, 0x1000, 0x3, 0xffff, 0x9c8000, 0x80000000, 0x9, 0x1106, 0x3, 0x401, 0x7, 0x535, 0x822, 0xbf, 0x3, 0x3, 0x4, 0x400, 0x3, 0x10000, 0x7, 0x81, 0x401, 0x6db00000, 0x7, 0x7ff, 0x377f233e, 0x10001, 0xc633, 0xffff7fff, 0x20, 0x2, 0x3, 0x0, 0xffff, 0x3, 0x2, 0x5, 0x7, 0x5, 0x6, 0x5, 0x1, 0x3f, 0xff43b0b9, 0xc9b7, 0x9, 0xffffffff, 0x5, 0x3, 0x101, 0x946, 0x1000, 0x2, 0x0, 0x1, 0x4, 0x3ff, 0x9, 0xffffffff, 0x7d51, 0x400, 0x8, 0xe66, 0x7, 0x5, 0x8, 0x0, 0x8001, 0x5, 0xcfb, 0x1, 0x0, 0x5974af2a, 0xdfe, 0x8, 0x0, 0xef1, 0x7, 0x3, 0x1, 0x9, 0x20, 0x400, 0xffffffff, 0x7ff, 0x100, 0xfffffffd, 0x0, 0x2, 0x88, 0x80000000, 0x8, 0xffffff9c, 0x3, 0x9, 0x10000, 0x4, 0x400, 0x40, 0xf7f4, 0x3, 0x2, 0x40, 0x6, 0x101, 0x7fff, 0x8, 0x109, 0x1, 0x9, 0x9, 0x7, 0x9, 0x6, 0x40, 0x661, 0x6178, 0x1, 0x9, 0x7, 0xff, 0x63254afb, 0x5, 0x2, 0x100, 0x101, 0x8, 0xfff, 0x8, 0x8, 0x4, 0x5, 0xf1d, 0x8a5, 0x7, 0x9, 0x3, 0x9, 0x3ae, 0x5, 0xfffffff9, 0x0, 0x1, 0x0, 0x8001, 0x20, 0x6, 0x3, 0x1, 0x9, 0x8001, 0x2, 0x9, 0x81, 0x80000001, 0xe54d, 0x200, 0x3, 0x9, 0x3, 0x82, 0x80, 0x1, 0x9, 0xe3, 0xfffffffc, 0x4, 0x20000000, 0x5, 0xffffffc0, 0x8001, 0x3, 0x4, 0x4], 0x5, 0x400, 0x18c}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}}, 0x44) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000240)={0x2, 0x0, 0x16, 0x2, 0x2c, &(0x7f00000007c0)="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"}) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 09:08:23 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0xfffffff7}, 0x0, 0x0, 0xfd}) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:23 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x1362761b, 0x2, @stepwise={0x0, 0xe6e7, 0x7b800001, 0x8001, 0x9, 0x7fff000}}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @rose, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000180)=0x48, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x1362761b, 0x2, @stepwise={0x0, 0xe6e7, 0x7b800001, 0x8001, 0x9, 0x7fff000}}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @rose, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000180)=0x48, 0x0) (async) 09:08:23 executing program 2: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x600, 0x5, 0x87, 0x3f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @bcast}, [@null, @netrom, @bcast, @default, @remote, @remote, @null, @bcast]}, &(0x7f0000000400)=0x48) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x4001) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f00000002c0)={&(0x7f0000000d40)=[0x0, 0x95, 0x3, 0x4, 0x9, 0x40, 0x10001, 0x80000000, 0x8f7, 0x1000, 0x5, 0x5, 0x1, 0x3, 0x942, 0xec8, 0x1, 0x3c0, 0x9, 0xb090, 0xfff, 0x5, 0xaef, 0x4, 0x0, 0x6, 0x6, 0x10000, 0x9, 0xfffffff7, 0x3, 0x200, 0x4, 0x20, 0x1, 0x1, 0xd9f, 0x0, 0x100, 0x401, 0x5, 0x0, 0x6, 0x2, 0x5, 0x0, 0x6, 0x6, 0x2, 0x100, 0x2, 0x7, 0x1, 0x800, 0x3f, 0x6, 0x8001, 0x0, 0x2, 0x4ce, 0x6, 0x8, 0x570caf09, 0x7, 0x4, 0x8000, 0x7fffffff, 0x1, 0x29b, 0x80, 0x7, 0x7fc0000, 0x101, 0x9, 0x890d2bd, 0x4, 0x81, 0xc5, 0xd5, 0x81, 0xd4a, 0x8, 0x642, 0x6, 0x80000000, 0x8, 0x1, 0x3, 0x1, 0x1, 0x1, 0x40, 0x3, 0x7f, 0xfff, 0x4, 0x0, 0x7, 0x3, 0x4, 0x2, 0x81, 0x4, 0x6, 0x1f, 0x8, 0x2, 0x5, 0x800, 0x4, 0x5, 0x6, 0x7, 0x7fff, 0x9, 0xaf71, 0x0, 0x3, 0x3a81, 0x5, 0x1ff, 0x9, 0x7f, 0x0, 0x2, 0x8, 0xbc9, 0x5, 0x4, 0xc8, 0x37, 0x7, 0x7bc9, 0x9, 0x3, 0x0, 0x4, 0x8, 0x1f, 0x3, 0x0, 0x9, 0x5, 0x9, 0xa2, 0x5a6e, 0x8, 0x5, 0x4, 0xb1, 0x9, 0x8ab6, 0xa4, 0x8a62, 0xffff, 0x5d, 0x4, 0x2, 0x8, 0x9, 0x1, 0x7, 0x101, 0x3, 0xff, 0x2, 0x1, 0x0, 0x8, 0x4, 0xff, 0x9, 0xff, 0x5, 0x708, 0x9, 0x9, 0x6, 0x5a, 0x8000, 0x78000000, 0x54, 0x3f, 0x3, 0x8001, 0xfffffff8, 0x7fff, 0x4, 0x7f, 0x3f, 0x1000, 0x5, 0x7, 0x20, 0x10001, 0x8, 0xc25, 0x1ff, 0x9, 0x3f, 0x1199, 0xfffffffe, 0x0, 0x400, 0x0, 0xffffa8a2, 0xc0, 0x4, 0x0, 0x1, 0x6, 0x43c, 0x8, 0x5, 0xb0, 0x40, 0x7fffffff, 0x7, 0x20, 0x200, 0x0, 0x5, 0x4, 0x20, 0xffff, 0xaa, 0x80, 0x8, 0xfffffffa, 0x1, 0x7f, 0x2, 0x100, 0x200, 0x80, 0x22, 0x5, 0x7, 0x9, 0x1, 0x4, 0x8, 0xffff0001, 0x0, 0xca, 0x40, 0x18d, 0x3d, 0x3, 0x3f, 0x80, 0x0, 0x8, 0xbc, 0xffff, 0x1000, 0xaffc, 0x9, 0x6ca, 0xffff, 0x6, 0x25c2, 0x80, 0x1, 0x0, 0x6, 0x0, 0x6, 0x9, 0x709, 0x4, 0x5, 0xff, 0xfffffffc, 0x800, 0x2, 0x8, 0x80, 0x40, 0x7, 0x6, 0xd631, 0x5, 0x9, 0x200, 0x1, 0x7fff, 0x9, 0x7bf5, 0x8, 0x679d, 0x9, 0x9, 0x200, 0x9, 0x0, 0x20000000, 0x7, 0x6, 0x400, 0xfff, 0x1, 0xff99, 0x7, 0x24ff, 0xfff, 0x7, 0x2, 0x54, 0xb5, 0xfffffffc, 0x4, 0x78, 0x1, 0xffffffff, 0x6, 0x7ff, 0x215, 0x20, 0x4, 0x7fc0, 0x8, 0x0, 0x800, 0x0, 0x41, 0x16, 0x4, 0x7968, 0x7f, 0x1, 0x401, 0x101, 0xffff, 0x800, 0x3, 0x80000001, 0x7fff, 0x2, 0x1, 0x4, 0x7fffffff, 0x1ff, 0x1, 0x8, 0x7ff, 0x3, 0x6413, 0x4, 0x2, 0x6e, 0x7fffffff, 0x1f93, 0x7, 0x10001, 0x8001, 0x6, 0xfffffffa, 0x0, 0x10000, 0xfffffc01, 0x4, 0x6, 0x101, 0x2, 0xfff, 0x40, 0x9, 0x401, 0x765a, 0xcd1, 0x1, 0x6, 0x0, 0x0, 0x0, 0xffff0001, 0x20, 0xae8, 0x4, 0x6, 0x6, 0x3, 0x0, 0x0, 0x100, 0xd, 0x184c9e5d, 0x88, 0x2, 0xffff, 0x6, 0x9, 0x6, 0x9, 0xffffffff, 0x7, 0x37d, 0x401, 0x993, 0x9, 0x0, 0x7a13, 0x2, 0x2, 0x9, 0x800, 0x5abe, 0x3f, 0x4, 0xff, 0x6, 0x1ff, 0x3dee, 0x32, 0x20, 0x56, 0xa3d2, 0x6, 0xe12, 0x1, 0x9, 0x8, 0x9, 0x9, 0x4, 0x8, 0x1, 0x9, 0x4, 0x10001, 0x3, 0x80000001, 0x3, 0x2, 0x9, 0x2, 0x80000001, 0xfffffe01, 0x67, 0x1, 0x7, 0x5, 0x400, 0x4, 0x0, 0x8, 0xfffffff9, 0x3, 0x3a0d, 0x9, 0x800000, 0x3, 0x7fffffff, 0x81, 0x1, 0x0, 0x6c6aafc4, 0x2, 0x9, 0x80000000, 0x1, 0xfffffffe, 0x8, 0xd2, 0x5, 0x3, 0x6, 0x2, 0x20, 0x4, 0x0, 0x40, 0x9, 0x24bb, 0x0, 0xeac, 0x0, 0x6, 0x9, 0x3f, 0x0, 0x8000, 0x8, 0x8, 0xfffffff8, 0x8, 0xbaca, 0x8, 0x4, 0x8000, 0x10001, 0x5, 0x1f, 0x1, 0x0, 0x85d, 0x400, 0x62, 0x80000000, 0x8, 0x608, 0x8, 0xecc, 0x80000001, 0x7f, 0x100, 0x6, 0xffffffff, 0x8, 0x1, 0x5, 0x7fffffff, 0x56, 0x80, 0x4518, 0x7af4, 0x8, 0x2, 0x9, 0xfff, 0x8000, 0x1000, 0x20, 0x401, 0x80000001, 0x9, 0x7, 0x3, 0x1f, 0x8, 0x401, 0x2, 0x2, 0xffffffff, 0x80000000, 0x100, 0x7f, 0x4, 0x6, 0x0, 0xa4d, 0x3, 0x80000000, 0xffffffe0, 0x7, 0xfff, 0x1, 0x28e4, 0x43, 0x400, 0x7fff, 0x2, 0x551c, 0x1, 0x3, 0x8b4, 0xbe0, 0x49f8, 0x6, 0x76, 0x10000, 0x5, 0x8, 0x7fff, 0x80000000, 0x2ed, 0x1, 0x8, 0x9, 0xdd4e, 0x4c87cd52, 0x1a4, 0xfffff47a, 0x0, 0x8f, 0x7, 0xfffffff9, 0x4, 0x9, 0x2, 0x9bf2, 0xfff, 0x3000000, 0x6, 0x2, 0x1, 0xfffff90d, 0x96, 0x800, 0xfffffffe, 0x4, 0x4, 0x9, 0x7, 0x5, 0x6, 0x3, 0x5, 0x30f, 0x80000000, 0xfc, 0x9, 0x1, 0x6, 0x2, 0x3, 0xffff8000, 0x1, 0x0, 0x7fff, 0x8000, 0x1b1, 0x4, 0x1, 0xe6, 0x6, 0x10000, 0x9b, 0x81, 0x4, 0x1, 0x9, 0xfffffc00, 0x8978, 0x8, 0x1, 0x2, 0x80000000, 0x7f, 0x101, 0x7fffffff, 0xffffffff, 0x7, 0x800, 0x3f, 0x9, 0x2, 0x3ff, 0xffff, 0x3, 0x6, 0x1, 0x2, 0x7fff, 0xad33, 0x52a71cd9, 0x1, 0x10000, 0x4, 0xfff, 0x7f, 0x1, 0x1f, 0x7ff, 0x0, 0x8, 0x6, 0x100, 0x9, 0x182, 0x6, 0xade0, 0xff, 0x4, 0xff, 0x2, 0x3, 0x0, 0x2, 0x8, 0x8, 0x8c, 0xc000000, 0xff, 0x7ff, 0x80000001, 0x200, 0x9b0, 0x8, 0x3d3, 0x81, 0x3ff, 0x7, 0x1, 0x10000, 0x824, 0x9, 0x8, 0x2, 0x4, 0x0, 0x40, 0x8, 0x1, 0x101, 0x5, 0x8, 0x0, 0x3800, 0x0, 0xffff, 0xffffffff, 0x3, 0xe2, 0x10001, 0xffffffaf, 0x22, 0xc37c, 0x7b00, 0x9, 0x2, 0x10001, 0x4, 0x2, 0xbbe1, 0x6, 0x0, 0xfffff31e, 0x6, 0x1, 0x2, 0x7fffffff, 0x6, 0x80000000, 0xfee, 0x3, 0x3, 0x88, 0xa18f, 0xad58, 0x2, 0xe5dc, 0x4, 0xffff, 0x3, 0x40, 0x8, 0x9, 0x200, 0xfff, 0x4, 0x6c4, 0x4, 0x100, 0x8, 0x0, 0x4, 0x4, 0x7ff, 0xffffffff, 0x6a9, 0x1ff, 0x3ff, 0x7, 0x5, 0x7, 0x8, 0xffffffc1, 0x0, 0x3f, 0x6, 0xfb, 0x8, 0xfd6, 0x0, 0x10001, 0x5, 0x7f, 0xffffffff, 0x7, 0x80, 0x7fffffff, 0x0, 0xfffffff9, 0x9, 0x0, 0x200, 0xffff, 0x401, 0x6, 0x0, 0x1, 0x5822, 0xfffffffa, 0x81, 0x0, 0x9, 0x3, 0x9, 0x8, 0x6, 0x1, 0xfaf, 0x1000, 0x7fffffff, 0x7, 0x8000, 0x7ff, 0xe1, 0x5, 0xbaa, 0xc5, 0x1, 0x80, 0x5, 0x8000, 0x2, 0x800, 0x3, 0x0, 0x814d, 0x9, 0x7, 0x5f8c, 0x82, 0x4, 0x0, 0x100, 0x4, 0x6, 0xca7, 0x6, 0xfe000, 0x80000000, 0x6, 0x6, 0x5, 0xf5e1, 0x3, 0x3, 0x2, 0x4, 0x928a, 0x8, 0x1, 0x2, 0x0, 0x0, 0x5c7, 0x800, 0x3, 0x800, 0x0, 0x4, 0x9, 0xe1, 0xda4, 0x1, 0x1000, 0x3, 0xffff, 0x9c8000, 0x80000000, 0x9, 0x1106, 0x3, 0x401, 0x7, 0x535, 0x822, 0xbf, 0x3, 0x3, 0x4, 0x400, 0x3, 0x10000, 0x7, 0x81, 0x401, 0x6db00000, 0x7, 0x7ff, 0x377f233e, 0x10001, 0xc633, 0xffff7fff, 0x20, 0x2, 0x3, 0x0, 0xffff, 0x3, 0x2, 0x5, 0x7, 0x5, 0x6, 0x5, 0x1, 0x3f, 0xff43b0b9, 0xc9b7, 0x9, 0xffffffff, 0x5, 0x3, 0x101, 0x946, 0x1000, 0x2, 0x0, 0x1, 0x4, 0x3ff, 0x9, 0xffffffff, 0x7d51, 0x400, 0x8, 0xe66, 0x7, 0x5, 0x8, 0x0, 0x8001, 0x5, 0xcfb, 0x1, 0x0, 0x5974af2a, 0xdfe, 0x8, 0x0, 0xef1, 0x7, 0x3, 0x1, 0x9, 0x20, 0x400, 0xffffffff, 0x7ff, 0x100, 0xfffffffd, 0x0, 0x2, 0x88, 0x80000000, 0x8, 0xffffff9c, 0x3, 0x9, 0x10000, 0x4, 0x400, 0x40, 0xf7f4, 0x3, 0x2, 0x40, 0x6, 0x101, 0x7fff, 0x8, 0x109, 0x1, 0x9, 0x9, 0x7, 0x9, 0x6, 0x40, 0x661, 0x6178, 0x1, 0x9, 0x7, 0xff, 0x63254afb, 0x5, 0x2, 0x100, 0x101, 0x8, 0xfff, 0x8, 0x8, 0x4, 0x5, 0xf1d, 0x8a5, 0x7, 0x9, 0x3, 0x9, 0x3ae, 0x5, 0xfffffff9, 0x0, 0x1, 0x0, 0x8001, 0x20, 0x6, 0x3, 0x1, 0x9, 0x8001, 0x2, 0x9, 0x81, 0x80000001, 0xe54d, 0x200, 0x3, 0x9, 0x3, 0x82, 0x80, 0x1, 0x9, 0xe3, 0xfffffffc, 0x4, 0x20000000, 0x5, 0xffffffc0, 0x8001, 0x3, 0x4, 0x4], 0x5, 0x400, 0x18c}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}}, 0x44) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, &(0x7f0000000d00), 0x12) (async) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f0000000240)={0x2, 0x0, 0x16, 0x2, 0x2c, &(0x7f00000007c0)="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"}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 09:08:23 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:23 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x3, 0x1362761b, 0x2, @stepwise={0x0, 0xe6e7, 0x7b800001, 0x8001, 0x9, 0x7fff000}}) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @rose, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000180)=0x48, 0x0) 09:08:23 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000200)=0x10000) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000101) 09:08:24 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000200)=0x10000) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000101) 09:08:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDENABIO(r0, 0x4b36) 09:08:24 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:24 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0xfffffff7}, 0x0, 0x0, 0xfd}) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$KDENABIO(r0, 0x4b36) 09:08:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION(r1, 0x79f, &(0x7f0000000200)=0x10000) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000101) 09:08:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x20003, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_pts(0xffffffffffffffff, 0x121000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000480)="c5f39d951d451edf7636a2afa72bad4ae92327828365042ddaf6f7686b06795ec8aaf488c75c5a857176ace97d57e7fe17526a49203b267ea686cfac3889b94a42abadf23ecfaa68ea7b4c7c65a3c9224cc5e2cef2253c5473885a2c1f693cc0df8a8477db3a6691b3fc9438e0e978dc3e155bcd8e572ff853956e7e0eabe8e46a381db82dd96b7d6153b65cd3bd5d3697717eaf8f3783801c8bf430f924cf") 09:08:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDENABIO(r0, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$KDENABIO(r0, 0x4b36) (async) 09:08:24 executing program 2: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x40, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x20003, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_pts(0xffffffffffffffff, 0x121000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000480)="c5f39d951d451edf7636a2afa72bad4ae92327828365042ddaf6f7686b06795ec8aaf488c75c5a857176ace97d57e7fe17526a49203b267ea686cfac3889b94a42abadf23ecfaa68ea7b4c7c65a3c9224cc5e2cef2253c5473885a2c1f693cc0df8a8477db3a6691b3fc9438e0e978dc3e155bcd8e572ff853956e7e0eabe8e46a381db82dd96b7d6153b65cd3bd5d3697717eaf8f3783801c8bf430f924cf") syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x20003, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_pts(0xffffffffffffffff, 0x121000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) (async) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000480)="c5f39d951d451edf7636a2afa72bad4ae92327828365042ddaf6f7686b06795ec8aaf488c75c5a857176ace97d57e7fe17526a49203b267ea686cfac3889b94a42abadf23ecfaa68ea7b4c7c65a3c9224cc5e2cef2253c5473885a2c1f693cc0df8a8477db3a6691b3fc9438e0e978dc3e155bcd8e572ff853956e7e0eabe8e46a381db82dd96b7d6153b65cd3bd5d3697717eaf8f3783801c8bf430f924cf") (async) 09:08:24 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x409041, 0x0) syz_open_pts(r0, 0x22000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x208c81, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x15, 0x195, &(0x7f0000000280)="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"}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0xfffffffa, 0x8}) 09:08:24 executing program 2: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x40, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x40, 0x4) (async) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x20003, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) syz_open_pts(0xffffffffffffffff, 0x121000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000480)="c5f39d951d451edf7636a2afa72bad4ae92327828365042ddaf6f7686b06795ec8aaf488c75c5a857176ace97d57e7fe17526a49203b267ea686cfac3889b94a42abadf23ecfaa68ea7b4c7c65a3c9224cc5e2cef2253c5473885a2c1f693cc0df8a8477db3a6691b3fc9438e0e978dc3e155bcd8e572ff853956e7e0eabe8e46a381db82dd96b7d6153b65cd3bd5d3697717eaf8f3783801c8bf430f924cf") 09:08:24 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:24 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0xfffffff7}, 0x0, 0x0, 0xfd}) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xc, 0x1d, 0x160, &(0x7f0000000040)}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x20, "9906eb0ce100ed3219fd67b7a0fd7c46eb9a793010ec167a7b9f4b95ca97888517f809067fb6c14f8adc3f6e175b7cb0e3d6af265f4ca95a303f8e41e2df0cfe5ed09701fa80a39c4f5804eef08e91aafcc57606b441ee3cef8c4ceb9ff92c77df9afffb7aa41b5ea863dd7fb620de284af6443614d36419c0fb61c562b4281891c8fcbf6e9054cda41c327f8a3116999ff5b813ca30933b138143d111ab8b757b21ada2e5f735e758ce291925757b219e2a7c648fc5f8b6aa4ebaea599801976fa595043788a4654c49a365e9aaedac9e20541901a5f9194fa7905c1e9da159cca7ed8ac5c4f3ff6d224b862d7cb0b86a2a5cac216b863fe13ca319f13a30d1dbc3b759fe8f9ccb01bf0a7aaa605b6913fe00e4d2919a0b87be3a52d8ee496a9badb2d8d3d5fb3b0f681fc041784524ccb0381e1105bcbf1e3a71339a86a941c56a45ca5708b31732f42755b2ec55f8115db2f2356a0db466f8157efcf0df34f4c851fd09fd15fd3e7e89d5b173dfeeadb1a74aff74c35f511294eeec902e91f442219b2cd82fc7ec5b2c66f1bea80353286d3628fe17004c3c9819459895315384a009a597bf984509d99a883b499eed92985c13e857d2dd9fd8fa28c7a0e0f2da6bd6cbe4a0add58adeab1f2518c78f34f5faad68113de2a44c7c90c4061adc53c4640bac34eb04ff9aefc671a72d34393215974e98657b8dfc3cb3faaeb2"}) 09:08:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x409041, 0x0) (async) syz_open_pts(r0, 0x22000) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x208c81, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x15, 0x195, &(0x7f0000000280)="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"}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0xfffffffa, 0x8}) 09:08:25 executing program 2: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x40, 0x4) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xc, 0x1d, 0x160, &(0x7f0000000040)}) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x20, "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"}) 09:08:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x80}, 0x1, 0x0, 0x6}) r2 = syz_open_pts(0xffffffffffffffff, 0x2a0040) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x8, 0x7, 0x8000, 0x1, 0xa, "d7a7f9080467e7e9"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xcb, 0x6, 0x6, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x7, 0x6, 0x3}}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xc, 0x1d, 0x160, &(0x7f0000000040)}) (async) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x20, "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"}) 09:08:25 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x409041, 0x0) syz_open_pts(r0, 0x22000) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x208c81, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCCONS(r2, 0x541d) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x15, 0x195, &(0x7f0000000280)="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"}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0xfffffffa, 0x8}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x409041, 0x0) (async) syz_open_pts(r0, 0x22000) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x208c81, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCCONS(r2, 0x541d) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) (async) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x7, 0x15, 0x195, &(0x7f0000000280)="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"}) (async) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0xfffffffa, 0x8}) (async) 09:08:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x80}, 0x1, 0x0, 0x6}) (async) r2 = syz_open_pts(0xffffffffffffffff, 0x2a0040) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x8, 0x7, 0x8000, 0x1, 0xa, "d7a7f9080467e7e9"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xcb, 0x6, 0x6, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x7, 0x6, 0x3}}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600080, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:25 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:25 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket(0x2, 0x3, 0x9) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x81) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x80}, 0x1, 0x0, 0x6}) r2 = syz_open_pts(0xffffffffffffffff, 0x2a0040) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x8, 0x7, 0x8000, 0x1, 0xa, "d7a7f9080467e7e9"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xcb, 0x6, 0x6, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x7, 0x6, 0x3}}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x80}, 0x1, 0x0, 0x6}) (async) syz_open_pts(0xffffffffffffffff, 0x2a0040) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x8, 0x7, 0x8000, 0x1, 0xa, "d7a7f9080467e7e9"}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xcb, 0x6, 0x6, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x7, 0x6, 0x3}}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600080, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600080, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x11, 0x0, 0x0}) 09:08:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x11, 0x0, 0x0}) 09:08:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r1, 0x5425, 0x6) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600080, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r1, 0x5425, 0x6) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x11, 0x0, 0x0}) 09:08:26 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r2, 0x4b36) socket$l2tp(0x2, 0x2, 0x73) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) 09:08:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xc) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r2, 0x4b36) (async) socket$l2tp(0x2, 0x2, 0x73) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) 09:08:26 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r1, 0x5425, 0x6) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000080)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSBRKP(r1, 0x5425, 0x6) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:26 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:26 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async, rerun: 64) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async, rerun: 64) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket(0x2, 0x3, 0x9) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x81) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:26 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x9, 0x3f, 0x22, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x1, 0x8000, 0x200, 0x4}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r8, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x9ec, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe08f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x6d, 0x5, 0xb1}, {0x1, 0x8, 0xa, 0xb72}, {0x2, 0x3f, 0x73, 0x8}, {0x8001, 0x3f, 0x2, 0x7}, {0x54af, 0xce, 0x9, 0x3}, {0x40, 0x40, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x498}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0xd9, 0x32, 0xfff}, {0x7dc, 0x2, 0x81, 0x1}, {0x1, 0x8, 0x1, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0d5f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x1f, 0x3, 0x7}, {0x1, 0x5, 0x80, 0x6}, {0x101, 0x3f, 0x20, 0x2}, {0x7, 0x9, 0x1, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x880}, 0x20048000) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r16, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r17 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r17, 0x5424, &(0x7f0000000000)) 09:08:26 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x9, 0x3f, 0x22, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x1, 0x8000, 0x200, 0x4}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r8, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x9ec, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe08f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x6d, 0x5, 0xb1}, {0x1, 0x8, 0xa, 0xb72}, {0x2, 0x3f, 0x73, 0x8}, {0x8001, 0x3f, 0x2, 0x7}, {0x54af, 0xce, 0x9, 0x3}, {0x40, 0x40, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x498}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0xd9, 0x32, 0xfff}, {0x7dc, 0x2, 0x81, 0x1}, {0x1, 0x8, 0x1, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0d5f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x1f, 0x3, 0x7}, {0x1, 0x5, 0x80, 0x6}, {0x101, 0x3f, 0x20, 0x2}, {0x7, 0x9, 0x1, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x880}, 0x20048000) (async) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r16, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r17 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r17, 0x5424, &(0x7f0000000000)) 09:08:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0xc) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r2, 0x4b36) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) 09:08:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = gettid() sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000d633ce8a1fb761e6d0187ed568b458513141080000007d70c7fb11db9b590831067b7a6795049af27c40f52a04ebd31117955f9c5f2425e067ed3a0953f6bce05ba25bb980f4f9bb32a85d0645a628ce1c4af7b82c6f09d6e814ffb9ea6bb2909d99d52cb95330822f1dbf21a02cf50bb833", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250b00000011000700e316b8ba604cf7969f0f1e0716000000480050800400050010000400b3bd98b1af916dd69c6967e00800030001ac0f00040005000800030001ac0f0009000100c83ec78666000000050002000300000005000900010000000800090000000000040050800c00508005000200030000000a0006000802110000010000090007008966a3304f00000008006e80040001000a000a00f6672dd2e724000011000700aebec4158276ee0e12ebc7c555000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000110000042abd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080020000600000008000a00", @ANYRES32=0x0, @ANYBLOB="050011007f000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x444c80, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000340)) 09:08:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async, rerun: 32) r2 = gettid() (async, rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000d633ce8a1fb761e6d0187ed568b458513141080000007d70c7fb11db9b590831067b7a6795049af27c40f52a04ebd31117955f9c5f2425e067ed3a0953f6bce05ba25bb980f4f9bb32a85d0645a628ce1c4af7b82c6f09d6e814ffb9ea6bb2909d99d52cb95330822f1dbf21a02cf50bb833", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250b00000011000700e316b8ba604cf7969f0f1e0716000000480050800400050010000400b3bd98b1af916dd69c6967e00800030001ac0f00040005000800030001ac0f0009000100c83ec78666000000050002000300000005000900010000000800090000000000040050800c00508005000200030000000a0006000802110000010000090007008966a3304f00000008006e80040001000a000a00f6672dd2e724000011000700aebec4158276ee0e12ebc7c555000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000110000042abd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="020000000048020008001300bb4dd3d555aeca63c79528727bda5af052c651c47d30b3ce2af859c8f9087b656b47f9f825f24339fb78c38f1285c810420139d41c410b2bcfaed2d52d0796e67e0e862a5806237dfb8b4f78a4b881e1a488cc6806ded89aae36c708c99e745964bd0a84ef1598213ced7059a9f4d023681164fd9ea7a9d0f904ed70921d912c6774c3d5196266fbfad1d8ea8d4f845e26e70436852f512fae039f4150af8c5d0af2e5642dd1be7e1c6b662e45364f2f2815882cce4ac51323f2bd202f043e5620b561892d47453c1709b8eac8901df46e9be5bdbe857dfc61eddd73cc69f2391bb04ea2836e2685584ea33975657350506e1d1b0a7448ae0b", @ANYRES32=r2, @ANYBLOB="080020000600000008000a00", @ANYRES32=0x0, @ANYBLOB="050011007f000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x444c80, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000340)) 09:08:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1f, 0x7, 0xe551}) 09:08:27 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:08:27 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x3f, 0x9, 0x3f, 0x22, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x1, 0x8000, 0x200, 0x4}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r8, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x9ec, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe08f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x6d, 0x5, 0xb1}, {0x1, 0x8, 0xa, 0xb72}, {0x2, 0x3f, 0x73, 0x8}, {0x8001, 0x3f, 0x2, 0x7}, {0x54af, 0xce, 0x9, 0x3}, {0x40, 0x40, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x498}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7f, 0xd9, 0x32, 0xfff}, {0x7dc, 0x2, 0x81, 0x1}, {0x1, 0x8, 0x1, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0d5f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x98, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x1f, 0x3, 0x7}, {0x1, 0x5, 0x80, 0x6}, {0x101, 0x3f, 0x20, 0x2}, {0x7, 0x9, 0x1, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x9ec}, 0x1, 0x0, 0x0, 0x880}, 0x20048000) r16 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r16, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r17 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(r17, 0x5424, &(0x7f0000000000)) 09:08:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = gettid() sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000d633ce8a1fb761e6d0187ed568b458513141080000007d70c7fb11db9b590831067b7a6795049af27c40f52a04ebd31117955f9c5f2425e067ed3a0953f6bce05ba25bb980f4f9bb32a85d0645a628ce1c4af7b82c6f09d6e814ffb9ea6bb2909d99d52cb95330822f1dbf21a02cf50bb833", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250b00000011000700e316b8ba604cf7969f0f1e0716000000480050800400050010000400b3bd98b1af916dd69c6967e00800030001ac0f00040005000800030001ac0f0009000100c83ec78666000000050002000300000005000900010000000800090000000000040050800c00508005000200030000000a0006000802110000010000090007008966a3304f00000008006e80040001000a000a00f6672dd2e724000011000700aebec4158276ee0e12ebc7c555000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000110000042abd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080020000600000008000a00", @ANYRES32=0x0, @ANYBLOB="050011007f000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x444c80, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000340)) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) gettid() (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8000000d633ce8a1fb761e6d0187ed568b458513141080000007d70c7fb11db9b590831067b7a6795049af27c40f52a04ebd31117955f9c5f2425e067ed3a0953f6bce05ba25bb980f4f9bb32a85d0645a628ce1c4af7b82c6f09d6e814ffb9ea6bb2909d99d52cb95330822f1dbf21a02cf50bb833", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf250b00000011000700e316b8ba604cf7969f0f1e0716000000480050800400050010000400b3bd98b1af916dd69c6967e00800030001ac0f00040005000800030001ac0f0009000100c83ec78666000000050002000300000005000900010000000800090000000000040050800c00508005000200030000000a0006000802110000010000090007008966a3304f00000008006e80040001000a000a00f6672dd2e724000011000700aebec4158276ee0e12ebc7c555000000"], 0xc8}, 0x1, 0x0, 0x0, 0x8}, 0x4000) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r5, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000110000042abd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080020000600000008000a00", @ANYRES32=0x0, @ANYBLOB="050011007f000000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x444c80, 0x0) (async) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000340)) (async) 09:08:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1f, 0x7, 0xe551}) 09:08:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000180)=0xa1a, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000080)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x100, 0x80000000, 0x0, 0x7ffc, 0xd, "6fdc35b77f3edc7e5589194a9c480000000020"}) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000280)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x6}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x12, 0x0, 0x0}) ioctl$TIOCCONS(r0, 0x541d) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="432043873199b5c97552eb1537e20c2671249cf39682c9bc4a01a76afb506c7649d1f44fb1bf930d9f16bea8c6fb78b2204a3a07173308bdfe5a77149b4990d2c4f1aa1eaae33b25fb70582354da8d3f16521ff2df74ff69ad32") 09:08:27 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x0) 09:08:27 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r5 = socket(0x2, 0x3, 0x9) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x81) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r2, 0x5404, 0x0) (async) syz_open_pts(r2, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) socket(0x2, 0x3, 0x9) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x81) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1f, 0x7, 0xe551}) 09:08:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f00000010c0)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='H\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="c40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600d5c1d9906c4f276f95aae2dbf401ad9a7c7c96735877357dbe5eb0327ad822506ec6f643a171817cc1eb80aec6d299557e849f85a38a0221eeedd434f55a1af94d140610ada57a8fcfd933f5aca183284a4445870441759fb3bab960925eb93cca14c02ca76ebe7dbf5673073b982c4cbd49ef11422102ca0a52f8947b21a8a1feff0b245f328cd37bcff5bd57b5", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004005a0f000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c29b9b27b0001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c0100ffffffffffff7461747300000000000000000000000000000000000000050003000b00000008000400ffff000008003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060008000400040008000600000000000000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004d5d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ba04000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001786000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bce8000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="0801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000040000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB], 0x848}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r16, 0x7b1, &(0x7f0000000040)={&(0x7f00000000c0)=[0x3, 0x2c, 0x6c, 0x2, 0x6, 0x3, 0x7, 0x7, 0x40, 0x5, 0xffffffff, 0x8001, 0x9, 0x4, 0x3ff, 0x80000000, 0x8, 0x8, 0x96e6, 0x5, 0xffffffff, 0x598, 0x7fff, 0x4, 0x2, 0x9, 0x0, 0x4, 0xc88, 0x100, 0x3ff, 0x81, 0x7ff, 0x6, 0xb2, 0x7, 0x3ff, 0x0, 0x5, 0x5, 0x2, 0x2, 0xfff, 0xfe0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0xffffffff, 0x2, 0x7ff, 0x1, 0x2, 0xd2, 0x3, 0xff, 0x8c92, 0x0, 0x80000000, 0x6, 0x7, 0x3, 0x77b, 0x5, 0xfffffff8, 0x6, 0x0, 0x0, 0x7, 0x7, 0xfff, 0x7ff, 0x0, 0x80000001, 0x4, 0x8, 0x2, 0x800, 0xf0000000, 0x38, 0xe8f8, 0x5, 0x0, 0x87e, 0x1, 0x80, 0xffffffff, 0x20, 0x6, 0x2, 0x2, 0x1, 0x152, 0x101, 0x3, 0x1ff, 0x0, 0x9, 0x4, 0x5, 0x37, 0x7fffffff, 0x5, 0x6, 0x7, 0xce, 0x80000001, 0x800, 0x7ff, 0xfff, 0x1, 0x6, 0x0, 0x440, 0x3ff, 0x5, 0x1da, 0x200, 0x3f, 0x3, 0x1000, 0x9, 0x8001, 0x80000000, 0x9f3, 0x8, 0x7, 0x3, 0x0, 0x6, 0x40, 0x7, 0x5, 0x3, 0x7, 0x80000000, 0x2, 0xa6a7, 0xfffffffc, 0x5, 0xfff, 0x2450, 0x80000001, 0x5, 0x5, 0x7, 0x2, 0x3, 0x1, 0x10000, 0x7, 0x0, 0x1ff, 0x81, 0x7f, 0x8000, 0x80000000, 0x9, 0xffff7711, 0x50a, 0xffff, 0x2, 0xfff, 0x7fffffff, 0x7, 0x8, 0x4, 0x3, 0x4, 0x490d, 0xed77, 0x7, 0x5, 0xff, 0x4, 0xba79, 0x80000000, 0x9, 0x4, 0x2, 0x1a, 0x2, 0xfffffff6, 0x3, 0x80, 0x6, 0x4, 0x9cc, 0xff, 0x9f0, 0x401, 0xeef, 0x0, 0xffffffff, 0x712b6d9e, 0x6, 0x1, 0x0, 0x3, 0x6, 0x7fff, 0x7f, 0x6, 0x5, 0x400, 0x3, 0x9, 0x100, 0x4, 0x7, 0xb8, 0x1ff, 0x0, 0x8000, 0x8, 0x400000, 0x5, 0x3, 0x8000, 0x7ff, 0x48f, 0x7, 0x8, 0x1, 0x2, 0x7, 0x4, 0x81, 0xa, 0x1de, 0x4, 0x100, 0x9, 0x3f, 0x0, 0x9, 0xffff, 0x7f, 0xfffffe00, 0xffff, 0xffff0000, 0x5, 0x1ff, 0xaf0c, 0x1000, 0x8, 0x8001, 0x101, 0xfffffff7, 0x6, 0x8001, 0x100, 0xcc, 0xfffffff8, 0x9, 0x51e, 0xffff7886, 0x4, 0x7fff, 0xffffffff, 0x5, 0x824, 0x8, 0x8000, 0x8b3, 0x3f, 0x3f, 0x9, 0x200, 0xe5, 0x7, 0x0, 0x7, 0x9, 0x5, 0x7, 0x8, 0x8, 0x200, 0x7fff, 0x8, 0x1, 0x7fff, 0x5, 0x1a93, 0x9, 0x40, 0x3, 0x40, 0x7fff, 0x1, 0xffffffff, 0x9, 0xfffffffa, 0x6, 0x2, 0x7ff, 0x6, 0x7ff, 0x9, 0xf03e, 0x8, 0x8, 0x0, 0x2, 0x80000001, 0x89, 0x3, 0x3f, 0x1f, 0x7626, 0x7c, 0xfffffffe, 0x0, 0x7, 0x3f, 0x8000, 0x0, 0x7fffffff, 0x22, 0x556a, 0x1, 0x8, 0x1, 0x44018394, 0x1, 0x8, 0x3, 0x100, 0x2, 0x2, 0x771e, 0x0, 0x7, 0x4, 0x2, 0x80000000, 0xbdb, 0x20, 0xe5f, 0x8001, 0x7, 0x800, 0x5, 0x7ff800, 0x2, 0xa9f7, 0xffffffff, 0x7, 0x7fffffff, 0x6, 0x3ff, 0x6, 0x5, 0x3ff, 0xffffffff, 0x100, 0x2e6b, 0x4ecc, 0x9, 0x7, 0x5e9, 0x6, 0x1, 0x9, 0x7, 0x1000, 0x43, 0x0, 0xfff, 0xeb64, 0xf0e, 0x6, 0x3, 0x101, 0x81, 0x7, 0x4d62317a, 0x9, 0xffff, 0x80, 0x0, 0x3, 0x7c86, 0x9, 0x8, 0xf0000000, 0x80000001, 0x0, 0x4, 0x1, 0x80000000, 0x2, 0xa97, 0x1b, 0x5, 0x9c, 0x3f, 0x8001, 0x5, 0x1, 0x8000, 0x1, 0xfb, 0xfe, 0x68b3, 0x2, 0x4, 0x23a, 0xe89d, 0x4, 0x5, 0x401, 0x72d, 0x6c480000, 0x4, 0xca98, 0x3, 0x1, 0xc85, 0xb54, 0xb6f, 0x0, 0x200, 0x1, 0x1f8, 0x80, 0x1, 0xffff, 0x1f, 0x0, 0xffffffff, 0x3, 0x708, 0x401, 0x5, 0xa19, 0x6, 0x10000, 0x8000, 0x3, 0xfffffffd, 0xed, 0x9, 0x0, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x5, 0x800, 0x1, 0x9, 0xad, 0x9c55, 0xac, 0x8001, 0x8, 0x7d6, 0x48, 0x8, 0x100, 0x7, 0x80000000, 0xfd09, 0x5, 0x9, 0x0, 0x2, 0x1, 0x2, 0x6, 0x2, 0x3, 0xff, 0x4, 0x4, 0x80, 0x1ff, 0x401, 0x4, 0x9, 0x7c0, 0x3, 0x5, 0xc90, 0x10000, 0x1, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1, 0xbd4, 0x7, 0xfffffffa, 0xffffff01, 0x6, 0x3c, 0x401, 0x7fffffff, 0xd5, 0x0, 0x3, 0x267, 0x101, 0x80, 0x8000, 0x80000000, 0x20, 0xfffffffa, 0x81, 0xb7, 0x6a0, 0x9, 0x6, 0x7fff, 0x7f, 0x8, 0x6, 0x7, 0x6, 0x6, 0x1f, 0x0, 0x1, 0x80000000, 0x8000, 0x9, 0x2, 0x1000003, 0x8000, 0xa, 0x9, 0x0, 0x8ab3, 0x8, 0x25, 0x2, 0xffffffe0, 0x1, 0x7, 0x6, 0x7, 0x3, 0x3, 0x21, 0x401, 0x101, 0x10001, 0x5, 0x4, 0x1f, 0x8, 0x8, 0x2d8, 0x80000001, 0xffffffff, 0x79a, 0xfffffffb, 0x1, 0x9, 0x81e5, 0x200, 0x4, 0x7ff, 0x81f, 0x2, 0x8, 0x9560, 0x3f, 0x9, 0x1, 0x5, 0xbc9, 0x9, 0x80000001, 0x7, 0x1, 0x7, 0x9, 0x3, 0x4, 0x0, 0xfffffff8, 0xffffff82, 0x1, 0x7fff, 0x80000001, 0x2, 0x20, 0x8, 0xc635, 0x10001, 0x6, 0x80000001, 0x7, 0x4, 0x3, 0x1000, 0x7, 0x401, 0x0, 0x4, 0xffff0000, 0x5, 0xfffffffe, 0x1, 0x8, 0x9, 0x101, 0x200, 0x8, 0x0, 0x1, 0x9, 0x7, 0x6, 0x2, 0x2, 0x7b23, 0x1, 0x4, 0x7, 0x5, 0x80000001, 0x7, 0xffffffff, 0x3, 0xe53, 0x5, 0x200, 0x800, 0x5, 0x4, 0xcce, 0x5, 0x8, 0x9, 0x27, 0x6, 0x976c358, 0xffffffff, 0x400, 0x7, 0x5, 0x0, 0xfffffff7, 0x4, 0x4, 0x3ff, 0x7, 0x4, 0x8de, 0x8, 0xffffffff, 0x6, 0x1, 0x10000, 0x67, 0x7, 0x0, 0x9, 0xe1, 0x400, 0xf5cb, 0x7ff, 0x9, 0x1ff, 0x0, 0x7fff, 0x53, 0x2, 0x0, 0x853, 0x4, 0x5, 0x4, 0x3, 0x3, 0x1, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x2, 0x1ff, 0x3, 0x1, 0xffff26dd, 0x1, 0xfffffffe, 0x7, 0x5, 0x4, 0x9, 0x7, 0x4, 0x1, 0x48000000, 0x7, 0x9, 0x3, 0x800, 0x3, 0xffffffff, 0x40, 0x2e, 0x69, 0x7ff, 0xf2b, 0x9, 0x1, 0x9, 0x7, 0x8, 0x6, 0x4, 0x9, 0x800, 0x2, 0x5, 0xff, 0xfffff801, 0x401, 0x6, 0x5, 0xfffffbff, 0x1, 0x3, 0x7fff, 0x7, 0x7, 0x1, 0x4, 0x4, 0xdbe, 0x7c6ccdcf, 0x1fe0, 0x80000000, 0x6, 0x51371f99, 0x8, 0x80000001, 0x2, 0xff, 0x80000000, 0x20, 0x6, 0xc16, 0x0, 0x3, 0x3, 0x9, 0x4, 0x0, 0x2, 0x3, 0x1, 0x9, 0x1fffc, 0x0, 0x1, 0x2, 0x5, 0x8, 0x7, 0xfec0, 0x0, 0xf8, 0x7fffffff, 0x800, 0x0, 0x0, 0x1, 0xffff, 0x1, 0x401, 0x3, 0x5, 0x5, 0x40, 0x4, 0x3, 0x3, 0xfc000000, 0x7, 0x3, 0x1, 0x1, 0x1, 0x3f, 0x9, 0x10000, 0x2, 0x2, 0x4ea, 0x1f, 0x6, 0x2bf2, 0x100, 0x7, 0xffffb0d4, 0xfa, 0x7, 0x884d, 0xfffff000, 0xfffff801, 0x7, 0x7, 0x7fff, 0x400, 0x5, 0x5, 0x51, 0x400, 0x1, 0xffff4eea, 0x6aba4833, 0x7, 0xfabf, 0x5d3, 0xa4fe, 0x7f, 0x7ff, 0xfffffe06, 0x1, 0xea05, 0xd5b1, 0x6, 0x2ac, 0x9, 0x8, 0xff, 0x8, 0x8, 0x1, 0xfffff800, 0x1, 0x1f, 0x2, 0x0, 0xffff, 0xff, 0x2, 0x7f, 0x10001, 0x0, 0x4, 0xa9b, 0x8001, 0x6, 0xfffffe00, 0x9, 0x1f, 0x1ff, 0x0, 0x0, 0x2, 0x7fff, 0xffff8000, 0xb4, 0x5, 0x0, 0x24, 0x4, 0x80000000, 0x10000, 0x10001, 0x10001, 0x607, 0x1f, 0x8, 0xc3c8, 0x3, 0x8, 0x2, 0x1, 0xa050, 0x2, 0xf617, 0x6, 0x5, 0x3ff, 0x4, 0x93c, 0x3, 0x80, 0x9, 0x6, 0x4, 0x3, 0x6, 0x2, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1000, 0x3, 0x2b, 0xd22, 0xff, 0x1ac6, 0x1f, 0x5, 0x4, 0x80, 0x8001, 0xffff, 0x7, 0x2, 0x101, 0x6, 0x9, 0xfffff653, 0x9, 0x47a8, 0xfffffffe, 0x2, 0x8, 0x7, 0x3, 0x1f, 0xffffffff, 0x7fffffff, 0x100, 0xfffffff9, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3ef8, 0x3, 0x1, 0x5, 0x20, 0x7, 0x9, 0x9, 0x7ff, 0x9, 0xfff, 0x7ff, 0x6, 0x3ff, 0x0, 0x3ff, 0x6, 0x9, 0x10000, 0xe2, 0x8, 0xbbc, 0x3, 0x6b26, 0x1, 0x3, 0x7b12e5f7, 0xc6, 0x101, 0x1000, 0x400, 0x8, 0x8, 0x3, 0x3, 0x200, 0x7, 0x400, 0xffff, 0x400, 0x80000000, 0x8, 0x9, 0x8, 0xcb, 0x1, 0x0, 0x8000, 0x3d000, 0x401, 0x9, 0x0, 0x1000, 0xfffffe00, 0x240, 0x1b, 0x6, 0x7, 0x1f, 0x2, 0x7, 0x7f, 0x5, 0x480000, 0x1, 0x100, 0x6, 0x200, 0x8, 0x401, 0x2726, 0x0, 0x8, 0xfffffffc, 0x9, 0xffffffc6, 0x2, 0x7, 0x10000, 0x4, 0x10000, 0x201a, 0xfffffff7, 0x4, 0x1ca87376], 0x6, 0x400}) 09:08:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000180)=0xa1a, 0x4) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000080)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x100, 0x80000000, 0x0, 0x7ffc, 0xd, "6fdc35b77f3edc7e5589194a9c480000000020"}) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000280)) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x6}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x12, 0x0, 0x0}) (async) ioctl$TIOCCONS(r0, 0x541d) (async) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x4) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="432043873199b5c97552eb1537e20c2671249cf39682c9bc4a01a76afb506c7649d1f44fb1bf930d9f16bea8c6fb78b2204a3a07173308bdfe5a77149b4990d2c4f1aa1eaae33b25fb70582354da8d3f16521ff2df74ff69ad32") 09:08:27 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f00000010c0)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async, rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='H\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="c40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600d5c1d9906c4f276f95aae2dbf401ad9a7c7c96735877357dbe5eb0327ad822506ec6f643a171817cc1eb80aec6d299557e849f85a38a0221eeedd434f55a1af94d140610ada57a8fcfd933f5aca183284a4445870441759fb3bab960925eb93cca14c02ca76ebe7dbf5673073b982c4cbd49ef11422102ca0a52f8947b21a8a1feff0b245f328cd37bcff5bd57b5", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004005a0f000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c29b9b27b0001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c0100ffffffffffff7461747300000000000000000000000000000000000000050003000b00000008000400ffff000008003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060008000400040008000600000000000000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004d5d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ba04000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001786000008000100", @ANYRES32=0x0, @ANYBLOB="5801028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000008000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000440004000300070909000000faff02000300000005000104090000000600060401000000010000000300000009000196492400000900068000800000e40204010000010038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=r3, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bce8000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="0801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000040000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB], 0x848}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) (rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r16, 0x7b1, &(0x7f0000000040)={&(0x7f00000000c0)=[0x3, 0x2c, 0x6c, 0x2, 0x6, 0x3, 0x7, 0x7, 0x40, 0x5, 0xffffffff, 0x8001, 0x9, 0x4, 0x3ff, 0x80000000, 0x8, 0x8, 0x96e6, 0x5, 0xffffffff, 0x598, 0x7fff, 0x4, 0x2, 0x9, 0x0, 0x4, 0xc88, 0x100, 0x3ff, 0x81, 0x7ff, 0x6, 0xb2, 0x7, 0x3ff, 0x0, 0x5, 0x5, 0x2, 0x2, 0xfff, 0xfe0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0xffffffff, 0x2, 0x7ff, 0x1, 0x2, 0xd2, 0x3, 0xff, 0x8c92, 0x0, 0x80000000, 0x6, 0x7, 0x3, 0x77b, 0x5, 0xfffffff8, 0x6, 0x0, 0x0, 0x7, 0x7, 0xfff, 0x7ff, 0x0, 0x80000001, 0x4, 0x8, 0x2, 0x800, 0xf0000000, 0x38, 0xe8f8, 0x5, 0x0, 0x87e, 0x1, 0x80, 0xffffffff, 0x20, 0x6, 0x2, 0x2, 0x1, 0x152, 0x101, 0x3, 0x1ff, 0x0, 0x9, 0x4, 0x5, 0x37, 0x7fffffff, 0x5, 0x6, 0x7, 0xce, 0x80000001, 0x800, 0x7ff, 0xfff, 0x1, 0x6, 0x0, 0x440, 0x3ff, 0x5, 0x1da, 0x200, 0x3f, 0x3, 0x1000, 0x9, 0x8001, 0x80000000, 0x9f3, 0x8, 0x7, 0x3, 0x0, 0x6, 0x40, 0x7, 0x5, 0x3, 0x7, 0x80000000, 0x2, 0xa6a7, 0xfffffffc, 0x5, 0xfff, 0x2450, 0x80000001, 0x5, 0x5, 0x7, 0x2, 0x3, 0x1, 0x10000, 0x7, 0x0, 0x1ff, 0x81, 0x7f, 0x8000, 0x80000000, 0x9, 0xffff7711, 0x50a, 0xffff, 0x2, 0xfff, 0x7fffffff, 0x7, 0x8, 0x4, 0x3, 0x4, 0x490d, 0xed77, 0x7, 0x5, 0xff, 0x4, 0xba79, 0x80000000, 0x9, 0x4, 0x2, 0x1a, 0x2, 0xfffffff6, 0x3, 0x80, 0x6, 0x4, 0x9cc, 0xff, 0x9f0, 0x401, 0xeef, 0x0, 0xffffffff, 0x712b6d9e, 0x6, 0x1, 0x0, 0x3, 0x6, 0x7fff, 0x7f, 0x6, 0x5, 0x400, 0x3, 0x9, 0x100, 0x4, 0x7, 0xb8, 0x1ff, 0x0, 0x8000, 0x8, 0x400000, 0x5, 0x3, 0x8000, 0x7ff, 0x48f, 0x7, 0x8, 0x1, 0x2, 0x7, 0x4, 0x81, 0xa, 0x1de, 0x4, 0x100, 0x9, 0x3f, 0x0, 0x9, 0xffff, 0x7f, 0xfffffe00, 0xffff, 0xffff0000, 0x5, 0x1ff, 0xaf0c, 0x1000, 0x8, 0x8001, 0x101, 0xfffffff7, 0x6, 0x8001, 0x100, 0xcc, 0xfffffff8, 0x9, 0x51e, 0xffff7886, 0x4, 0x7fff, 0xffffffff, 0x5, 0x824, 0x8, 0x8000, 0x8b3, 0x3f, 0x3f, 0x9, 0x200, 0xe5, 0x7, 0x0, 0x7, 0x9, 0x5, 0x7, 0x8, 0x8, 0x200, 0x7fff, 0x8, 0x1, 0x7fff, 0x5, 0x1a93, 0x9, 0x40, 0x3, 0x40, 0x7fff, 0x1, 0xffffffff, 0x9, 0xfffffffa, 0x6, 0x2, 0x7ff, 0x6, 0x7ff, 0x9, 0xf03e, 0x8, 0x8, 0x0, 0x2, 0x80000001, 0x89, 0x3, 0x3f, 0x1f, 0x7626, 0x7c, 0xfffffffe, 0x0, 0x7, 0x3f, 0x8000, 0x0, 0x7fffffff, 0x22, 0x556a, 0x1, 0x8, 0x1, 0x44018394, 0x1, 0x8, 0x3, 0x100, 0x2, 0x2, 0x771e, 0x0, 0x7, 0x4, 0x2, 0x80000000, 0xbdb, 0x20, 0xe5f, 0x8001, 0x7, 0x800, 0x5, 0x7ff800, 0x2, 0xa9f7, 0xffffffff, 0x7, 0x7fffffff, 0x6, 0x3ff, 0x6, 0x5, 0x3ff, 0xffffffff, 0x100, 0x2e6b, 0x4ecc, 0x9, 0x7, 0x5e9, 0x6, 0x1, 0x9, 0x7, 0x1000, 0x43, 0x0, 0xfff, 0xeb64, 0xf0e, 0x6, 0x3, 0x101, 0x81, 0x7, 0x4d62317a, 0x9, 0xffff, 0x80, 0x0, 0x3, 0x7c86, 0x9, 0x8, 0xf0000000, 0x80000001, 0x0, 0x4, 0x1, 0x80000000, 0x2, 0xa97, 0x1b, 0x5, 0x9c, 0x3f, 0x8001, 0x5, 0x1, 0x8000, 0x1, 0xfb, 0xfe, 0x68b3, 0x2, 0x4, 0x23a, 0xe89d, 0x4, 0x5, 0x401, 0x72d, 0x6c480000, 0x4, 0xca98, 0x3, 0x1, 0xc85, 0xb54, 0xb6f, 0x0, 0x200, 0x1, 0x1f8, 0x80, 0x1, 0xffff, 0x1f, 0x0, 0xffffffff, 0x3, 0x708, 0x401, 0x5, 0xa19, 0x6, 0x10000, 0x8000, 0x3, 0xfffffffd, 0xed, 0x9, 0x0, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x5, 0x800, 0x1, 0x9, 0xad, 0x9c55, 0xac, 0x8001, 0x8, 0x7d6, 0x48, 0x8, 0x100, 0x7, 0x80000000, 0xfd09, 0x5, 0x9, 0x0, 0x2, 0x1, 0x2, 0x6, 0x2, 0x3, 0xff, 0x4, 0x4, 0x80, 0x1ff, 0x401, 0x4, 0x9, 0x7c0, 0x3, 0x5, 0xc90, 0x10000, 0x1, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1, 0xbd4, 0x7, 0xfffffffa, 0xffffff01, 0x6, 0x3c, 0x401, 0x7fffffff, 0xd5, 0x0, 0x3, 0x267, 0x101, 0x80, 0x8000, 0x80000000, 0x20, 0xfffffffa, 0x81, 0xb7, 0x6a0, 0x9, 0x6, 0x7fff, 0x7f, 0x8, 0x6, 0x7, 0x6, 0x6, 0x1f, 0x0, 0x1, 0x80000000, 0x8000, 0x9, 0x2, 0x1000003, 0x8000, 0xa, 0x9, 0x0, 0x8ab3, 0x8, 0x25, 0x2, 0xffffffe0, 0x1, 0x7, 0x6, 0x7, 0x3, 0x3, 0x21, 0x401, 0x101, 0x10001, 0x5, 0x4, 0x1f, 0x8, 0x8, 0x2d8, 0x80000001, 0xffffffff, 0x79a, 0xfffffffb, 0x1, 0x9, 0x81e5, 0x200, 0x4, 0x7ff, 0x81f, 0x2, 0x8, 0x9560, 0x3f, 0x9, 0x1, 0x5, 0xbc9, 0x9, 0x80000001, 0x7, 0x1, 0x7, 0x9, 0x3, 0x4, 0x0, 0xfffffff8, 0xffffff82, 0x1, 0x7fff, 0x80000001, 0x2, 0x20, 0x8, 0xc635, 0x10001, 0x6, 0x80000001, 0x7, 0x4, 0x3, 0x1000, 0x7, 0x401, 0x0, 0x4, 0xffff0000, 0x5, 0xfffffffe, 0x1, 0x8, 0x9, 0x101, 0x200, 0x8, 0x0, 0x1, 0x9, 0x7, 0x6, 0x2, 0x2, 0x7b23, 0x1, 0x4, 0x7, 0x5, 0x80000001, 0x7, 0xffffffff, 0x3, 0xe53, 0x5, 0x200, 0x800, 0x5, 0x4, 0xcce, 0x5, 0x8, 0x9, 0x27, 0x6, 0x976c358, 0xffffffff, 0x400, 0x7, 0x5, 0x0, 0xfffffff7, 0x4, 0x4, 0x3ff, 0x7, 0x4, 0x8de, 0x8, 0xffffffff, 0x6, 0x1, 0x10000, 0x67, 0x7, 0x0, 0x9, 0xe1, 0x400, 0xf5cb, 0x7ff, 0x9, 0x1ff, 0x0, 0x7fff, 0x53, 0x2, 0x0, 0x853, 0x4, 0x5, 0x4, 0x3, 0x3, 0x1, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x2, 0x1ff, 0x3, 0x1, 0xffff26dd, 0x1, 0xfffffffe, 0x7, 0x5, 0x4, 0x9, 0x7, 0x4, 0x1, 0x48000000, 0x7, 0x9, 0x3, 0x800, 0x3, 0xffffffff, 0x40, 0x2e, 0x69, 0x7ff, 0xf2b, 0x9, 0x1, 0x9, 0x7, 0x8, 0x6, 0x4, 0x9, 0x800, 0x2, 0x5, 0xff, 0xfffff801, 0x401, 0x6, 0x5, 0xfffffbff, 0x1, 0x3, 0x7fff, 0x7, 0x7, 0x1, 0x4, 0x4, 0xdbe, 0x7c6ccdcf, 0x1fe0, 0x80000000, 0x6, 0x51371f99, 0x8, 0x80000001, 0x2, 0xff, 0x80000000, 0x20, 0x6, 0xc16, 0x0, 0x3, 0x3, 0x9, 0x4, 0x0, 0x2, 0x3, 0x1, 0x9, 0x1fffc, 0x0, 0x1, 0x2, 0x5, 0x8, 0x7, 0xfec0, 0x0, 0xf8, 0x7fffffff, 0x800, 0x0, 0x0, 0x1, 0xffff, 0x1, 0x401, 0x3, 0x5, 0x5, 0x40, 0x4, 0x3, 0x3, 0xfc000000, 0x7, 0x3, 0x1, 0x1, 0x1, 0x3f, 0x9, 0x10000, 0x2, 0x2, 0x4ea, 0x1f, 0x6, 0x2bf2, 0x100, 0x7, 0xffffb0d4, 0xfa, 0x7, 0x884d, 0xfffff000, 0xfffff801, 0x7, 0x7, 0x7fff, 0x400, 0x5, 0x5, 0x51, 0x400, 0x1, 0xffff4eea, 0x6aba4833, 0x7, 0xfabf, 0x5d3, 0xa4fe, 0x7f, 0x7ff, 0xfffffe06, 0x1, 0xea05, 0xd5b1, 0x6, 0x2ac, 0x9, 0x8, 0xff, 0x8, 0x8, 0x1, 0xfffff800, 0x1, 0x1f, 0x2, 0x0, 0xffff, 0xff, 0x2, 0x7f, 0x10001, 0x0, 0x4, 0xa9b, 0x8001, 0x6, 0xfffffe00, 0x9, 0x1f, 0x1ff, 0x0, 0x0, 0x2, 0x7fff, 0xffff8000, 0xb4, 0x5, 0x0, 0x24, 0x4, 0x80000000, 0x10000, 0x10001, 0x10001, 0x607, 0x1f, 0x8, 0xc3c8, 0x3, 0x8, 0x2, 0x1, 0xa050, 0x2, 0xf617, 0x6, 0x5, 0x3ff, 0x4, 0x93c, 0x3, 0x80, 0x9, 0x6, 0x4, 0x3, 0x6, 0x2, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1000, 0x3, 0x2b, 0xd22, 0xff, 0x1ac6, 0x1f, 0x5, 0x4, 0x80, 0x8001, 0xffff, 0x7, 0x2, 0x101, 0x6, 0x9, 0xfffff653, 0x9, 0x47a8, 0xfffffffe, 0x2, 0x8, 0x7, 0x3, 0x1f, 0xffffffff, 0x7fffffff, 0x100, 0xfffffff9, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3ef8, 0x3, 0x1, 0x5, 0x20, 0x7, 0x9, 0x9, 0x7ff, 0x9, 0xfff, 0x7ff, 0x6, 0x3ff, 0x0, 0x3ff, 0x6, 0x9, 0x10000, 0xe2, 0x8, 0xbbc, 0x3, 0x6b26, 0x1, 0x3, 0x7b12e5f7, 0xc6, 0x101, 0x1000, 0x400, 0x8, 0x8, 0x3, 0x3, 0x200, 0x7, 0x400, 0xffff, 0x400, 0x80000000, 0x8, 0x9, 0x8, 0xcb, 0x1, 0x0, 0x8000, 0x3d000, 0x401, 0x9, 0x0, 0x1000, 0xfffffe00, 0x240, 0x1b, 0x6, 0x7, 0x1f, 0x2, 0x7, 0x7f, 0x5, 0x480000, 0x1, 0x100, 0x6, 0x200, 0x8, 0x401, 0x2726, 0x0, 0x8, 0xfffffffc, 0x9, 0xffffffc6, 0x2, 0x7, 0x10000, 0x4, 0x10000, 0x201a, 0xfffffff7, 0x4, 0x1ca87376], 0x6, 0x400}) 09:08:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000180)=0xa1a, 0x4) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000080)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x101) (async) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x100, 0x80000000, 0x0, 0x7ffc, 0xd, "6fdc35b77f3edc7e5589194a9c480000000020"}) (async) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000280)) (async) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x6}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4, 0x12, 0x0, 0x0}) (async) ioctl$TIOCCONS(r0, 0x541d) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000001c0)=0x8, &(0x7f0000000200)=0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="432043873199b5c97552eb1537e20c2671249cf39682c9bc4a01a76afb506c7649d1f44fb1bf930d9f16bea8c6fb78b2204a3a07173308bdfe5a77149b4990d2c4f1aa1eaae33b25fb70582354da8d3f16521ff2df74ff69ad32") 09:08:28 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:08:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSBRKP(r0, 0x5425, 0x1) 09:08:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x11, 0x16, 0x3, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe62) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) 09:08:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f00000010c0)={0xffffffffffffffff}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r6, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r9, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r12, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r13, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r14, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r15, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB='H\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="c40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600d5c1d9906c4f276f95aae2dbf401ad9a7c7c96735877357dbe5eb0327ad822506ec6f643a171817cc1eb80aec6d299557e849f85a38a0221eeedd434f55a1af94d140610ada57a8fcfd933f5aca183284a4445870441759fb3bab960925eb93cca14c02ca76ebe7dbf5673073b982c4cbd49ef11422102ca0a52f8947b21a8a1feff0b245f328cd37bcff5bd57b5", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004005a0f000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002803c29b9b27b0001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c0100ffffffffffff7461747300000000000000000000000000000000000000050003000b00000008000400ffff000008003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060008000400040008000600000000000000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000008038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004d5d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ba04000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001786000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="b801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bce8000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000008000100", @ANYRES32=0x0, @ANYBLOB="0801028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000040000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB], 0x848}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r16, 0x7b1, &(0x7f0000000040)={&(0x7f00000000c0)=[0x3, 0x2c, 0x6c, 0x2, 0x6, 0x3, 0x7, 0x7, 0x40, 0x5, 0xffffffff, 0x8001, 0x9, 0x4, 0x3ff, 0x80000000, 0x8, 0x8, 0x96e6, 0x5, 0xffffffff, 0x598, 0x7fff, 0x4, 0x2, 0x9, 0x0, 0x4, 0xc88, 0x100, 0x3ff, 0x81, 0x7ff, 0x6, 0xb2, 0x7, 0x3ff, 0x0, 0x5, 0x5, 0x2, 0x2, 0xfff, 0xfe0, 0x8000, 0x0, 0x0, 0xfffffffc, 0x8, 0xffffffff, 0x2, 0x7ff, 0x1, 0x2, 0xd2, 0x3, 0xff, 0x8c92, 0x0, 0x80000000, 0x6, 0x7, 0x3, 0x77b, 0x5, 0xfffffff8, 0x6, 0x0, 0x0, 0x7, 0x7, 0xfff, 0x7ff, 0x0, 0x80000001, 0x4, 0x8, 0x2, 0x800, 0xf0000000, 0x38, 0xe8f8, 0x5, 0x0, 0x87e, 0x1, 0x80, 0xffffffff, 0x20, 0x6, 0x2, 0x2, 0x1, 0x152, 0x101, 0x3, 0x1ff, 0x0, 0x9, 0x4, 0x5, 0x37, 0x7fffffff, 0x5, 0x6, 0x7, 0xce, 0x80000001, 0x800, 0x7ff, 0xfff, 0x1, 0x6, 0x0, 0x440, 0x3ff, 0x5, 0x1da, 0x200, 0x3f, 0x3, 0x1000, 0x9, 0x8001, 0x80000000, 0x9f3, 0x8, 0x7, 0x3, 0x0, 0x6, 0x40, 0x7, 0x5, 0x3, 0x7, 0x80000000, 0x2, 0xa6a7, 0xfffffffc, 0x5, 0xfff, 0x2450, 0x80000001, 0x5, 0x5, 0x7, 0x2, 0x3, 0x1, 0x10000, 0x7, 0x0, 0x1ff, 0x81, 0x7f, 0x8000, 0x80000000, 0x9, 0xffff7711, 0x50a, 0xffff, 0x2, 0xfff, 0x7fffffff, 0x7, 0x8, 0x4, 0x3, 0x4, 0x490d, 0xed77, 0x7, 0x5, 0xff, 0x4, 0xba79, 0x80000000, 0x9, 0x4, 0x2, 0x1a, 0x2, 0xfffffff6, 0x3, 0x80, 0x6, 0x4, 0x9cc, 0xff, 0x9f0, 0x401, 0xeef, 0x0, 0xffffffff, 0x712b6d9e, 0x6, 0x1, 0x0, 0x3, 0x6, 0x7fff, 0x7f, 0x6, 0x5, 0x400, 0x3, 0x9, 0x100, 0x4, 0x7, 0xb8, 0x1ff, 0x0, 0x8000, 0x8, 0x400000, 0x5, 0x3, 0x8000, 0x7ff, 0x48f, 0x7, 0x8, 0x1, 0x2, 0x7, 0x4, 0x81, 0xa, 0x1de, 0x4, 0x100, 0x9, 0x3f, 0x0, 0x9, 0xffff, 0x7f, 0xfffffe00, 0xffff, 0xffff0000, 0x5, 0x1ff, 0xaf0c, 0x1000, 0x8, 0x8001, 0x101, 0xfffffff7, 0x6, 0x8001, 0x100, 0xcc, 0xfffffff8, 0x9, 0x51e, 0xffff7886, 0x4, 0x7fff, 0xffffffff, 0x5, 0x824, 0x8, 0x8000, 0x8b3, 0x3f, 0x3f, 0x9, 0x200, 0xe5, 0x7, 0x0, 0x7, 0x9, 0x5, 0x7, 0x8, 0x8, 0x200, 0x7fff, 0x8, 0x1, 0x7fff, 0x5, 0x1a93, 0x9, 0x40, 0x3, 0x40, 0x7fff, 0x1, 0xffffffff, 0x9, 0xfffffffa, 0x6, 0x2, 0x7ff, 0x6, 0x7ff, 0x9, 0xf03e, 0x8, 0x8, 0x0, 0x2, 0x80000001, 0x89, 0x3, 0x3f, 0x1f, 0x7626, 0x7c, 0xfffffffe, 0x0, 0x7, 0x3f, 0x8000, 0x0, 0x7fffffff, 0x22, 0x556a, 0x1, 0x8, 0x1, 0x44018394, 0x1, 0x8, 0x3, 0x100, 0x2, 0x2, 0x771e, 0x0, 0x7, 0x4, 0x2, 0x80000000, 0xbdb, 0x20, 0xe5f, 0x8001, 0x7, 0x800, 0x5, 0x7ff800, 0x2, 0xa9f7, 0xffffffff, 0x7, 0x7fffffff, 0x6, 0x3ff, 0x6, 0x5, 0x3ff, 0xffffffff, 0x100, 0x2e6b, 0x4ecc, 0x9, 0x7, 0x5e9, 0x6, 0x1, 0x9, 0x7, 0x1000, 0x43, 0x0, 0xfff, 0xeb64, 0xf0e, 0x6, 0x3, 0x101, 0x81, 0x7, 0x4d62317a, 0x9, 0xffff, 0x80, 0x0, 0x3, 0x7c86, 0x9, 0x8, 0xf0000000, 0x80000001, 0x0, 0x4, 0x1, 0x80000000, 0x2, 0xa97, 0x1b, 0x5, 0x9c, 0x3f, 0x8001, 0x5, 0x1, 0x8000, 0x1, 0xfb, 0xfe, 0x68b3, 0x2, 0x4, 0x23a, 0xe89d, 0x4, 0x5, 0x401, 0x72d, 0x6c480000, 0x4, 0xca98, 0x3, 0x1, 0xc85, 0xb54, 0xb6f, 0x0, 0x200, 0x1, 0x1f8, 0x80, 0x1, 0xffff, 0x1f, 0x0, 0xffffffff, 0x3, 0x708, 0x401, 0x5, 0xa19, 0x6, 0x10000, 0x8000, 0x3, 0xfffffffd, 0xed, 0x9, 0x0, 0x7, 0x6, 0x2, 0x7, 0x6, 0x0, 0x5, 0x800, 0x1, 0x9, 0xad, 0x9c55, 0xac, 0x8001, 0x8, 0x7d6, 0x48, 0x8, 0x100, 0x7, 0x80000000, 0xfd09, 0x5, 0x9, 0x0, 0x2, 0x1, 0x2, 0x6, 0x2, 0x3, 0xff, 0x4, 0x4, 0x80, 0x1ff, 0x401, 0x4, 0x9, 0x7c0, 0x3, 0x5, 0xc90, 0x10000, 0x1, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1, 0xbd4, 0x7, 0xfffffffa, 0xffffff01, 0x6, 0x3c, 0x401, 0x7fffffff, 0xd5, 0x0, 0x3, 0x267, 0x101, 0x80, 0x8000, 0x80000000, 0x20, 0xfffffffa, 0x81, 0xb7, 0x6a0, 0x9, 0x6, 0x7fff, 0x7f, 0x8, 0x6, 0x7, 0x6, 0x6, 0x1f, 0x0, 0x1, 0x80000000, 0x8000, 0x9, 0x2, 0x1000003, 0x8000, 0xa, 0x9, 0x0, 0x8ab3, 0x8, 0x25, 0x2, 0xffffffe0, 0x1, 0x7, 0x6, 0x7, 0x3, 0x3, 0x21, 0x401, 0x101, 0x10001, 0x5, 0x4, 0x1f, 0x8, 0x8, 0x2d8, 0x80000001, 0xffffffff, 0x79a, 0xfffffffb, 0x1, 0x9, 0x81e5, 0x200, 0x4, 0x7ff, 0x81f, 0x2, 0x8, 0x9560, 0x3f, 0x9, 0x1, 0x5, 0xbc9, 0x9, 0x80000001, 0x7, 0x1, 0x7, 0x9, 0x3, 0x4, 0x0, 0xfffffff8, 0xffffff82, 0x1, 0x7fff, 0x80000001, 0x2, 0x20, 0x8, 0xc635, 0x10001, 0x6, 0x80000001, 0x7, 0x4, 0x3, 0x1000, 0x7, 0x401, 0x0, 0x4, 0xffff0000, 0x5, 0xfffffffe, 0x1, 0x8, 0x9, 0x101, 0x200, 0x8, 0x0, 0x1, 0x9, 0x7, 0x6, 0x2, 0x2, 0x7b23, 0x1, 0x4, 0x7, 0x5, 0x80000001, 0x7, 0xffffffff, 0x3, 0xe53, 0x5, 0x200, 0x800, 0x5, 0x4, 0xcce, 0x5, 0x8, 0x9, 0x27, 0x6, 0x976c358, 0xffffffff, 0x400, 0x7, 0x5, 0x0, 0xfffffff7, 0x4, 0x4, 0x3ff, 0x7, 0x4, 0x8de, 0x8, 0xffffffff, 0x6, 0x1, 0x10000, 0x67, 0x7, 0x0, 0x9, 0xe1, 0x400, 0xf5cb, 0x7ff, 0x9, 0x1ff, 0x0, 0x7fff, 0x53, 0x2, 0x0, 0x853, 0x4, 0x5, 0x4, 0x3, 0x3, 0x1, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x2, 0x1ff, 0x3, 0x1, 0xffff26dd, 0x1, 0xfffffffe, 0x7, 0x5, 0x4, 0x9, 0x7, 0x4, 0x1, 0x48000000, 0x7, 0x9, 0x3, 0x800, 0x3, 0xffffffff, 0x40, 0x2e, 0x69, 0x7ff, 0xf2b, 0x9, 0x1, 0x9, 0x7, 0x8, 0x6, 0x4, 0x9, 0x800, 0x2, 0x5, 0xff, 0xfffff801, 0x401, 0x6, 0x5, 0xfffffbff, 0x1, 0x3, 0x7fff, 0x7, 0x7, 0x1, 0x4, 0x4, 0xdbe, 0x7c6ccdcf, 0x1fe0, 0x80000000, 0x6, 0x51371f99, 0x8, 0x80000001, 0x2, 0xff, 0x80000000, 0x20, 0x6, 0xc16, 0x0, 0x3, 0x3, 0x9, 0x4, 0x0, 0x2, 0x3, 0x1, 0x9, 0x1fffc, 0x0, 0x1, 0x2, 0x5, 0x8, 0x7, 0xfec0, 0x0, 0xf8, 0x7fffffff, 0x800, 0x0, 0x0, 0x1, 0xffff, 0x1, 0x401, 0x3, 0x5, 0x5, 0x40, 0x4, 0x3, 0x3, 0xfc000000, 0x7, 0x3, 0x1, 0x1, 0x1, 0x3f, 0x9, 0x10000, 0x2, 0x2, 0x4ea, 0x1f, 0x6, 0x2bf2, 0x100, 0x7, 0xffffb0d4, 0xfa, 0x7, 0x884d, 0xfffff000, 0xfffff801, 0x7, 0x7, 0x7fff, 0x400, 0x5, 0x5, 0x51, 0x400, 0x1, 0xffff4eea, 0x6aba4833, 0x7, 0xfabf, 0x5d3, 0xa4fe, 0x7f, 0x7ff, 0xfffffe06, 0x1, 0xea05, 0xd5b1, 0x6, 0x2ac, 0x9, 0x8, 0xff, 0x8, 0x8, 0x1, 0xfffff800, 0x1, 0x1f, 0x2, 0x0, 0xffff, 0xff, 0x2, 0x7f, 0x10001, 0x0, 0x4, 0xa9b, 0x8001, 0x6, 0xfffffe00, 0x9, 0x1f, 0x1ff, 0x0, 0x0, 0x2, 0x7fff, 0xffff8000, 0xb4, 0x5, 0x0, 0x24, 0x4, 0x80000000, 0x10000, 0x10001, 0x10001, 0x607, 0x1f, 0x8, 0xc3c8, 0x3, 0x8, 0x2, 0x1, 0xa050, 0x2, 0xf617, 0x6, 0x5, 0x3ff, 0x4, 0x93c, 0x3, 0x80, 0x9, 0x6, 0x4, 0x3, 0x6, 0x2, 0x0, 0x5, 0x4, 0x0, 0x4, 0x1000, 0x3, 0x2b, 0xd22, 0xff, 0x1ac6, 0x1f, 0x5, 0x4, 0x80, 0x8001, 0xffff, 0x7, 0x2, 0x101, 0x6, 0x9, 0xfffff653, 0x9, 0x47a8, 0xfffffffe, 0x2, 0x8, 0x7, 0x3, 0x1f, 0xffffffff, 0x7fffffff, 0x100, 0xfffffff9, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3ef8, 0x3, 0x1, 0x5, 0x20, 0x7, 0x9, 0x9, 0x7ff, 0x9, 0xfff, 0x7ff, 0x6, 0x3ff, 0x0, 0x3ff, 0x6, 0x9, 0x10000, 0xe2, 0x8, 0xbbc, 0x3, 0x6b26, 0x1, 0x3, 0x7b12e5f7, 0xc6, 0x101, 0x1000, 0x400, 0x8, 0x8, 0x3, 0x3, 0x200, 0x7, 0x400, 0xffff, 0x400, 0x80000000, 0x8, 0x9, 0x8, 0xcb, 0x1, 0x0, 0x8000, 0x3d000, 0x401, 0x9, 0x0, 0x1000, 0xfffffe00, 0x240, 0x1b, 0x6, 0x7, 0x1f, 0x2, 0x7, 0x7f, 0x5, 0x480000, 0x1, 0x100, 0x6, 0x200, 0x8, 0x401, 0x2726, 0x0, 0x8, 0xfffffffc, 0x9, 0xffffffc6, 0x2, 0x7, 0x10000, 0x4, 0x10000, 0x201a, 0xfffffff7, 0x4, 0x1ca87376], 0x6, 0x400}) 09:08:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x11, 0x16, 0x3, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe62) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x11, 0x16, 0x3, 0x0}) (async) pipe(&(0x7f0000000600)) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe62) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) (async) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (async) 09:08:28 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x0) 09:08:28 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x80000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00a10e40000000f80000000534150018006600000329907864010100e00000020702c700"]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a52985f9a9e19828e371fad410a790270c231f74004000800000619000000007482700200065000040299078ac1e000160fce3716aeb433d4c7b85c8c4b26bf309e73c185afce97babf53afab93bd0e4f64c9456c7a2caffe78fe7a1a3ea749b63c5db00cd2a98198a4c7aa2a837537ea92bb89fb0d3e0557b8489ff36c487f83909d8af0f3bcc60e4b2d02a2fb5f3ac7974370e6c8bfbde99bcf05de7fea20cc732d739e446ed036ea667a38d1bb57953"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x20, 0x1000, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8000, 0x8, 0x10001, 0xbdb3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r13, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d8dd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000200c03f07000000010101092e00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040018b8000008000100", @ANYRES32=r10, @ANYBLOB="1402028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f040000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x660}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000040) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r14 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r14, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSBRKP(r0, 0x5425, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TCSBRKP(r0, 0x5425, 0x1) (async) 09:08:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000200)=@ax25={{}, [@netrom, @remote, @rose, @null, @netrom, @null, @netrom, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/85, 0x55}], 0x4}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x7, 0xffffff01, 0x7f, 0x2, 0x1, "8aa3c169caf2743bdcbea1c0eeed3d9a8e2dc4", 0x6fd0, 0x1}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x11, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001580)={&(0x7f0000000580)=[0xb42, 0xfffffeff, 0xfffff8cc, 0x7, 0x80000001, 0x80000000, 0x0, 0x6, 0x80000000, 0x95, 0x800, 0x18482aa0, 0x7ec, 0x6, 0x7, 0xde, 0x4, 0x7, 0xfffffffb, 0x2, 0x3, 0x4, 0xa82, 0x3ff, 0x4, 0xfff, 0x80, 0x7, 0x48, 0x7, 0x5, 0x200, 0x7fffffff, 0x7, 0x757864ae, 0x3f, 0x3, 0x4, 0x4, 0x8000, 0x0, 0x0, 0x200, 0x78c, 0x6, 0xffffbff9, 0x1, 0x32, 0x200, 0xfffffffe, 0x0, 0x7, 0x7fffffff, 0xfe22, 0x7, 0x7fffffff, 0x37, 0x5, 0x8000, 0x9, 0x2, 0xfffb, 0x7f, 0x3, 0x6, 0x800, 0x20, 0x5431, 0x1ff, 0x5, 0x1, 0x6, 0x9, 0x2, 0x200, 0x6, 0x1, 0x4, 0x8c, 0x2, 0x0, 0x9, 0x0, 0x5, 0x8, 0x5, 0x5, 0xd8a, 0xa0d, 0xffff0000, 0x3, 0x4, 0x80, 0x2, 0xf8, 0x4408, 0x3, 0x5, 0x1, 0x4, 0x0, 0x6, 0xffffffff, 0xfffffffe, 0x7f, 0x400, 0x1f, 0x4, 0x6, 0x8001, 0x80, 0x3ff, 0x2, 0xffffffff, 0x2b5, 0x4, 0x7, 0x0, 0x7fffffff, 0x7ff, 0x10000, 0x0, 0xffff, 0x0, 0x3, 0x5f11, 0xbd90, 0x0, 0x20, 0x10000, 0x1f, 0x8, 0x0, 0x3, 0x3, 0x0, 0xffffff20, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x0, 0xffff, 0x4, 0x1, 0x8, 0xe2, 0x4, 0x0, 0x8, 0x80, 0x401, 0xda6, 0x4, 0xf54, 0x4, 0xff, 0x1c, 0x401, 0xfffffffd, 0xffff9071, 0x8, 0x2, 0x6, 0xfff, 0x0, 0xa5, 0x8, 0x8, 0x0, 0x5, 0x6, 0x0, 0xcb, 0x8, 0xb0af, 0x2, 0x1, 0x80000001, 0xa1c9, 0x8, 0x81, 0x0, 0x4, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x1, 0x7ff, 0x800, 0x7fff, 0x80000000, 0x31e, 0x7fff, 0x80000000, 0x1, 0xfffffff7, 0x50, 0x4, 0x8, 0x7cc, 0x68, 0x6, 0xe54, 0x0, 0x5, 0xff, 0x8001, 0x9, 0x4, 0x5, 0x0, 0x40, 0x1, 0x2, 0x7, 0x8, 0x0, 0x4, 0x10000, 0xffffff7f, 0x1f, 0x6000, 0x1f, 0x1, 0x4, 0x6, 0x9, 0x4, 0xfc000000, 0xffffff7f, 0x81, 0x200, 0x8, 0x21fb, 0x2, 0x0, 0x7f, 0xfb1d, 0xf1f2, 0x5, 0x8, 0x4, 0x9, 0x5, 0x7, 0x80000001, 0x400, 0x100, 0x18000000, 0x9, 0x1, 0x1, 0x6, 0x1f, 0x8, 0x101, 0x10001, 0x0, 0x2, 0x1, 0x7, 0xfffffffe, 0x0, 0x7787ecb, 0x6, 0x9, 0xffffffcc, 0x9a, 0xb0, 0x2, 0xd99, 0x800, 0x80, 0x579, 0x1, 0x9b, 0x3, 0x4, 0x4, 0x1ea, 0x120000, 0x0, 0xfffeffff, 0x7ff, 0x0, 0x2, 0x800, 0xffffff38, 0x8, 0x2, 0x5, 0x3, 0x8, 0xffffb16f, 0xfff, 0x3, 0x4, 0x3, 0xff, 0x8, 0x2, 0x1, 0x8, 0x3, 0x3ff, 0x6, 0x101, 0x9, 0x3d7, 0x8000, 0x3, 0x1, 0x3, 0x2, 0x81, 0x6a, 0x9, 0x82, 0xfff, 0x5, 0x120000, 0x6, 0x7ff, 0x8001, 0x800, 0x8, 0x0, 0xfff, 0x7, 0x7, 0x1, 0x4, 0x3, 0x8001, 0xd61f, 0x4, 0x8750, 0x9, 0x800, 0x80000001, 0x1, 0x3f, 0x3, 0x3ff, 0x1, 0xd1d6, 0xa3, 0x3ff, 0x8000, 0x3ff, 0x0, 0x4, 0xfff, 0x81, 0x7590, 0x0, 0x3f, 0x9, 0x101, 0x8, 0x1, 0x10001, 0x1, 0x7, 0x1, 0x6, 0x3, 0x8000, 0x7, 0x180, 0x78a, 0x2, 0x4, 0x7, 0x4, 0x5badcdeb, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3ff, 0x7, 0x9, 0x3, 0x9, 0x4dc7, 0x10000, 0x4, 0xd1e, 0x4, 0xfffffffe, 0x5, 0x28, 0x1, 0x78019973, 0x4, 0x7, 0x609, 0x7, 0x5, 0x5, 0x800, 0x5, 0x9, 0x4, 0x7, 0xfffffff9, 0x4, 0x1, 0x8, 0x1, 0x97f, 0x5, 0x6, 0x81, 0x80000000, 0x15a59280, 0xc6, 0x3c99, 0x3, 0x8, 0xd4, 0xa319, 0xffffffff, 0x4, 0x3, 0x20, 0x5, 0x7fff, 0x3, 0xe385, 0xaa78, 0x1, 0x9, 0x3, 0x6, 0x2, 0x0, 0x101, 0x0, 0x1, 0x6, 0x1, 0x9, 0x4, 0x7ff, 0x3f, 0x0, 0x6, 0x1, 0x8, 0x4, 0x5, 0x0, 0x10000, 0x80000001, 0x3, 0x5, 0x5, 0x3, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x2, 0x0, 0x7f, 0x5, 0x1, 0x7fffffff, 0x1a9, 0x7fffffff, 0x20, 0x1, 0x0, 0x2, 0x2, 0x2, 0x7, 0x200, 0xfffeffff, 0x200, 0x2, 0xb2, 0x1000, 0x5, 0x7, 0x0, 0x5, 0x5714, 0x9, 0x40, 0x8, 0x9, 0x1800, 0x20, 0x8, 0x9, 0x1, 0x6, 0x7, 0x8, 0x6, 0x8, 0x9e91, 0x7fffffff, 0x5, 0xd177, 0x9, 0x80000000, 0xfff, 0xffff8001, 0x4, 0x1, 0x3d, 0x5, 0x1498c2af, 0x5, 0x5, 0x7fff, 0x5, 0x1000, 0x8, 0x7ff, 0x2, 0xff, 0x179c1c39, 0x3f, 0x7, 0x8b20, 0x1f, 0x2, 0x9, 0x3, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0xffffffe0, 0x7, 0x81, 0xab15, 0x81, 0x3, 0x0, 0x1, 0x3, 0x1, 0x9, 0x2, 0xf6, 0x8fd, 0x3be, 0x2, 0x1000, 0x9, 0x6, 0x7fffffff, 0x6, 0x26a, 0x9, 0xd1, 0x5, 0x7, 0x5, 0x5, 0x6280000, 0x2, 0x1, 0x200, 0x7f, 0x1000, 0xfffffc00, 0x7fffffff, 0xffffffe1, 0x800, 0x200, 0x9, 0xff, 0x543, 0x0, 0x0, 0x8, 0x6, 0x7340, 0x9, 0x500000, 0x2, 0x8462, 0x6a30, 0x1, 0x3, 0x7, 0x1f, 0x5, 0x20, 0x9, 0x479, 0x5, 0xffff7fff, 0x3f, 0x9, 0xffff, 0xffff8001, 0x3ff, 0xffffffff, 0x400, 0xffffffff, 0x6, 0x0, 0x1, 0x101, 0x1ff, 0x61d, 0x8, 0x9, 0x5, 0x3f, 0x1, 0x400, 0x0, 0x1f, 0x1, 0x6, 0x1c06, 0x5, 0xfffffffc, 0xffff, 0xa362, 0x5, 0xe8, 0x7f, 0x8000, 0x68bf, 0x399, 0x1000, 0x684, 0x4, 0xfa1, 0x101, 0xda92, 0x2, 0x80000000, 0x6, 0xff, 0x200, 0x2f, 0x4, 0x5, 0x0, 0xfc, 0xcd, 0x101, 0x6ab, 0x4, 0x9, 0x401, 0xcc, 0x80000000, 0xffffffff, 0x80, 0xfff, 0xf4, 0x8, 0x8000, 0x8, 0x5194195, 0x1, 0x2, 0x6, 0x1000, 0x6e3e, 0x2, 0x40, 0x7, 0xbc94, 0x1, 0x5, 0xa92, 0x6, 0x401, 0x5, 0x63d1, 0x0, 0xbe, 0x4, 0x5, 0xff, 0x2, 0x80000001, 0x8, 0x5, 0x7, 0x5, 0x6b70, 0x659a, 0x4, 0x1, 0x3d, 0xf725, 0x3, 0x6bc, 0xff, 0x6199d1ce, 0x0, 0x2bcf4bc1, 0xc5, 0x7, 0x81, 0x1, 0x3f, 0x7, 0x7, 0x9, 0x1f, 0xffffffff, 0x4, 0x8, 0x7, 0xff, 0xc0, 0xe3, 0x3, 0x1, 0x7f, 0x1, 0x9, 0x7, 0x8, 0x1, 0xe245, 0x6, 0x5, 0x0, 0x5, 0xcc, 0x8000000, 0x4, 0x8, 0x47b, 0x3, 0x7, 0x2, 0x1, 0x2, 0x2, 0xfff, 0xab9e, 0x9, 0x9a, 0xffff, 0x5, 0xa4, 0x400, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x5, 0x5, 0x7f, 0x0, 0x4, 0xfffffffa, 0x81, 0x0, 0x87f3, 0xc45, 0x400, 0x10001, 0x0, 0x5, 0x6, 0x6, 0x8, 0xd3d, 0x28, 0x9b3, 0xfffffc01, 0x1000, 0x5d, 0x80000001, 0x5, 0x3ff, 0x800, 0x1, 0x4, 0x1131, 0x1, 0x6, 0x100, 0x0, 0x5, 0x9c33, 0x1, 0x6, 0x3, 0x5, 0x7fff, 0xff, 0xffffffff, 0x80000001, 0x80000000, 0x6, 0x2, 0x800, 0x8, 0x82, 0x4, 0x7, 0x3, 0x72, 0x10001, 0x81, 0x3, 0xdb33, 0x4, 0x6d6d, 0x9, 0x8, 0x10001, 0x8, 0x80, 0x8, 0x4, 0xe334, 0x8, 0x0, 0x200, 0x4, 0xb9, 0x0, 0x7d7, 0x4e, 0x401, 0x0, 0x42, 0x1, 0x6, 0xffff8001, 0x8001, 0x6, 0xfffffffb, 0xd95, 0xfff, 0x4, 0x20, 0x7, 0xffffffff, 0x400, 0x7f, 0x3, 0xffffffff, 0x9, 0x3, 0x2, 0x8000, 0x5, 0x4, 0x5, 0x8, 0x3f, 0x1, 0x80000000, 0x7, 0x4d9, 0x1, 0xffff, 0x0, 0x608, 0x84, 0x0, 0x1, 0x4, 0x3, 0x7, 0x9, 0x5, 0x80000001, 0xc224, 0x401, 0xfffffffb, 0x4, 0x6, 0x9, 0x4, 0x6, 0x6, 0x7fffffff, 0x1f, 0x1924e374, 0x20, 0x3, 0x9, 0xc6, 0x5, 0x3, 0x1ff, 0x2, 0x3f, 0x7f, 0x0, 0x7ff, 0x0, 0x200, 0x10000, 0x6a4, 0x7, 0x0, 0x7fff, 0xffffffff, 0x8, 0x6, 0x80000000, 0xfff, 0x7fffffff, 0xb8f4, 0x3, 0xf1ac, 0x4b, 0x3, 0x6593, 0x4, 0xfffffff5, 0x6c, 0x18, 0xfffffffb, 0x5, 0x1f, 0x1, 0xc443, 0x80000001, 0x8, 0x8001, 0xfffffff7, 0x1, 0xfffffffa, 0xfa, 0x101, 0xab, 0x20, 0x6, 0x12000000, 0x3, 0x6afc, 0x6, 0x1, 0x68a, 0x100, 0x7, 0x0, 0x40, 0x1, 0x1, 0x1f, 0x0, 0x8, 0x5, 0xfffffff9, 0x6, 0x91c, 0xffffffff, 0x0, 0x2, 0x3c20, 0x7, 0x0, 0xfff, 0x64, 0x1, 0x5, 0x9, 0x7ff, 0x1, 0x9af, 0x35, 0xd743, 0x0, 0x9, 0x2, 0x7ff, 0x7, 0x3, 0x58f39a6, 0x8, 0xe147, 0x2, 0x1, 0x0, 0x4, 0x7, 0x1f, 0x6, 0x0, 0x7fff, 0xfff, 0x4, 0x81, 0x80000001, 0x8, 0x3f, 0x4, 0x1, 0x7, 0xffffffff, 0x36, 0x7, 0x7, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x6], 0x2, 0x400, 0x8}) accept4$netrom(r3, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @remote, @remote, @null, @null, @default, @null, @rose]}, &(0x7f0000000540)=0x48, 0x800) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000015c0)={'vcan0\x00'}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 09:08:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x11, 0x16, 0x3, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe62) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) (async, rerun: 32) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) (rerun: 32) 09:08:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSBRKP(r0, 0x5425, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TCSBRKP(r0, 0x5425, 0x1) (async) 09:08:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x15, 0x800, 0x800) getsockname$netrom(r1, &(0x7f0000000000)={{}, [@bcast, @default, @null, @rose, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x81, 0x0}) 09:08:28 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:08:28 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000200)=@ax25={{}, [@netrom, @remote, @rose, @null, @netrom, @null, @netrom, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/85, 0x55}], 0x4}, 0x0) (async) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x7, 0xffffff01, 0x7f, 0x2, 0x1, "8aa3c169caf2743bdcbea1c0eeed3d9a8e2dc4", 0x6fd0, 0x1}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair(0x11, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001580)={&(0x7f0000000580)=[0xb42, 0xfffffeff, 0xfffff8cc, 0x7, 0x80000001, 0x80000000, 0x0, 0x6, 0x80000000, 0x95, 0x800, 0x18482aa0, 0x7ec, 0x6, 0x7, 0xde, 0x4, 0x7, 0xfffffffb, 0x2, 0x3, 0x4, 0xa82, 0x3ff, 0x4, 0xfff, 0x80, 0x7, 0x48, 0x7, 0x5, 0x200, 0x7fffffff, 0x7, 0x757864ae, 0x3f, 0x3, 0x4, 0x4, 0x8000, 0x0, 0x0, 0x200, 0x78c, 0x6, 0xffffbff9, 0x1, 0x32, 0x200, 0xfffffffe, 0x0, 0x7, 0x7fffffff, 0xfe22, 0x7, 0x7fffffff, 0x37, 0x5, 0x8000, 0x9, 0x2, 0xfffb, 0x7f, 0x3, 0x6, 0x800, 0x20, 0x5431, 0x1ff, 0x5, 0x1, 0x6, 0x9, 0x2, 0x200, 0x6, 0x1, 0x4, 0x8c, 0x2, 0x0, 0x9, 0x0, 0x5, 0x8, 0x5, 0x5, 0xd8a, 0xa0d, 0xffff0000, 0x3, 0x4, 0x80, 0x2, 0xf8, 0x4408, 0x3, 0x5, 0x1, 0x4, 0x0, 0x6, 0xffffffff, 0xfffffffe, 0x7f, 0x400, 0x1f, 0x4, 0x6, 0x8001, 0x80, 0x3ff, 0x2, 0xffffffff, 0x2b5, 0x4, 0x7, 0x0, 0x7fffffff, 0x7ff, 0x10000, 0x0, 0xffff, 0x0, 0x3, 0x5f11, 0xbd90, 0x0, 0x20, 0x10000, 0x1f, 0x8, 0x0, 0x3, 0x3, 0x0, 0xffffff20, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x0, 0xffff, 0x4, 0x1, 0x8, 0xe2, 0x4, 0x0, 0x8, 0x80, 0x401, 0xda6, 0x4, 0xf54, 0x4, 0xff, 0x1c, 0x401, 0xfffffffd, 0xffff9071, 0x8, 0x2, 0x6, 0xfff, 0x0, 0xa5, 0x8, 0x8, 0x0, 0x5, 0x6, 0x0, 0xcb, 0x8, 0xb0af, 0x2, 0x1, 0x80000001, 0xa1c9, 0x8, 0x81, 0x0, 0x4, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x1, 0x7ff, 0x800, 0x7fff, 0x80000000, 0x31e, 0x7fff, 0x80000000, 0x1, 0xfffffff7, 0x50, 0x4, 0x8, 0x7cc, 0x68, 0x6, 0xe54, 0x0, 0x5, 0xff, 0x8001, 0x9, 0x4, 0x5, 0x0, 0x40, 0x1, 0x2, 0x7, 0x8, 0x0, 0x4, 0x10000, 0xffffff7f, 0x1f, 0x6000, 0x1f, 0x1, 0x4, 0x6, 0x9, 0x4, 0xfc000000, 0xffffff7f, 0x81, 0x200, 0x8, 0x21fb, 0x2, 0x0, 0x7f, 0xfb1d, 0xf1f2, 0x5, 0x8, 0x4, 0x9, 0x5, 0x7, 0x80000001, 0x400, 0x100, 0x18000000, 0x9, 0x1, 0x1, 0x6, 0x1f, 0x8, 0x101, 0x10001, 0x0, 0x2, 0x1, 0x7, 0xfffffffe, 0x0, 0x7787ecb, 0x6, 0x9, 0xffffffcc, 0x9a, 0xb0, 0x2, 0xd99, 0x800, 0x80, 0x579, 0x1, 0x9b, 0x3, 0x4, 0x4, 0x1ea, 0x120000, 0x0, 0xfffeffff, 0x7ff, 0x0, 0x2, 0x800, 0xffffff38, 0x8, 0x2, 0x5, 0x3, 0x8, 0xffffb16f, 0xfff, 0x3, 0x4, 0x3, 0xff, 0x8, 0x2, 0x1, 0x8, 0x3, 0x3ff, 0x6, 0x101, 0x9, 0x3d7, 0x8000, 0x3, 0x1, 0x3, 0x2, 0x81, 0x6a, 0x9, 0x82, 0xfff, 0x5, 0x120000, 0x6, 0x7ff, 0x8001, 0x800, 0x8, 0x0, 0xfff, 0x7, 0x7, 0x1, 0x4, 0x3, 0x8001, 0xd61f, 0x4, 0x8750, 0x9, 0x800, 0x80000001, 0x1, 0x3f, 0x3, 0x3ff, 0x1, 0xd1d6, 0xa3, 0x3ff, 0x8000, 0x3ff, 0x0, 0x4, 0xfff, 0x81, 0x7590, 0x0, 0x3f, 0x9, 0x101, 0x8, 0x1, 0x10001, 0x1, 0x7, 0x1, 0x6, 0x3, 0x8000, 0x7, 0x180, 0x78a, 0x2, 0x4, 0x7, 0x4, 0x5badcdeb, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3ff, 0x7, 0x9, 0x3, 0x9, 0x4dc7, 0x10000, 0x4, 0xd1e, 0x4, 0xfffffffe, 0x5, 0x28, 0x1, 0x78019973, 0x4, 0x7, 0x609, 0x7, 0x5, 0x5, 0x800, 0x5, 0x9, 0x4, 0x7, 0xfffffff9, 0x4, 0x1, 0x8, 0x1, 0x97f, 0x5, 0x6, 0x81, 0x80000000, 0x15a59280, 0xc6, 0x3c99, 0x3, 0x8, 0xd4, 0xa319, 0xffffffff, 0x4, 0x3, 0x20, 0x5, 0x7fff, 0x3, 0xe385, 0xaa78, 0x1, 0x9, 0x3, 0x6, 0x2, 0x0, 0x101, 0x0, 0x1, 0x6, 0x1, 0x9, 0x4, 0x7ff, 0x3f, 0x0, 0x6, 0x1, 0x8, 0x4, 0x5, 0x0, 0x10000, 0x80000001, 0x3, 0x5, 0x5, 0x3, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x2, 0x0, 0x7f, 0x5, 0x1, 0x7fffffff, 0x1a9, 0x7fffffff, 0x20, 0x1, 0x0, 0x2, 0x2, 0x2, 0x7, 0x200, 0xfffeffff, 0x200, 0x2, 0xb2, 0x1000, 0x5, 0x7, 0x0, 0x5, 0x5714, 0x9, 0x40, 0x8, 0x9, 0x1800, 0x20, 0x8, 0x9, 0x1, 0x6, 0x7, 0x8, 0x6, 0x8, 0x9e91, 0x7fffffff, 0x5, 0xd177, 0x9, 0x80000000, 0xfff, 0xffff8001, 0x4, 0x1, 0x3d, 0x5, 0x1498c2af, 0x5, 0x5, 0x7fff, 0x5, 0x1000, 0x8, 0x7ff, 0x2, 0xff, 0x179c1c39, 0x3f, 0x7, 0x8b20, 0x1f, 0x2, 0x9, 0x3, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0xffffffe0, 0x7, 0x81, 0xab15, 0x81, 0x3, 0x0, 0x1, 0x3, 0x1, 0x9, 0x2, 0xf6, 0x8fd, 0x3be, 0x2, 0x1000, 0x9, 0x6, 0x7fffffff, 0x6, 0x26a, 0x9, 0xd1, 0x5, 0x7, 0x5, 0x5, 0x6280000, 0x2, 0x1, 0x200, 0x7f, 0x1000, 0xfffffc00, 0x7fffffff, 0xffffffe1, 0x800, 0x200, 0x9, 0xff, 0x543, 0x0, 0x0, 0x8, 0x6, 0x7340, 0x9, 0x500000, 0x2, 0x8462, 0x6a30, 0x1, 0x3, 0x7, 0x1f, 0x5, 0x20, 0x9, 0x479, 0x5, 0xffff7fff, 0x3f, 0x9, 0xffff, 0xffff8001, 0x3ff, 0xffffffff, 0x400, 0xffffffff, 0x6, 0x0, 0x1, 0x101, 0x1ff, 0x61d, 0x8, 0x9, 0x5, 0x3f, 0x1, 0x400, 0x0, 0x1f, 0x1, 0x6, 0x1c06, 0x5, 0xfffffffc, 0xffff, 0xa362, 0x5, 0xe8, 0x7f, 0x8000, 0x68bf, 0x399, 0x1000, 0x684, 0x4, 0xfa1, 0x101, 0xda92, 0x2, 0x80000000, 0x6, 0xff, 0x200, 0x2f, 0x4, 0x5, 0x0, 0xfc, 0xcd, 0x101, 0x6ab, 0x4, 0x9, 0x401, 0xcc, 0x80000000, 0xffffffff, 0x80, 0xfff, 0xf4, 0x8, 0x8000, 0x8, 0x5194195, 0x1, 0x2, 0x6, 0x1000, 0x6e3e, 0x2, 0x40, 0x7, 0xbc94, 0x1, 0x5, 0xa92, 0x6, 0x401, 0x5, 0x63d1, 0x0, 0xbe, 0x4, 0x5, 0xff, 0x2, 0x80000001, 0x8, 0x5, 0x7, 0x5, 0x6b70, 0x659a, 0x4, 0x1, 0x3d, 0xf725, 0x3, 0x6bc, 0xff, 0x6199d1ce, 0x0, 0x2bcf4bc1, 0xc5, 0x7, 0x81, 0x1, 0x3f, 0x7, 0x7, 0x9, 0x1f, 0xffffffff, 0x4, 0x8, 0x7, 0xff, 0xc0, 0xe3, 0x3, 0x1, 0x7f, 0x1, 0x9, 0x7, 0x8, 0x1, 0xe245, 0x6, 0x5, 0x0, 0x5, 0xcc, 0x8000000, 0x4, 0x8, 0x47b, 0x3, 0x7, 0x2, 0x1, 0x2, 0x2, 0xfff, 0xab9e, 0x9, 0x9a, 0xffff, 0x5, 0xa4, 0x400, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x5, 0x5, 0x7f, 0x0, 0x4, 0xfffffffa, 0x81, 0x0, 0x87f3, 0xc45, 0x400, 0x10001, 0x0, 0x5, 0x6, 0x6, 0x8, 0xd3d, 0x28, 0x9b3, 0xfffffc01, 0x1000, 0x5d, 0x80000001, 0x5, 0x3ff, 0x800, 0x1, 0x4, 0x1131, 0x1, 0x6, 0x100, 0x0, 0x5, 0x9c33, 0x1, 0x6, 0x3, 0x5, 0x7fff, 0xff, 0xffffffff, 0x80000001, 0x80000000, 0x6, 0x2, 0x800, 0x8, 0x82, 0x4, 0x7, 0x3, 0x72, 0x10001, 0x81, 0x3, 0xdb33, 0x4, 0x6d6d, 0x9, 0x8, 0x10001, 0x8, 0x80, 0x8, 0x4, 0xe334, 0x8, 0x0, 0x200, 0x4, 0xb9, 0x0, 0x7d7, 0x4e, 0x401, 0x0, 0x42, 0x1, 0x6, 0xffff8001, 0x8001, 0x6, 0xfffffffb, 0xd95, 0xfff, 0x4, 0x20, 0x7, 0xffffffff, 0x400, 0x7f, 0x3, 0xffffffff, 0x9, 0x3, 0x2, 0x8000, 0x5, 0x4, 0x5, 0x8, 0x3f, 0x1, 0x80000000, 0x7, 0x4d9, 0x1, 0xffff, 0x0, 0x608, 0x84, 0x0, 0x1, 0x4, 0x3, 0x7, 0x9, 0x5, 0x80000001, 0xc224, 0x401, 0xfffffffb, 0x4, 0x6, 0x9, 0x4, 0x6, 0x6, 0x7fffffff, 0x1f, 0x1924e374, 0x20, 0x3, 0x9, 0xc6, 0x5, 0x3, 0x1ff, 0x2, 0x3f, 0x7f, 0x0, 0x7ff, 0x0, 0x200, 0x10000, 0x6a4, 0x7, 0x0, 0x7fff, 0xffffffff, 0x8, 0x6, 0x80000000, 0xfff, 0x7fffffff, 0xb8f4, 0x3, 0xf1ac, 0x4b, 0x3, 0x6593, 0x4, 0xfffffff5, 0x6c, 0x18, 0xfffffffb, 0x5, 0x1f, 0x1, 0xc443, 0x80000001, 0x8, 0x8001, 0xfffffff7, 0x1, 0xfffffffa, 0xfa, 0x101, 0xab, 0x20, 0x6, 0x12000000, 0x3, 0x6afc, 0x6, 0x1, 0x68a, 0x100, 0x7, 0x0, 0x40, 0x1, 0x1, 0x1f, 0x0, 0x8, 0x5, 0xfffffff9, 0x6, 0x91c, 0xffffffff, 0x0, 0x2, 0x3c20, 0x7, 0x0, 0xfff, 0x64, 0x1, 0x5, 0x9, 0x7ff, 0x1, 0x9af, 0x35, 0xd743, 0x0, 0x9, 0x2, 0x7ff, 0x7, 0x3, 0x58f39a6, 0x8, 0xe147, 0x2, 0x1, 0x0, 0x4, 0x7, 0x1f, 0x6, 0x0, 0x7fff, 0xfff, 0x4, 0x81, 0x80000001, 0x8, 0x3f, 0x4, 0x1, 0x7, 0xffffffff, 0x36, 0x7, 0x7, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x6], 0x2, 0x400, 0x8}) (async) accept4$netrom(r3, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @remote, @remote, @null, @null, @default, @null, @rose]}, &(0x7f0000000540)=0x48, 0x800) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000015c0)={'vcan0\x00'}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) 09:08:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x2160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000004c0)=@multiplanar_fd={0xfffff77f, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x1, 0x7f, 0x81, 0x20, 0x81, "9efb9fed"}, 0x3ff, 0x4, {&(0x7f0000000440)=[{0x5, 0x0, {}, 0xfff}, {0x401, 0x80000001, {r2}, 0xff}]}, 0x3}) 09:08:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = socket(0x15, 0x800, 0x800) getsockname$netrom(r1, &(0x7f0000000000)={{}, [@bcast, @default, @null, @rose, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x81, 0x0}) 09:08:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x2160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000004c0)=@multiplanar_fd={0xfffff77f, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x1, 0x7f, 0x81, 0x20, 0x81, "9efb9fed"}, 0x3ff, 0x4, {&(0x7f0000000440)=[{0x5, 0x0, {}, 0xfff}, {0x401, 0x80000001, {r2}, 0xff}]}, 0x3}) 09:08:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000200)=@ax25={{}, [@netrom, @remote, @rose, @null, @netrom, @null, @netrom, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/85, 0x55}], 0x4}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x7, 0xffffff01, 0x7f, 0x2, 0x1, "8aa3c169caf2743bdcbea1c0eeed3d9a8e2dc4", 0x6fd0, 0x1}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x11, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001580)={&(0x7f0000000580)=[0xb42, 0xfffffeff, 0xfffff8cc, 0x7, 0x80000001, 0x80000000, 0x0, 0x6, 0x80000000, 0x95, 0x800, 0x18482aa0, 0x7ec, 0x6, 0x7, 0xde, 0x4, 0x7, 0xfffffffb, 0x2, 0x3, 0x4, 0xa82, 0x3ff, 0x4, 0xfff, 0x80, 0x7, 0x48, 0x7, 0x5, 0x200, 0x7fffffff, 0x7, 0x757864ae, 0x3f, 0x3, 0x4, 0x4, 0x8000, 0x0, 0x0, 0x200, 0x78c, 0x6, 0xffffbff9, 0x1, 0x32, 0x200, 0xfffffffe, 0x0, 0x7, 0x7fffffff, 0xfe22, 0x7, 0x7fffffff, 0x37, 0x5, 0x8000, 0x9, 0x2, 0xfffb, 0x7f, 0x3, 0x6, 0x800, 0x20, 0x5431, 0x1ff, 0x5, 0x1, 0x6, 0x9, 0x2, 0x200, 0x6, 0x1, 0x4, 0x8c, 0x2, 0x0, 0x9, 0x0, 0x5, 0x8, 0x5, 0x5, 0xd8a, 0xa0d, 0xffff0000, 0x3, 0x4, 0x80, 0x2, 0xf8, 0x4408, 0x3, 0x5, 0x1, 0x4, 0x0, 0x6, 0xffffffff, 0xfffffffe, 0x7f, 0x400, 0x1f, 0x4, 0x6, 0x8001, 0x80, 0x3ff, 0x2, 0xffffffff, 0x2b5, 0x4, 0x7, 0x0, 0x7fffffff, 0x7ff, 0x10000, 0x0, 0xffff, 0x0, 0x3, 0x5f11, 0xbd90, 0x0, 0x20, 0x10000, 0x1f, 0x8, 0x0, 0x3, 0x3, 0x0, 0xffffff20, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x0, 0xffff, 0x4, 0x1, 0x8, 0xe2, 0x4, 0x0, 0x8, 0x80, 0x401, 0xda6, 0x4, 0xf54, 0x4, 0xff, 0x1c, 0x401, 0xfffffffd, 0xffff9071, 0x8, 0x2, 0x6, 0xfff, 0x0, 0xa5, 0x8, 0x8, 0x0, 0x5, 0x6, 0x0, 0xcb, 0x8, 0xb0af, 0x2, 0x1, 0x80000001, 0xa1c9, 0x8, 0x81, 0x0, 0x4, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x1, 0x7ff, 0x800, 0x7fff, 0x80000000, 0x31e, 0x7fff, 0x80000000, 0x1, 0xfffffff7, 0x50, 0x4, 0x8, 0x7cc, 0x68, 0x6, 0xe54, 0x0, 0x5, 0xff, 0x8001, 0x9, 0x4, 0x5, 0x0, 0x40, 0x1, 0x2, 0x7, 0x8, 0x0, 0x4, 0x10000, 0xffffff7f, 0x1f, 0x6000, 0x1f, 0x1, 0x4, 0x6, 0x9, 0x4, 0xfc000000, 0xffffff7f, 0x81, 0x200, 0x8, 0x21fb, 0x2, 0x0, 0x7f, 0xfb1d, 0xf1f2, 0x5, 0x8, 0x4, 0x9, 0x5, 0x7, 0x80000001, 0x400, 0x100, 0x18000000, 0x9, 0x1, 0x1, 0x6, 0x1f, 0x8, 0x101, 0x10001, 0x0, 0x2, 0x1, 0x7, 0xfffffffe, 0x0, 0x7787ecb, 0x6, 0x9, 0xffffffcc, 0x9a, 0xb0, 0x2, 0xd99, 0x800, 0x80, 0x579, 0x1, 0x9b, 0x3, 0x4, 0x4, 0x1ea, 0x120000, 0x0, 0xfffeffff, 0x7ff, 0x0, 0x2, 0x800, 0xffffff38, 0x8, 0x2, 0x5, 0x3, 0x8, 0xffffb16f, 0xfff, 0x3, 0x4, 0x3, 0xff, 0x8, 0x2, 0x1, 0x8, 0x3, 0x3ff, 0x6, 0x101, 0x9, 0x3d7, 0x8000, 0x3, 0x1, 0x3, 0x2, 0x81, 0x6a, 0x9, 0x82, 0xfff, 0x5, 0x120000, 0x6, 0x7ff, 0x8001, 0x800, 0x8, 0x0, 0xfff, 0x7, 0x7, 0x1, 0x4, 0x3, 0x8001, 0xd61f, 0x4, 0x8750, 0x9, 0x800, 0x80000001, 0x1, 0x3f, 0x3, 0x3ff, 0x1, 0xd1d6, 0xa3, 0x3ff, 0x8000, 0x3ff, 0x0, 0x4, 0xfff, 0x81, 0x7590, 0x0, 0x3f, 0x9, 0x101, 0x8, 0x1, 0x10001, 0x1, 0x7, 0x1, 0x6, 0x3, 0x8000, 0x7, 0x180, 0x78a, 0x2, 0x4, 0x7, 0x4, 0x5badcdeb, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3ff, 0x7, 0x9, 0x3, 0x9, 0x4dc7, 0x10000, 0x4, 0xd1e, 0x4, 0xfffffffe, 0x5, 0x28, 0x1, 0x78019973, 0x4, 0x7, 0x609, 0x7, 0x5, 0x5, 0x800, 0x5, 0x9, 0x4, 0x7, 0xfffffff9, 0x4, 0x1, 0x8, 0x1, 0x97f, 0x5, 0x6, 0x81, 0x80000000, 0x15a59280, 0xc6, 0x3c99, 0x3, 0x8, 0xd4, 0xa319, 0xffffffff, 0x4, 0x3, 0x20, 0x5, 0x7fff, 0x3, 0xe385, 0xaa78, 0x1, 0x9, 0x3, 0x6, 0x2, 0x0, 0x101, 0x0, 0x1, 0x6, 0x1, 0x9, 0x4, 0x7ff, 0x3f, 0x0, 0x6, 0x1, 0x8, 0x4, 0x5, 0x0, 0x10000, 0x80000001, 0x3, 0x5, 0x5, 0x3, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x2, 0x0, 0x7f, 0x5, 0x1, 0x7fffffff, 0x1a9, 0x7fffffff, 0x20, 0x1, 0x0, 0x2, 0x2, 0x2, 0x7, 0x200, 0xfffeffff, 0x200, 0x2, 0xb2, 0x1000, 0x5, 0x7, 0x0, 0x5, 0x5714, 0x9, 0x40, 0x8, 0x9, 0x1800, 0x20, 0x8, 0x9, 0x1, 0x6, 0x7, 0x8, 0x6, 0x8, 0x9e91, 0x7fffffff, 0x5, 0xd177, 0x9, 0x80000000, 0xfff, 0xffff8001, 0x4, 0x1, 0x3d, 0x5, 0x1498c2af, 0x5, 0x5, 0x7fff, 0x5, 0x1000, 0x8, 0x7ff, 0x2, 0xff, 0x179c1c39, 0x3f, 0x7, 0x8b20, 0x1f, 0x2, 0x9, 0x3, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0xffffffe0, 0x7, 0x81, 0xab15, 0x81, 0x3, 0x0, 0x1, 0x3, 0x1, 0x9, 0x2, 0xf6, 0x8fd, 0x3be, 0x2, 0x1000, 0x9, 0x6, 0x7fffffff, 0x6, 0x26a, 0x9, 0xd1, 0x5, 0x7, 0x5, 0x5, 0x6280000, 0x2, 0x1, 0x200, 0x7f, 0x1000, 0xfffffc00, 0x7fffffff, 0xffffffe1, 0x800, 0x200, 0x9, 0xff, 0x543, 0x0, 0x0, 0x8, 0x6, 0x7340, 0x9, 0x500000, 0x2, 0x8462, 0x6a30, 0x1, 0x3, 0x7, 0x1f, 0x5, 0x20, 0x9, 0x479, 0x5, 0xffff7fff, 0x3f, 0x9, 0xffff, 0xffff8001, 0x3ff, 0xffffffff, 0x400, 0xffffffff, 0x6, 0x0, 0x1, 0x101, 0x1ff, 0x61d, 0x8, 0x9, 0x5, 0x3f, 0x1, 0x400, 0x0, 0x1f, 0x1, 0x6, 0x1c06, 0x5, 0xfffffffc, 0xffff, 0xa362, 0x5, 0xe8, 0x7f, 0x8000, 0x68bf, 0x399, 0x1000, 0x684, 0x4, 0xfa1, 0x101, 0xda92, 0x2, 0x80000000, 0x6, 0xff, 0x200, 0x2f, 0x4, 0x5, 0x0, 0xfc, 0xcd, 0x101, 0x6ab, 0x4, 0x9, 0x401, 0xcc, 0x80000000, 0xffffffff, 0x80, 0xfff, 0xf4, 0x8, 0x8000, 0x8, 0x5194195, 0x1, 0x2, 0x6, 0x1000, 0x6e3e, 0x2, 0x40, 0x7, 0xbc94, 0x1, 0x5, 0xa92, 0x6, 0x401, 0x5, 0x63d1, 0x0, 0xbe, 0x4, 0x5, 0xff, 0x2, 0x80000001, 0x8, 0x5, 0x7, 0x5, 0x6b70, 0x659a, 0x4, 0x1, 0x3d, 0xf725, 0x3, 0x6bc, 0xff, 0x6199d1ce, 0x0, 0x2bcf4bc1, 0xc5, 0x7, 0x81, 0x1, 0x3f, 0x7, 0x7, 0x9, 0x1f, 0xffffffff, 0x4, 0x8, 0x7, 0xff, 0xc0, 0xe3, 0x3, 0x1, 0x7f, 0x1, 0x9, 0x7, 0x8, 0x1, 0xe245, 0x6, 0x5, 0x0, 0x5, 0xcc, 0x8000000, 0x4, 0x8, 0x47b, 0x3, 0x7, 0x2, 0x1, 0x2, 0x2, 0xfff, 0xab9e, 0x9, 0x9a, 0xffff, 0x5, 0xa4, 0x400, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x5, 0x5, 0x7f, 0x0, 0x4, 0xfffffffa, 0x81, 0x0, 0x87f3, 0xc45, 0x400, 0x10001, 0x0, 0x5, 0x6, 0x6, 0x8, 0xd3d, 0x28, 0x9b3, 0xfffffc01, 0x1000, 0x5d, 0x80000001, 0x5, 0x3ff, 0x800, 0x1, 0x4, 0x1131, 0x1, 0x6, 0x100, 0x0, 0x5, 0x9c33, 0x1, 0x6, 0x3, 0x5, 0x7fff, 0xff, 0xffffffff, 0x80000001, 0x80000000, 0x6, 0x2, 0x800, 0x8, 0x82, 0x4, 0x7, 0x3, 0x72, 0x10001, 0x81, 0x3, 0xdb33, 0x4, 0x6d6d, 0x9, 0x8, 0x10001, 0x8, 0x80, 0x8, 0x4, 0xe334, 0x8, 0x0, 0x200, 0x4, 0xb9, 0x0, 0x7d7, 0x4e, 0x401, 0x0, 0x42, 0x1, 0x6, 0xffff8001, 0x8001, 0x6, 0xfffffffb, 0xd95, 0xfff, 0x4, 0x20, 0x7, 0xffffffff, 0x400, 0x7f, 0x3, 0xffffffff, 0x9, 0x3, 0x2, 0x8000, 0x5, 0x4, 0x5, 0x8, 0x3f, 0x1, 0x80000000, 0x7, 0x4d9, 0x1, 0xffff, 0x0, 0x608, 0x84, 0x0, 0x1, 0x4, 0x3, 0x7, 0x9, 0x5, 0x80000001, 0xc224, 0x401, 0xfffffffb, 0x4, 0x6, 0x9, 0x4, 0x6, 0x6, 0x7fffffff, 0x1f, 0x1924e374, 0x20, 0x3, 0x9, 0xc6, 0x5, 0x3, 0x1ff, 0x2, 0x3f, 0x7f, 0x0, 0x7ff, 0x0, 0x200, 0x10000, 0x6a4, 0x7, 0x0, 0x7fff, 0xffffffff, 0x8, 0x6, 0x80000000, 0xfff, 0x7fffffff, 0xb8f4, 0x3, 0xf1ac, 0x4b, 0x3, 0x6593, 0x4, 0xfffffff5, 0x6c, 0x18, 0xfffffffb, 0x5, 0x1f, 0x1, 0xc443, 0x80000001, 0x8, 0x8001, 0xfffffff7, 0x1, 0xfffffffa, 0xfa, 0x101, 0xab, 0x20, 0x6, 0x12000000, 0x3, 0x6afc, 0x6, 0x1, 0x68a, 0x100, 0x7, 0x0, 0x40, 0x1, 0x1, 0x1f, 0x0, 0x8, 0x5, 0xfffffff9, 0x6, 0x91c, 0xffffffff, 0x0, 0x2, 0x3c20, 0x7, 0x0, 0xfff, 0x64, 0x1, 0x5, 0x9, 0x7ff, 0x1, 0x9af, 0x35, 0xd743, 0x0, 0x9, 0x2, 0x7ff, 0x7, 0x3, 0x58f39a6, 0x8, 0xe147, 0x2, 0x1, 0x0, 0x4, 0x7, 0x1f, 0x6, 0x0, 0x7fff, 0xfff, 0x4, 0x81, 0x80000001, 0x8, 0x3f, 0x4, 0x1, 0x7, 0xffffffff, 0x36, 0x7, 0x7, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x6], 0x2, 0x400, 0x8}) accept4$netrom(r3, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @remote, @remote, @null, @null, @default, @null, @rose]}, &(0x7f0000000540)=0x48, 0x800) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000015c0)={'vcan0\x00'}) ioctl$TIOCSIG(r0, 0x40045436, 0x2) pipe(&(0x7f0000000080)) (async) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) (async) recvmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000200)=@ax25={{}, [@netrom, @remote, @rose, @null, @netrom, @null, @netrom, @null]}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/85, 0x55}], 0x4}, 0x0) (async) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x7, 0xffffff01, 0x7f, 0x2, 0x1, "8aa3c169caf2743bdcbea1c0eeed3d9a8e2dc4", 0x6fd0, 0x1}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair(0x11, 0x0, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, &(0x7f0000001580)={&(0x7f0000000580)=[0xb42, 0xfffffeff, 0xfffff8cc, 0x7, 0x80000001, 0x80000000, 0x0, 0x6, 0x80000000, 0x95, 0x800, 0x18482aa0, 0x7ec, 0x6, 0x7, 0xde, 0x4, 0x7, 0xfffffffb, 0x2, 0x3, 0x4, 0xa82, 0x3ff, 0x4, 0xfff, 0x80, 0x7, 0x48, 0x7, 0x5, 0x200, 0x7fffffff, 0x7, 0x757864ae, 0x3f, 0x3, 0x4, 0x4, 0x8000, 0x0, 0x0, 0x200, 0x78c, 0x6, 0xffffbff9, 0x1, 0x32, 0x200, 0xfffffffe, 0x0, 0x7, 0x7fffffff, 0xfe22, 0x7, 0x7fffffff, 0x37, 0x5, 0x8000, 0x9, 0x2, 0xfffb, 0x7f, 0x3, 0x6, 0x800, 0x20, 0x5431, 0x1ff, 0x5, 0x1, 0x6, 0x9, 0x2, 0x200, 0x6, 0x1, 0x4, 0x8c, 0x2, 0x0, 0x9, 0x0, 0x5, 0x8, 0x5, 0x5, 0xd8a, 0xa0d, 0xffff0000, 0x3, 0x4, 0x80, 0x2, 0xf8, 0x4408, 0x3, 0x5, 0x1, 0x4, 0x0, 0x6, 0xffffffff, 0xfffffffe, 0x7f, 0x400, 0x1f, 0x4, 0x6, 0x8001, 0x80, 0x3ff, 0x2, 0xffffffff, 0x2b5, 0x4, 0x7, 0x0, 0x7fffffff, 0x7ff, 0x10000, 0x0, 0xffff, 0x0, 0x3, 0x5f11, 0xbd90, 0x0, 0x20, 0x10000, 0x1f, 0x8, 0x0, 0x3, 0x3, 0x0, 0xffffff20, 0x8, 0x8, 0x8000, 0x4, 0x9, 0x0, 0xffff, 0x4, 0x1, 0x8, 0xe2, 0x4, 0x0, 0x8, 0x80, 0x401, 0xda6, 0x4, 0xf54, 0x4, 0xff, 0x1c, 0x401, 0xfffffffd, 0xffff9071, 0x8, 0x2, 0x6, 0xfff, 0x0, 0xa5, 0x8, 0x8, 0x0, 0x5, 0x6, 0x0, 0xcb, 0x8, 0xb0af, 0x2, 0x1, 0x80000001, 0xa1c9, 0x8, 0x81, 0x0, 0x4, 0xfff, 0x6, 0x3, 0x5, 0x40, 0x1, 0x7ff, 0x800, 0x7fff, 0x80000000, 0x31e, 0x7fff, 0x80000000, 0x1, 0xfffffff7, 0x50, 0x4, 0x8, 0x7cc, 0x68, 0x6, 0xe54, 0x0, 0x5, 0xff, 0x8001, 0x9, 0x4, 0x5, 0x0, 0x40, 0x1, 0x2, 0x7, 0x8, 0x0, 0x4, 0x10000, 0xffffff7f, 0x1f, 0x6000, 0x1f, 0x1, 0x4, 0x6, 0x9, 0x4, 0xfc000000, 0xffffff7f, 0x81, 0x200, 0x8, 0x21fb, 0x2, 0x0, 0x7f, 0xfb1d, 0xf1f2, 0x5, 0x8, 0x4, 0x9, 0x5, 0x7, 0x80000001, 0x400, 0x100, 0x18000000, 0x9, 0x1, 0x1, 0x6, 0x1f, 0x8, 0x101, 0x10001, 0x0, 0x2, 0x1, 0x7, 0xfffffffe, 0x0, 0x7787ecb, 0x6, 0x9, 0xffffffcc, 0x9a, 0xb0, 0x2, 0xd99, 0x800, 0x80, 0x579, 0x1, 0x9b, 0x3, 0x4, 0x4, 0x1ea, 0x120000, 0x0, 0xfffeffff, 0x7ff, 0x0, 0x2, 0x800, 0xffffff38, 0x8, 0x2, 0x5, 0x3, 0x8, 0xffffb16f, 0xfff, 0x3, 0x4, 0x3, 0xff, 0x8, 0x2, 0x1, 0x8, 0x3, 0x3ff, 0x6, 0x101, 0x9, 0x3d7, 0x8000, 0x3, 0x1, 0x3, 0x2, 0x81, 0x6a, 0x9, 0x82, 0xfff, 0x5, 0x120000, 0x6, 0x7ff, 0x8001, 0x800, 0x8, 0x0, 0xfff, 0x7, 0x7, 0x1, 0x4, 0x3, 0x8001, 0xd61f, 0x4, 0x8750, 0x9, 0x800, 0x80000001, 0x1, 0x3f, 0x3, 0x3ff, 0x1, 0xd1d6, 0xa3, 0x3ff, 0x8000, 0x3ff, 0x0, 0x4, 0xfff, 0x81, 0x7590, 0x0, 0x3f, 0x9, 0x101, 0x8, 0x1, 0x10001, 0x1, 0x7, 0x1, 0x6, 0x3, 0x8000, 0x7, 0x180, 0x78a, 0x2, 0x4, 0x7, 0x4, 0x5badcdeb, 0x4, 0x0, 0x9, 0x3ff, 0x5, 0x3ff, 0x7, 0x9, 0x3, 0x9, 0x4dc7, 0x10000, 0x4, 0xd1e, 0x4, 0xfffffffe, 0x5, 0x28, 0x1, 0x78019973, 0x4, 0x7, 0x609, 0x7, 0x5, 0x5, 0x800, 0x5, 0x9, 0x4, 0x7, 0xfffffff9, 0x4, 0x1, 0x8, 0x1, 0x97f, 0x5, 0x6, 0x81, 0x80000000, 0x15a59280, 0xc6, 0x3c99, 0x3, 0x8, 0xd4, 0xa319, 0xffffffff, 0x4, 0x3, 0x20, 0x5, 0x7fff, 0x3, 0xe385, 0xaa78, 0x1, 0x9, 0x3, 0x6, 0x2, 0x0, 0x101, 0x0, 0x1, 0x6, 0x1, 0x9, 0x4, 0x7ff, 0x3f, 0x0, 0x6, 0x1, 0x8, 0x4, 0x5, 0x0, 0x10000, 0x80000001, 0x3, 0x5, 0x5, 0x3, 0xfffffffc, 0x7, 0x2, 0x9, 0x0, 0x2, 0x0, 0x7f, 0x5, 0x1, 0x7fffffff, 0x1a9, 0x7fffffff, 0x20, 0x1, 0x0, 0x2, 0x2, 0x2, 0x7, 0x200, 0xfffeffff, 0x200, 0x2, 0xb2, 0x1000, 0x5, 0x7, 0x0, 0x5, 0x5714, 0x9, 0x40, 0x8, 0x9, 0x1800, 0x20, 0x8, 0x9, 0x1, 0x6, 0x7, 0x8, 0x6, 0x8, 0x9e91, 0x7fffffff, 0x5, 0xd177, 0x9, 0x80000000, 0xfff, 0xffff8001, 0x4, 0x1, 0x3d, 0x5, 0x1498c2af, 0x5, 0x5, 0x7fff, 0x5, 0x1000, 0x8, 0x7ff, 0x2, 0xff, 0x179c1c39, 0x3f, 0x7, 0x8b20, 0x1f, 0x2, 0x9, 0x3, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x2, 0x4, 0xffffffe0, 0x7, 0x81, 0xab15, 0x81, 0x3, 0x0, 0x1, 0x3, 0x1, 0x9, 0x2, 0xf6, 0x8fd, 0x3be, 0x2, 0x1000, 0x9, 0x6, 0x7fffffff, 0x6, 0x26a, 0x9, 0xd1, 0x5, 0x7, 0x5, 0x5, 0x6280000, 0x2, 0x1, 0x200, 0x7f, 0x1000, 0xfffffc00, 0x7fffffff, 0xffffffe1, 0x800, 0x200, 0x9, 0xff, 0x543, 0x0, 0x0, 0x8, 0x6, 0x7340, 0x9, 0x500000, 0x2, 0x8462, 0x6a30, 0x1, 0x3, 0x7, 0x1f, 0x5, 0x20, 0x9, 0x479, 0x5, 0xffff7fff, 0x3f, 0x9, 0xffff, 0xffff8001, 0x3ff, 0xffffffff, 0x400, 0xffffffff, 0x6, 0x0, 0x1, 0x101, 0x1ff, 0x61d, 0x8, 0x9, 0x5, 0x3f, 0x1, 0x400, 0x0, 0x1f, 0x1, 0x6, 0x1c06, 0x5, 0xfffffffc, 0xffff, 0xa362, 0x5, 0xe8, 0x7f, 0x8000, 0x68bf, 0x399, 0x1000, 0x684, 0x4, 0xfa1, 0x101, 0xda92, 0x2, 0x80000000, 0x6, 0xff, 0x200, 0x2f, 0x4, 0x5, 0x0, 0xfc, 0xcd, 0x101, 0x6ab, 0x4, 0x9, 0x401, 0xcc, 0x80000000, 0xffffffff, 0x80, 0xfff, 0xf4, 0x8, 0x8000, 0x8, 0x5194195, 0x1, 0x2, 0x6, 0x1000, 0x6e3e, 0x2, 0x40, 0x7, 0xbc94, 0x1, 0x5, 0xa92, 0x6, 0x401, 0x5, 0x63d1, 0x0, 0xbe, 0x4, 0x5, 0xff, 0x2, 0x80000001, 0x8, 0x5, 0x7, 0x5, 0x6b70, 0x659a, 0x4, 0x1, 0x3d, 0xf725, 0x3, 0x6bc, 0xff, 0x6199d1ce, 0x0, 0x2bcf4bc1, 0xc5, 0x7, 0x81, 0x1, 0x3f, 0x7, 0x7, 0x9, 0x1f, 0xffffffff, 0x4, 0x8, 0x7, 0xff, 0xc0, 0xe3, 0x3, 0x1, 0x7f, 0x1, 0x9, 0x7, 0x8, 0x1, 0xe245, 0x6, 0x5, 0x0, 0x5, 0xcc, 0x8000000, 0x4, 0x8, 0x47b, 0x3, 0x7, 0x2, 0x1, 0x2, 0x2, 0xfff, 0xab9e, 0x9, 0x9a, 0xffff, 0x5, 0xa4, 0x400, 0x80, 0x2, 0x8001, 0x8, 0x1, 0x5, 0x5, 0x7f, 0x0, 0x4, 0xfffffffa, 0x81, 0x0, 0x87f3, 0xc45, 0x400, 0x10001, 0x0, 0x5, 0x6, 0x6, 0x8, 0xd3d, 0x28, 0x9b3, 0xfffffc01, 0x1000, 0x5d, 0x80000001, 0x5, 0x3ff, 0x800, 0x1, 0x4, 0x1131, 0x1, 0x6, 0x100, 0x0, 0x5, 0x9c33, 0x1, 0x6, 0x3, 0x5, 0x7fff, 0xff, 0xffffffff, 0x80000001, 0x80000000, 0x6, 0x2, 0x800, 0x8, 0x82, 0x4, 0x7, 0x3, 0x72, 0x10001, 0x81, 0x3, 0xdb33, 0x4, 0x6d6d, 0x9, 0x8, 0x10001, 0x8, 0x80, 0x8, 0x4, 0xe334, 0x8, 0x0, 0x200, 0x4, 0xb9, 0x0, 0x7d7, 0x4e, 0x401, 0x0, 0x42, 0x1, 0x6, 0xffff8001, 0x8001, 0x6, 0xfffffffb, 0xd95, 0xfff, 0x4, 0x20, 0x7, 0xffffffff, 0x400, 0x7f, 0x3, 0xffffffff, 0x9, 0x3, 0x2, 0x8000, 0x5, 0x4, 0x5, 0x8, 0x3f, 0x1, 0x80000000, 0x7, 0x4d9, 0x1, 0xffff, 0x0, 0x608, 0x84, 0x0, 0x1, 0x4, 0x3, 0x7, 0x9, 0x5, 0x80000001, 0xc224, 0x401, 0xfffffffb, 0x4, 0x6, 0x9, 0x4, 0x6, 0x6, 0x7fffffff, 0x1f, 0x1924e374, 0x20, 0x3, 0x9, 0xc6, 0x5, 0x3, 0x1ff, 0x2, 0x3f, 0x7f, 0x0, 0x7ff, 0x0, 0x200, 0x10000, 0x6a4, 0x7, 0x0, 0x7fff, 0xffffffff, 0x8, 0x6, 0x80000000, 0xfff, 0x7fffffff, 0xb8f4, 0x3, 0xf1ac, 0x4b, 0x3, 0x6593, 0x4, 0xfffffff5, 0x6c, 0x18, 0xfffffffb, 0x5, 0x1f, 0x1, 0xc443, 0x80000001, 0x8, 0x8001, 0xfffffff7, 0x1, 0xfffffffa, 0xfa, 0x101, 0xab, 0x20, 0x6, 0x12000000, 0x3, 0x6afc, 0x6, 0x1, 0x68a, 0x100, 0x7, 0x0, 0x40, 0x1, 0x1, 0x1f, 0x0, 0x8, 0x5, 0xfffffff9, 0x6, 0x91c, 0xffffffff, 0x0, 0x2, 0x3c20, 0x7, 0x0, 0xfff, 0x64, 0x1, 0x5, 0x9, 0x7ff, 0x1, 0x9af, 0x35, 0xd743, 0x0, 0x9, 0x2, 0x7ff, 0x7, 0x3, 0x58f39a6, 0x8, 0xe147, 0x2, 0x1, 0x0, 0x4, 0x7, 0x1f, 0x6, 0x0, 0x7fff, 0xfff, 0x4, 0x81, 0x80000001, 0x8, 0x3f, 0x4, 0x1, 0x7, 0xffffffff, 0x36, 0x7, 0x7, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x6], 0x2, 0x400, 0x8}) (async) accept4$netrom(r3, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @remote, @remote, @null, @null, @default, @null, @rose]}, &(0x7f0000000540)=0x48, 0x800) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000015c0)={'vcan0\x00'}) (async) ioctl$TIOCSIG(r0, 0x40045436, 0x2) (async) 09:08:29 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async, rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async, rerun: 64) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) (rerun: 64) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x80000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00a10e40000000f80000000534150018006600000329907864010100e00000020702c700"]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a52985f9a9e19828e371fad410a790270c231f74004000800000619000000007482700200065000040299078ac1e000160fce3716aeb433d4c7b85c8c4b26bf309e73c185afce97babf53afab93bd0e4f64c9456c7a2caffe78fe7a1a3ea749b63c5db00cd2a98198a4c7aa2a837537ea92bb89fb0d3e0557b8489ff36c487f83909d8af0f3bcc60e4b2d02a2fb5f3ac7974370e6c8bfbde99bcf05de7fea20cc732d739e446ed036ea667a38d1bb57953"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x20, 0x1000, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8000, 0x8, 0x10001, 0xbdb3}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r13, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d8dd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000200c03f07000000010101092e00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040018b8000008000100", @ANYRES32=r10, @ANYBLOB="1402028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f040000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x660}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000040) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async, rerun: 32) r14 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (rerun: 32) ioctl$TIOCSISO7816(r14, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:29 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x0) 09:08:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x15, 0x800, 0x800) getsockname$netrom(r1, &(0x7f0000000000)={{}, [@bcast, @default, @null, @rose, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x81, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socket(0x15, 0x800, 0x800) (async) getsockname$netrom(r1, &(0x7f0000000000)={{}, [@bcast, @default, @null, @rose, @rose, @rose, @bcast, @bcast]}, &(0x7f0000000080)=0x48) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x81, 0x0}) (async) 09:08:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x2160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000004c0)=@multiplanar_fd={0xfffff77f, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x1, 0x7f, 0x81, 0x20, 0x81, "9efb9fed"}, 0x3ff, 0x4, {&(0x7f0000000440)=[{0x5, 0x0, {}, 0xfff}, {0x401, 0x80000001, {r2}, 0xff}]}, 0x3}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xf, 0x1e, 0x2160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000004c0)=@multiplanar_fd={0xfffff77f, 0x2, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x1, 0x7f, 0x81, 0x20, 0x81, "9efb9fed"}, 0x3ff, 0x4, {&(0x7f0000000440)=[{0x5, 0x0, {}, 0xfff}, {0x401, 0x80000001, {r2}, 0xff}]}, 0x3}) (async) 09:08:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "f16f315331"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84e2365f0acae99338815583c7"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72d13445e9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "86c3e87ce15128"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7bca8ff4cd4d2f40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x15}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "2b86c9bddd6f5d1a9a517e8ea9242b8f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b70ee6a41"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) 09:08:29 executing program 0: ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000280)={{@hyper, 0x2}, {@my=0x1, 0x7}, 0x400, "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"}, 0x418, 0xe1}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4097}) 09:08:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x101) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x20, 0x10e, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:29 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "f16f315331"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84e2365f0acae99338815583c7"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72d13445e9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "86c3e87ce15128"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7bca8ff4cd4d2f40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x15}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "2b86c9bddd6f5d1a9a517e8ea9242b8f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b70ee6a41"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) 09:08:29 executing program 0: ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000280)={{@hyper, 0x2}, {@my=0x1, 0x7}, 0x400, "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"}, 0x418, 0xe1}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4097}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000280)={{@hyper, 0x2}, {@my=0x1, 0x7}, 0x400, "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"}, 0x418, 0xe1}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4097}) (async) 09:08:29 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "f16f315331"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84e2365f0acae99338815583c7"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72d13445e9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "86c3e87ce15128"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7bca8ff4cd4d2f40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x15}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "2b86c9bddd6f5d1a9a517e8ea9242b8f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b70ee6a41"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) 09:08:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x101) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x20, 0x10e, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x101) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x20, 0x10e, &(0x7f0000000480)="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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:29 executing program 0: ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000280)={{@hyper, 0x2}, {@my=0x1, 0x7}, 0x400, "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"}, 0x418, 0xe1}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/4097}) 09:08:30 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r3, 0x5404, 0x0) (async) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x80000000, 0x6}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00a10e40000000f80000000534150018006600000329907864010100e00000020702c700"]}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a52985f9a9e19828e371fad410a790270c231f74004000800000619000000007482700200065000040299078ac1e000160fce3716aeb433d4c7b85c8c4b26bf309e73c185afce97babf53afab93bd0e4f64c9456c7a2caffe78fe7a1a3ea749b63c5db00cd2a98198a4c7aa2a837537ea92bb89fb0d3e0557b8489ff36c487f83909d8af0f3bcc60e4b2d02a2fb5f3ac7974370e6c8bfbde99bcf05de7fea20cc732d739e446ed036ea667a38d1bb57953"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x20, 0x1000, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8000, 0x8, 0x10001, 0xbdb3}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r13, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d8dd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000200c03f07000000010101092e00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040018b8000008000100", @ANYRES32=r10, @ANYBLOB="1402028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f040000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x660}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000040) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r14 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r14, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:30 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x80, 0x80000000, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00a10e40000000f80000000534150018006600000329907864010100e00000020702c700"]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a52985f9a9e19828e371fad410a790270c231f74004000800000619000000007482700200065000040299078ac1e000160fce3716aeb433d4c7b85c8c4b26bf309e73c185afce97babf53afab93bd0e4f64c9456c7a2caffe78fe7a1a3ea749b63c5db00cd2a98198a4c7aa2a837537ea92bb89fb0d3e0557b8489ff36c487f83909d8af0f3bcc60e4b2d02a2fb5f3ac7974370e6c8bfbde99bcf05de7fea20cc732d739e446ed036ea667a38d1bb57953"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x20, 0x1000, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @loopback, 0x8000, 0x8, 0x10001, 0xbdb3}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r11, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r13, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000c00000008000100", @ANYRES32=0x0, @ANYBLOB="9c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d8dd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000200c03f07000000010101092e00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040018b8000008000100", @ANYRES32=r10, @ANYBLOB="1402028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff7f000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f040000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x660}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000040) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r14 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r14, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "f16f315331"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84e2365f0acae99338815583c7"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72d13445e9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "86c3e87ce15128"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7bca8ff4cd4d2f40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x15}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "2b86c9bddd6f5d1a9a517e8ea9242b8f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b70ee6a41"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xe8, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x9, 0x4, "f16f315331"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "84e2365f0acae99338815583c7"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72d13445e9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "86c3e87ce15128"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x804) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) (async) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x7bca8ff4cd4d2f40}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x15}}}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "2b86c9bddd6f5d1a9a517e8ea9242b8f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4b70ee6a41"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) (async) 09:08:30 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 09:08:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x101) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x20, 0x10e, &(0x7f0000000480)="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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x101) (async) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x1f, 0x20, 0x10e, &(0x7f0000000480)="5b939553520a341b3c0d4ab00fd5931b0c60aef6e4a4871ce1c78484c2cdc1ca698af25d540c13906efce14c6f2a91ded8d2f049f017276611ef42c158a54e53519fd67f3282631aae3334c01ff532d924adc7180da1eb86871cb8ae4873c68aeded265fd05e81c88a5f0e48ea14bbeed60bfd0272b8c143c26b3c503488b583ce280919d97bed1c0839f18c383116d284f92ec709ac01a1faf6dd43f4579c2b6d25079e442871b8c7a18f4c909c0dd28d8a1dff73e2b555dc4472678335d12a0556c2309786d5cb7b1b40bb1a7d14230fe2e2c31f3686666a4a010e60ea996c4dc0682266d5cdbedc71d91a6e54c103941bd16cb5b4caf0aa1bcd8e6495c3c266a633b7eb730b0c2894e58dbe267f66b0dab5f700c362eb58fa83d515b3ee64ce8976d5a70ce4829fc62924a00e716105791cb5bb62d21c3be8fecb10cb5aac747f3a928abcb5b1c64533a406a57cdeff04fa078ae850a28711951085fbfb379695442ef175b95f11b56703000fa07bdd2fe2f27e01cc0877850a23d69ae939d36d29e987ee0ba6a083f6e7c99aaac5bde30535e382ef8e3ea9cf8545d2a5d99905ced348c0497dfd73eb652d67f506255c0433800adf24fb98d3aa801aa85360fb46ac82221878b080df1dcd38543b6a00a9506cf00d3ea730e1f559c64920771240241d14431817c8bb90d0ca248cd3be58f99317e50592b4a75af13a060a0e9582c585958ff7e4a33fe90cd4afa8c4da6f851494e410227a738175cfc57bc3d8eb4e28d280caa10327dead8feb15395e2420aedbe3d237329d1f00ed4844ae8859dc88be807d1f33a0af80c1c8359b40392af5f6e2fd3102eb4560f555d77194574c12bf038cb0d2c1a4e519160898448b28d279929b26953a2ad0c1d90a06cf8c36fe92923a0459d27a4e6779c10cc3b71a01af551c95e2444e8c17eefb64946237b8479c9dc1736aee7a78abca86611edc743446d199b52134d9f3f2e2f44bbcd49201d26a8309e0bdbe3b097e5e5efdb9644466dbe3edd013a582bb2364731982cb590d157798bc1a267098cd1aa5da4ad11eb53e0ff50cb0e86cf692b2da5d9c2105cfada7210138f7fe0c93942b94f6a73aea6b3b570ac21fdefeb4ff870a070cea60602b62368eff8af2d45ea59c0a84af38eb14a21287c946fc39d6a2808bf67c9abf43104c0b74c2f0dd607ff50f9152ae2b98ecc1054443842fdccef7259e01020a921690aa6cdf5b06b2278c580f74aa5c8733a8d758d37ee5910e1a3335b6fb326150b9da384123df8322854798d0aecd230325e246a813ee40475641d6b6601c61c8874bf409f6edff5e9bec1f08e924af5683f0e976af415fcb8f0f512e93588601b92243796ecf12d73d3ad65e094af08e2db758a775dcec884785a86fea065ed9d499ad4f47790669a9fc04bbe84cbe461e01eccc4932"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10800) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xb645, 0x101}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x5, 0xa, 0x11, 0x1002, 0x0}) 09:08:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10800) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xb645, 0x101}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x5, 0xa, 0x11, 0x1002, 0x0}) 09:08:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x80f, 0x20, 0x160, &(0x7f0000000040)}) 09:08:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) 09:08:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x80f, 0x20, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x80f, 0x20, 0x160, &(0x7f0000000040)}) (async) 09:08:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x10800) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0xb645, 0x101}) (async, rerun: 32) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x5, 0xa, 0x11, 0x1002, 0x0}) (rerun: 32) 09:08:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) 09:08:31 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r2, 0x12003) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x19, 0xac, &(0x7f00000001c0)}) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:31 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x0) 09:08:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x80f, 0x20, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x80f, 0x20, 0x160, &(0x7f0000000040)}) (async) 09:08:31 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:31 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd76, 0x2, 0x2d, 0x8, 0xb, "3c8aeb9c3b214e30"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:31 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) 09:08:31 executing program 5: clock_gettime(0x0, &(0x7f00000009c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x24c000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000940)={0x2, 0x1, 0x19, 0x15, 0x185, &(0x7f0000000540)="007e4886ebf46289e4cab9eec12b8ae31d83759f9e0e3bcd68990ea3c2087b1ed26981a0a4a24834fe8c7fe9a22861b19b4bab0d69a16143a159a9bf293599799796d093f1c5ed5651eb3468d32f352c0ac06866ab8ba0df7a6badd426388abd5c1eb0ca8c953c5b7f9b9688bc2e195ab7977edcce2aa4d0052e9fa04c277d00ed16c510c1e99bd7d506d846c0811b4f488086a955ccbd197289294d7523613c510e622907d9edb58f8b85ead99af5acd8a8ebd1145360f51ae33d86bc9398906d06bac57ba9fb65637b53ee7236db9c637dc059c4412544a9d8cc43b10be47db75ee6515eeb9160b545e6bac2c9f7e9283ebb7d279f104d3ac346a8aff77ac79c50948f0eafba22567f1ccd9e49533c88e51056a01e291885162b09a89b64cb07fd069824e6a60c7b35bc12c8a54f2432c0a9c8f7e579ff951aed4870ed1d6ba7894a0aa856c06a2dc5080043191e0f29d9f59b2301161ce9aa723622f673ae9bd9d23fa4e661fee9c45b3b02dd913232390b3812123dab4686fa705d55db69a2309ee886cb2f5fb852ede6be4e14494a1fe9ae89e4f4b67388b8d3a2f999f9c2636f3db73373be433dcea419f776018ebe9d3d011ef2ad692a77a05fb19669c6415d93a98b4b791e21734add4ce8e13ad7ed599034c8c32db42e23215589c96f3274eff5d8e401c6d54cb7adef515f4ab6d1c996d990b1aa4813bd9190a3ead5724807d13259935f5f494b41b571ab23bb2f3205c4da4a61a1e0cae0f3b097263f28c686692d41a1b77a2b796363e551d865e39732edc05a493680c56e495d03e1ef233a431d31b3283a3a56582e674c0f0ba2b55701e3ffc7bb7afcab231e8e7260e18f858afbe6a3983362acd991321179714de0b3ca98f8671e447efc639bb4daafdb5b473b38c66f9c99be0777b44e3e0789e80fd1b96212161b57c8acdf1ab3da73763a46a1a8f18c03d726a4b92bca1ac95712ed2af012f4dda4b5d2203e892ad23d7a714900b233ce780c4d01451e2cbe4d5c51a7bec1bf725b4dd5f800e7af422c0c9eca05fbefa53da4d149f5dccabbb3f2568af023c2da0f2ba36eacdfd9a2838f203d3033ed58863c7b93c0435c5b312873769ce505dfd945deb2dd81aadc00293ec5b5905201bc8f1314e699ed08abaed7196dfa2b375de01b443829c3cf2892a2054004f949bc57729cbf5f16c34b9158f5f9d0ea31d11fcab8e09f1a526f7958631b945ac34fe8ab049fc80100b89e0f1112ac41cec678e08e39a99d58f4ec2fff540a30c393a32e24457cd195545add56250ee08ab629af00ff58e65e4a523d97c16355303a67f185d5b5d7db8a9324f013de13827686c27e8c6a6f002b56fcb2862b14d16ed7e80c2c779c3d10e9c0f744701089aae1ae7e9f2ea5f8eead15a494a57f0e87a497f5e1ae709336e27f2683d99de83f3767"}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000980)={0xff, 0x6, 0x7}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000b80)="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") 09:08:31 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd76, 0x2, 0x2d, 0x8, 0xb, "3c8aeb9c3b214e30"}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:31 executing program 5: clock_gettime(0x0, &(0x7f00000009c0)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x24c000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000940)={0x2, 0x1, 0x19, 0x15, 0x185, &(0x7f0000000540)="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"}) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000980)={0xff, 0x6, 0x7}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000b80)="edd3cff72f9b14a2db822c54ea6a3e457bcdfe72e2687ba40f12c880bcd6ced9f3ec49094c540bb9831124850598057a7f5b1fde9e76b52a8f3eda3deb19fe9589eda72de5e4c6304b60ae12556744e9b7b62fc80e188804000000bac781864286e713a4de2cb9dbfa43e6744d73e70eeb2d654e6a2df940c78c3e25a432accab9f41d40d045b4477836d4cf9e0df1a6101369b715b3860d0590606538b91e76bf0ca10d3e5f2e5104523c5f005359f564e5b6445c668579c7894741c05c08b8d3f7feb74fb3f5eef419a47093cdd2729ce6dc525162f7854b218667e1c1d7d63384b2a8bc21e7ce7d832700000000000043fe49000000000000000000009f0bab3df148dc1d123a44f9530556aa591e9f9db2809d4f783deb438f5cede37ef04d5ccff522549242b7433765d028ffb8462b2ad7b1efa3442c80176e1e06571bc6693aee284022627290558c9d4424ebe5822f200792efa5076a7f908a96e831dd86fcf4851a6efa180413aec2b77583844df102e3b8ec6963e7ba877c2f1e8bf6808d666f2a2c02a70c7b06d67a92365883d6575e26f37db7b8916d98adffafe9ff5e952ce7b6fdfb76968c74ca1607383d96f27c") 09:08:31 executing program 2: socketpair(0x1a, 0x3, 0x83b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", ""]}, 0x28}}, 0x4000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:31 executing program 5: clock_gettime(0x0, &(0x7f00000009c0)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x24c000, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000940)={0x2, 0x1, 0x19, 0x15, 0x185, &(0x7f0000000540)="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"}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000980)={0xff, 0x6, 0x7}) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000b80)="edd3cff72f9b14a2db822c54ea6a3e457bcdfe72e2687ba40f12c880bcd6ced9f3ec49094c540bb9831124850598057a7f5b1fde9e76b52a8f3eda3deb19fe9589eda72de5e4c6304b60ae12556744e9b7b62fc80e188804000000bac781864286e713a4de2cb9dbfa43e6744d73e70eeb2d654e6a2df940c78c3e25a432accab9f41d40d045b4477836d4cf9e0df1a6101369b715b3860d0590606538b91e76bf0ca10d3e5f2e5104523c5f005359f564e5b6445c668579c7894741c05c08b8d3f7feb74fb3f5eef419a47093cdd2729ce6dc525162f7854b218667e1c1d7d63384b2a8bc21e7ce7d832700000000000043fe49000000000000000000009f0bab3df148dc1d123a44f9530556aa591e9f9db2809d4f783deb438f5cede37ef04d5ccff522549242b7433765d028ffb8462b2ad7b1efa3442c80176e1e06571bc6693aee284022627290558c9d4424ebe5822f200792efa5076a7f908a96e831dd86fcf4851a6efa180413aec2b77583844df102e3b8ec6963e7ba877c2f1e8bf6808d666f2a2c02a70c7b06d67a92365883d6575e26f37db7b8916d98adffafe9ff5e952ce7b6fdfb76968c74ca1607383d96f27c") 09:08:31 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd76, 0x2, 0x2d, 0x8, 0xb, "3c8aeb9c3b214e30"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd76, 0x2, 0x2d, 0x8, 0xb, "3c8aeb9c3b214e30"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:31 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) (async) r4 = syz_open_pts(r2, 0x12003) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x19, 0xac, &(0x7f00000001c0)}) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:31 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:31 executing program 2: socketpair(0x1a, 0x3, 0x83b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", ""]}, 0x28}}, 0x4000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) socketpair(0x1a, 0x3, 0x83b, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", ""]}, 0x28}}, 0x4000) (async) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:32 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:32 executing program 5: ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 09:08:32 executing program 2: socketpair(0x1a, 0x3, 0x83b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6b}}}}, ["", ""]}, 0x28}}, 0x4000) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) (async) 09:08:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'rose0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000002c0)=0x16, &(0x7f0000000300)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x29, 0x4, 0x40, 0xd871, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x0, 0x700, 0x1, 0x6}}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008000) 09:08:32 executing program 5: ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 09:08:32 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'rose0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000002c0)=0x16, &(0x7f0000000300)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x29, 0x4, 0x40, 0xd871, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x0, 0x700, 0x1, 0x6}}) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008000) 09:08:32 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = syz_open_pts(r2, 0x12003) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x19, 0xac, &(0x7f00000001c0)}) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) ioctl$TCSETSF(r3, 0x5404, 0x0) (async) syz_open_pts(r2, 0x12003) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x19, 0xac, &(0x7f00000001c0)}) (async) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:32 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:32 executing program 5: ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:33 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x33) 09:08:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'rose0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000002c0)=0x16, &(0x7f0000000300)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', r4, 0x29, 0x4, 0x40, 0xd871, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x0, 0x700, 0x1, 0x6}}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008000) 09:08:33 executing program 0: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x128, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "8cc22c0cd0baaa9b4c911b61fd4611b1ca80a89481e7681ea8cda973614633fd9c0f00e74d04dfb02093e55fc5f2c85fe4c9c1e2a97aaa2b60f77962c6d7fa6b054eb78835ca7cdd21aeea16baf531fafd68da7ca0b4735dad741a864cc6ec56c0d98701d3d148fd3509821d6bea8084cc081c06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff9}, @NL80211_ATTR_FRAME_MATCH={0x5c, 0x5b, "43e449ccdfdfc2818ef6a78c592bdb15b84ca9cf70a7eed2455e8193429f0c5806a8f49376f7861683f608c0261aaf750c2bbf23936bc2ce60891e98294953e6d4dac593c49505eac95bf9d5de0820873a40092da2d68540"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd90c}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "a9872b7fa6d92653432c3c054aaad7a89e8cce"}]}, 0x128}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0xeaaa, 0x6, 0x7fff, 0x2, 0xfd, "72ecf441c452fb8f08a9fe5a96ac1c65540043", 0xffff, 0x1e4}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x4}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xe, 0x4}, {0x6, 0x1}, {0x81, 0x1}, {0x7, 0x1}, {0x81, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x81, 0x5}, {0x90, 0x2}, {0x58, 0x3}, {0xff, 0x3}, {0x9}, {0x8, 0x2}, {0x5, 0x6}], "1fb739b62977601e"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80040}, 0x80) 09:08:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x724c, 0xfffffffd, 0x0, 0x6, "942f0ee3af1f6b6912358bccbd27b4918828b7", 0xb213, 0x6fd5}) 09:08:33 executing program 0: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x128, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "8cc22c0cd0baaa9b4c911b61fd4611b1ca80a89481e7681ea8cda973614633fd9c0f00e74d04dfb02093e55fc5f2c85fe4c9c1e2a97aaa2b60f77962c6d7fa6b054eb78835ca7cdd21aeea16baf531fafd68da7ca0b4735dad741a864cc6ec56c0d98701d3d148fd3509821d6bea8084cc081c06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff9}, @NL80211_ATTR_FRAME_MATCH={0x5c, 0x5b, "43e449ccdfdfc2818ef6a78c592bdb15b84ca9cf70a7eed2455e8193429f0c5806a8f49376f7861683f608c0261aaf750c2bbf23936bc2ce60891e98294953e6d4dac593c49505eac95bf9d5de0820873a40092da2d68540"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd90c}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "a9872b7fa6d92653432c3c054aaad7a89e8cce"}]}, 0x128}}, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0xeaaa, 0x6, 0x7fff, 0x2, 0xfd, "72ecf441c452fb8f08a9fe5a96ac1c65540043", 0xffff, 0x1e4}) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x4}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xe, 0x4}, {0x6, 0x1}, {0x81, 0x1}, {0x7, 0x1}, {0x81, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x81, 0x5}, {0x90, 0x2}, {0x58, 0x3}, {0xff, 0x3}, {0x9}, {0x8, 0x2}, {0x5, 0x6}], "1fb739b62977601e"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80040}, 0x80) 09:08:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x724c, 0xfffffffd, 0x0, 0x6, "942f0ee3af1f6b6912358bccbd27b4918828b7", 0xb213, 0x6fd5}) 09:08:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d863e5ef89d3657dee704b83a0af6c0b65", @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf255e0000000c009900000100002b000000080027000000000008002700030000000800a0000300000005001901050000000800a00009000000"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x33, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x5, 0xe3, 0x0, @mcast2, @private0, 0x8000, 0x7800, 0x5, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r14, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r16, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x358, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x66}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x40c8}, 0x84) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r17, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004800}, 0x48001) 09:08:33 executing program 0: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)={0x128, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x78, 0x5b, "8cc22c0cd0baaa9b4c911b61fd4611b1ca80a89481e7681ea8cda973614633fd9c0f00e74d04dfb02093e55fc5f2c85fe4c9c1e2a97aaa2b60f77962c6d7fa6b054eb78835ca7cdd21aeea16baf531fafd68da7ca0b4735dad741a864cc6ec56c0d98701d3d148fd3509821d6bea8084cc081c06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff9}, @NL80211_ATTR_FRAME_MATCH={0x5c, 0x5b, "43e449ccdfdfc2818ef6a78c592bdb15b84ca9cf70a7eed2455e8193429f0c5806a8f49376f7861683f608c0261aaf750c2bbf23936bc2ce60891e98294953e6d4dac593c49505eac95bf9d5de0820873a40092da2d68540"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd90c}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "a9872b7fa6d92653432c3c054aaad7a89e8cce"}]}, 0x128}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000003c0)={0xeaaa, 0x6, 0x7fff, 0x2, 0xfd, "72ecf441c452fb8f08a9fe5a96ac1c65540043", 0xffff, 0x1e4}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x4}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xe, 0x4}, {0x6, 0x1}, {0x81, 0x1}, {0x7, 0x1}, {0x81, 0x5}, {0x0, 0x7}, {0x5, 0x6}, {0x81, 0x5}, {0x90, 0x2}, {0x58, 0x3}, {0xff, 0x3}, {0x9}, {0x8, 0x2}, {0x5, 0x6}], "1fb739b62977601e"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80040}, 0x80) 09:08:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x9, 0x724c, 0xfffffffd, 0x0, 0x6, "942f0ee3af1f6b6912358bccbd27b4918828b7", 0xb213, 0x6fd5}) 09:08:33 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:33 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x80}, 0x1, 0x0, 0x6}) r2 = syz_open_pts(0xffffffffffffffff, 0x2a0040) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0x8, 0x7, 0x8000, 0x1, 0xa, "d7a7f9080467e7e9"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0xcb, 0x6, 0x6, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x7, 0x6, 0x3}}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 09:08:33 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d863e5ef89d3657dee704b83a0af6c0b65", @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf255e0000000c009900000100002b000000080027000000000008002700030000000800a0000300000005001901050000000800a00009000000"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x33, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x5, 0xe3, 0x0, @mcast2, @private0, 0x8000, 0x7800, 0x5, 0x5}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r14, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r16, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x358, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x66}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x40c8}, 0x84) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r17, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004800}, 0x48001) 09:08:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000480)=@overlay={0x800, 0x1, 0x4, 0x100, 0x100, {0x77359400}, {0x4, 0x1, 0x40, 0x7d, 0x7f, 0x0, "1cfb8077"}, 0x17e, 0x3, {}, 0x20}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) 09:08:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 09:08:33 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:34 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) 09:08:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000480)=@overlay={0x800, 0x1, 0x4, 0x100, 0x100, {0x77359400}, {0x4, 0x1, 0x40, 0x7d, 0x7f, 0x0, "1cfb8077"}, 0x17e, 0x3, {}, 0x20}) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) 09:08:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d863e5ef89d3657dee704b83a0af6c0b65", @ANYRES16=0x0, @ANYBLOB="000329bd7000fcdbdf255e0000000c009900000100002b000000080027000000000008002700030000000800a0000300000005001901050000000800a00009000000"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, 0x0, 0x33, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r10, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x5, 0xe3, 0x0, @mcast2, @private0, 0x8000, 0x7800, 0x5, 0x5}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) ioctl$TCSETSF(r14, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r16, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x358, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r16}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x66}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x358}, 0x1, 0x0, 0x0, 0x40c8}, 0x84) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r17, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004800}, 0x48001) 09:08:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000480)=@overlay={0x800, 0x1, 0x4, 0x100, 0x100, {0x77359400}, {0x4, 0x1, 0x40, 0x7d, 0x7f, 0x0, "1cfb8077"}, 0x17e, 0x3, {}, 0x20}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000480)=@overlay={0x800, 0x1, 0x4, 0x100, 0x100, {0x77359400}, {0x4, 0x1, 0x40, 0x7d, 0x7f, 0x0, "1cfb8077"}, 0x17e, 0x3, {}, 0x20}) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) (async) 09:08:34 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x3, 0x1aa, &(0x7f0000000280)="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"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 09:08:34 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x3, 0x1aa, &(0x7f0000000280)="9c5a9a3d4a6beed44e32e6b37a02e5e0fac898a05095143361d5f0b8e32629b92f88b08d6ff7f965b4c1e54b5d32884f75f0a2660e1a9347dde10e9e9c3362ed9465e6d065750a4a400a77c197b1a1099e40d5fed5038d54d491ec21212c697cbe990d0c3d39e7d8f0a92b69786ff891a66280963a19706393ad576331edae46bd6529154c60891b5ee20af2006844b2f9fe277a44f7b4e796d6a743082f4e2b4fc9636355609ecd9ab5620926cf7bb1a45c8081672b880e28305e6c407694db803c71570da18dc46d903e78b738e4a484d7ee1b440a5438bbfce1adf7e8ef317e88fb9b707fc1dece850ecfd19026c27c15b257a36ce5af7f6090992afa34bb09a284738e98db09010ce2d19e292fcef749014bc4882dc4207d2415e5dc788e8c2dbc073a4842e16ed70d24ab3bcb2786fffc396e6f9ae8f254ac7793975cd8b5c8d422b02297c1102536f2b75b6d1cdb016282e2f18bbd9b26496d9701057c9bdbe6cf1ba71c47aaa8b93af6bebbe11f238d1ec6296a1669c4c9e2a32f996ff2c4580a17aee6aeeae021a363fe10f5483e5276b95d3a0f7d525fdb99852013ac28a20298bdef26b594b57a8634b37887fb896532d3ce88b6d6dce28c8b6f79ef174975c22b7e839e31d95cc7d622b041d43cb409756484ef6d680453e5433bc3fc9ebe4f296af769470b8047b5f6928d84873da001a88ddfd53c8cbd71ab5f9b1db6c1597e32ab26577a4a98d0f911ccd59e609e59bd1c38c13406de2ddc60ad89da6d6ff2eb86f8e3e048dff9263d2e2bbb138f68682dbd9b35fe6aaaca7e70d7223ff589dd11195a8478dd01173dddfe79dde6c914a9bfcefc8fba94bc0a77753facedd0c6d9f082dac36f7ce20044347c366430db7d1c9b619d602077ea6ad0b1fd16c08e1ed84f1027152c7f0e60942a6724aaf5c390f97ebdd7c5eca55b2e0fb7ecc4a77a1af414f68c3b8fbe53822778052512c3b7a1b5d7a6f0b071129507c69e19abbe32e13f5552841d15dc6fad848f338f1131f6940a4a751de0156ae988159291c366fa5f686c98983d39eb77e3b5041100ce118a13b095e1455cf0e8dd9e3fce424241de625c39234fbc1c9e1dece18d5bdb85c3bac12cac794d3d2dac012b1d2bac7639eb3ec2d260379ba51e77c32ba783da91d731cf2aa5c52ac72b92504737b3cb6a068f916d4693222ec5acda385d71aaf3af7211bd21df61710775c2d216b5a1a09ab9e962b45478c003341b94e7571497bf9fe70a6e2d013bb77fa7114a542abf0cd82c47fde966091f6cb0a9817285c6a4be720435d635b6db89bb6c06e9c6eb361844e2c7a7bdb0f1a9778143a16362abf892b72a9a3a52431f216dbc6b71dcac9561d1d0959fb4ceef08301583fbc4e284ebf40fd9357ac43275e17af15299f8095a6b651f67e1a3e650a20e15c5d5f9ee8cac45"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 09:08:34 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:34 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x3, 0x400, 0x8, 0xe01b}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:34 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x3, 0x1aa, &(0x7f0000000280)="9c5a9a3d4a6beed44e32e6b37a02e5e0fac898a05095143361d5f0b8e32629b92f88b08d6ff7f965b4c1e54b5d32884f75f0a2660e1a9347dde10e9e9c3362ed9465e6d065750a4a400a77c197b1a1099e40d5fed5038d54d491ec21212c697cbe990d0c3d39e7d8f0a92b69786ff891a66280963a19706393ad576331edae46bd6529154c60891b5ee20af2006844b2f9fe277a44f7b4e796d6a743082f4e2b4fc9636355609ecd9ab5620926cf7bb1a45c8081672b880e28305e6c407694db803c71570da18dc46d903e78b738e4a484d7ee1b440a5438bbfce1adf7e8ef317e88fb9b707fc1dece850ecfd19026c27c15b257a36ce5af7f6090992afa34bb09a284738e98db09010ce2d19e292fcef749014bc4882dc4207d2415e5dc788e8c2dbc073a4842e16ed70d24ab3bcb2786fffc396e6f9ae8f254ac7793975cd8b5c8d422b02297c1102536f2b75b6d1cdb016282e2f18bbd9b26496d9701057c9bdbe6cf1ba71c47aaa8b93af6bebbe11f238d1ec6296a1669c4c9e2a32f996ff2c4580a17aee6aeeae021a363fe10f5483e5276b95d3a0f7d525fdb99852013ac28a20298bdef26b594b57a8634b37887fb896532d3ce88b6d6dce28c8b6f79ef174975c22b7e839e31d95cc7d622b041d43cb409756484ef6d680453e5433bc3fc9ebe4f296af769470b8047b5f6928d84873da001a88ddfd53c8cbd71ab5f9b1db6c1597e32ab26577a4a98d0f911ccd59e609e59bd1c38c13406de2ddc60ad89da6d6ff2eb86f8e3e048dff9263d2e2bbb138f68682dbd9b35fe6aaaca7e70d7223ff589dd11195a8478dd01173dddfe79dde6c914a9bfcefc8fba94bc0a77753facedd0c6d9f082dac36f7ce20044347c366430db7d1c9b619d602077ea6ad0b1fd16c08e1ed84f1027152c7f0e60942a6724aaf5c390f97ebdd7c5eca55b2e0fb7ecc4a77a1af414f68c3b8fbe53822778052512c3b7a1b5d7a6f0b071129507c69e19abbe32e13f5552841d15dc6fad848f338f1131f6940a4a751de0156ae988159291c366fa5f686c98983d39eb77e3b5041100ce118a13b095e1455cf0e8dd9e3fce424241de625c39234fbc1c9e1dece18d5bdb85c3bac12cac794d3d2dac012b1d2bac7639eb3ec2d260379ba51e77c32ba783da91d731cf2aa5c52ac72b92504737b3cb6a068f916d4693222ec5acda385d71aaf3af7211bd21df61710775c2d216b5a1a09ab9e962b45478c003341b94e7571497bf9fe70a6e2d013bb77fa7114a542abf0cd82c47fde966091f6cb0a9817285c6a4be720435d635b6db89bb6c06e9c6eb361844e2c7a7bdb0f1a9778143a16362abf892b72a9a3a52431f216dbc6b71dcac9561d1d0959fb4ceef08301583fbc4e284ebf40fd9357ac43275e17af15299f8095a6b651f67e1a3e650a20e15c5d5f9ee8cac45"}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x19, 0x3, 0x1aa, &(0x7f0000000280)="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"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) 09:08:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:34 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0xfffffff7}, 0x0, 0x0, 0xfd}) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:34 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x1, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:34 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:35 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x3, 0x400, 0x8, 0xe01b}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x1, "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"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x1, "274ed9039d7a6cf942e2af47081b90c394de6fdf885899c14f8c200d6ccaf41297488eb9413920e5d20943d53e45dfc1f658826b0925ee536f0d0cb1a4cdc2e433d6eed5ffb2a86ef5466f6f86f5dcc01068013e7fc67612efb4f081b653d2b73a350db38f29c4768f019c0d029a79e22033e0f21789aae2c0de666f29cce2315790c9085ed95e309f9a3dc52fdf977e06dc4c6fd0456fdf4c7a8425594af81eb424c5c9189cce9dbbf3f706b771621cdf26be210ad402a2e956f9bf24bc34dbf74d88d35ab14f50a24e5e11224eb52c18fbaf2bf81ee67275bca4ce147ee889ef7793603ddcbcfc98a2b863c64c2aea4792bc527a57d76c195cbd08b7051032818e761a73a8c36322d8cdcb27df3f55a6064705db5c029ea0535db88b8f3eba88fe76ae0671186d3802f582277be6fa9d58b2f344267bbebcca58343676e349aae60b86b154859386754ae4a82f8627021cace2d6e51130e261553193884ade53fe85e60491f0eec418c60552a8740c146a8cd9569c4d2abb37646f7d41fa93d836fe86ccbb0704360fd0f7631138a3582a57e11cb19ba9e5b3d208b664f86083a4b5a8a6b3e1cac9f69a99475bd0786a331638e4f195976effb3b0870c671d0a5a34531ebf485649cd6a944214b8a443a48485589c61dc88b3c5826a1ec88e0393834fc099a58f3e6d35306b4e102a6ae39ba3506eb406e2396c52928e01d2"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:35 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1, 0x3, 0x400, 0x8, 0xe01b}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:35 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:35 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0xfb6e, 0x6, 0x5, 0x3, 0x17, "ad1293aeb7db6fd60b872b86fea714c6b452d7"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)={0x1, "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"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:35 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:35 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0xfb6e, 0x6, 0x5, 0x3, 0x17, "ad1293aeb7db6fd60b872b86fea714c6b452d7"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0xfb6e, 0x6, 0x5, 0x3, 0x17, "ad1293aeb7db6fd60b872b86fea714c6b452d7"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:35 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x4, 0x32, 0xfe, 0x101, 0x20, @mcast2, @remote, 0x10, 0x40, 0x3ff, 0x6}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1a, 0x12, 0x0, 0x0}) 09:08:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) (async) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0xfb6e, 0x6, 0x5, 0x3, 0x17, "ad1293aeb7db6fd60b872b86fea714c6b452d7"}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x4, 0x32, 0xfe, 0x101, 0x20, @mcast2, @remote, 0x10, 0x40, 0x3ff, 0x6}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1a, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x4, 0x32, 0xfe, 0x101, 0x20, @mcast2, @remote, 0x10, 0x40, 0x3ff, 0x6}}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1a, 0x12, 0x0, 0x0}) (async) 09:08:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x183400, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x400, 0x4, "8802df3b221668ab63660a612314c878c6a6f0", 0x355f2c7d, 0x1}) 09:08:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xd, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x393a, 0x42}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 09:08:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r3, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0x4, 0x32, 0xfe, 0x101, 0x20, @mcast2, @remote, 0x10, 0x40, 0x3ff, 0x6}}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1a, 0x12, 0x0, 0x0}) 09:08:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x81, 'syz1\x00', @default, 0x1, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f3a7115c87db2bc37307e8bc1f6af933cd7a9f417392bd0bd8bd0dac2bd58e8eb1b773ea95152ee16007a952ac5e5ab559e6a84ba3934a902dbf83190ef6d474bb4099979366256694b529d1f0d07b11742739175c9b14bfe767b96c570bb60ee8e777db945af4cbd6aa4518ea8735b33d1796e4c05e290e227c7d6ef8ca8cc21cb49032abfeeae1b1e485b59cf68f791bd8ecac499fa2d0ee2c10803ddcb7bd34d0e57354ca8ecaf527fa398aa98580c67d836fede0fda13c80ef513f13ba73b131906286c52f6f538dd7d01a721d620cb5375cf746280ee23ed8ff097eb82c71a", @ANYRES16=r4, @ANYBLOB="bd3ee55c151db03268574b75929604a0213f0f72dc9cac4e8deead8e1e8bd95ccf3ea5b96388b1061f8c10ea0023a0f37d230956a42beac9509027e29ed65fc2d798ddb9dd9c407f32ad20e537c8f8cd0455c280a099bf6a33ebfb18d355bb4ed1"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf250b0000000c009900030000000100000004000b0008003700010800000c006e8004000100040002000800090005ac0f0011000700524bb281714aa7f9d365b5c6f00000000400280131b943159b004400508005000200030000db19a63a0000000000090001007851d6fc670000000a000400814f696a3e3c0000050009000000000005000900000000000500090000000000090007004e37d400bd000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20008001}, 0x400c0c5) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) 09:08:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000004c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000480)={0xfb6e, 0x6, 0x5, 0x3, 0x17, "ad1293aeb7db6fd60b872b86fea714c6b452d7"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xd, 0x1e, 0x160, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xd, 0x1e, 0x160, &(0x7f0000000480)}) (async) 09:08:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x183400, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x400, 0x4, "8802df3b221668ab63660a612314c878c6a6f0", 0x355f2c7d, 0x1}) 09:08:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf25310000000800db00", @ANYRES32, @ANYBLOB="20ded324f071bd4a8aee135c9bf00c8d48bdda35d2f9e140af4349d2f862a2ea3ee4c82253b68075acc3762d7d522f60824cd0fc1f98c780051b187dbbe168266138a9a026b1a0c6b13df3c16e60dcac6e512d8c71750d000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x393a, 0x42}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) pipe(&(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x393a, 0x42}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) (async) 09:08:36 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xd, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf25310000000800db00", @ANYRES32, @ANYBLOB="20ded324f071bd4a8aee135c9bf00c8d48bdda35d2f9e140af4349d2f862a2ea3ee4c82253b68075acc3762d7d522f60824cd0fc1f98c780051b187dbbe168266138a9a026b1a0c6b13df3c16e60dcac6e512d8c71750d000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf25310000000800db00", @ANYRES32, @ANYBLOB="20ded324f071bd4a8aee135c9bf00c8d48bdda35d2f9e140af4349d2f862a2ea3ee4c82253b68075acc3762d7d522f60824cd0fc1f98c780051b187dbbe168266138a9a026b1a0c6b13df3c16e60dcac6e512d8c71750d000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000000) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:36 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x0, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002cbd7000fbdbdf258600000008000300", @ANYRES32=0x0, @ANYBLOB="050019010b00000008002201b60300000800a0000900000005001801150000000800a10006000000080027000300000008009f0003000000630adcd01596fb27954758ac6194a6a819fa7229d449a04f5e3194743432422a83cf13b174fbc27903b1b1f2e279220cda3ac8f4783632161d5fd833c9998acc317d06fc2a2cbb6d0ccb90d49c714461862e836414d0ff3731cd023c7b1161cfb48eee12f2eef1b2a945b89f8ab9baabe55b19409154ba79547deb6b9b"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) socketpair(0x29, 0x80000, 0xa25d, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 09:08:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x393a, 0x42}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 09:08:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x15, 0x1e, 0x160, &(0x7f0000000040)}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000004c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x303100, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000480)) 09:08:36 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf25310000000800db00", @ANYRES32, @ANYBLOB="20ded324f071bd4a8aee135c9bf00c8d48bdda35d2f9e140af4349d2f862a2ea3ee4c82253b68075acc3762d7d522f60824cd0fc1f98c780051b187dbbe168266138a9a026b1a0c6b13df3c16e60dcac6e512d8c71750d000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x9, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x1, 0x700, 0x65, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x29, 0xa2, 0x76, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x20, 0x700, 0x9, 0xba}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 09:08:36 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000100)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r5, 0x5404, 0x0) r6 = syz_open_pts(r5, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000200)=0x20, 0x4) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000000)={0x9, 0x496}) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x1f, 0x15, 0x0, &(0x7f0000000840)}) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000420bd70000000000100355a00000008000372944ee2d0a8f2d8171d3cffa393fc366c227e6415f274dc9034a85a9adee54a1f6190adbb4968c3b85d6850", @ANYRES32=0x0, @ANYBLOB="34007a8014000200a3afedab4b487b02f624cf0ed0f280581c00020015d198a822347859a1caa755b22594e8c7b853901234baa2"], 0x50}, 0x1, 0x0, 0x0, 0x280480c0}, 0x488c1) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000d00), 0x12) getsockopt$llc_int(r8, 0x10c, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 09:08:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x15, 0x1e, 0x160, &(0x7f0000000040)}) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000004c0)) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x303100, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000480)) 09:08:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x80000000, 0x9, 0x1a, 0xbf, 0x0}) 09:08:37 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x9, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x1, 0x700, 0x65, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x29, 0xa2, 0x76, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x20, 0x700, 0x9, 0xba}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 09:08:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x80000000, 0x9, 0x1a, 0xbf, 0x0}) 09:08:37 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) getsockname$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:37 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x0, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x15, 0x1e, 0x160, &(0x7f0000000040)}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000004c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x303100, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000480)) 09:08:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x9, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x1, 0x700, 0x65, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x29, 0xa2, 0x76, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x20, 0x700, 0x9, 0xba}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x9, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, 0x1, 0x700, 0x65, 0x401}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r0, 0x29, 0xa2, 0x76, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x20, 0x700, 0x9, 0xba}}) (async) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) (async) 09:08:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x80000000, 0x9, 0x1a, 0xbf, 0x0}) 09:08:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) 09:08:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r1, 0x4b36) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) 09:08:38 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) 09:08:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r1, 0x4b36) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:38 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) 09:08:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) 09:08:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDENABIO(r1, 0x4b36) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDENABIO(r1, 0x4b36) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) 09:08:38 executing program 5: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x9}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) 09:08:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x34b1, 0x0, 0x2, 0x200, 0x15, "387835319bd7305045bd143d452281d466e4ea"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x40, 0x3b, 0x8, 0x5, 0x7e1}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x0) 09:08:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x24008040) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:38 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:38 executing program 5: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x9}) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:38 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:38 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x0, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x24008040) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000000)) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x24008040) (async) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) 09:08:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x34b1, 0x0, 0x2, 0x200, 0x15, "387835319bd7305045bd143d452281d466e4ea"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x40, 0x3b, 0x8, 0x5, 0x7e1}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 09:08:38 executing program 5: ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000000)={0x9}) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x34b1, 0x0, 0x2, 0x200, 0x15, "387835319bd7305045bd143d452281d466e4ea"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x40, 0x3b, 0x8, 0x5, 0x7e1}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 09:08:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x24008040) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1f, 0x1a, 0x160, &(0x7f0000000040)}) 09:08:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1f, 0x1a, 0x160, &(0x7f0000000040)}) 09:08:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1f, 0x1a, 0x160, &(0x7f0000000040)}) 09:08:39 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x4000885) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:39 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x44042) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000480)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0xffff, 0x3}) 09:08:39 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x20, 0x17, 0x52, &(0x7f0000000480)}) 09:08:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x4000885) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000480)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0xffff, 0x3}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000480)) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0xffff, 0x3}) (async) 09:08:39 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:39 executing program 1: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)) r1 = socket(0x1, 0x6, 0x8ba) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) 09:08:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x4000885) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000480)) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0xffff, 0x3}) 09:08:40 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:40 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x0, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:40 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x119}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x524, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 09:08:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:40 executing program 2: socketpair(0x1d, 0x4, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0xfffffff8, 0x8}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)) 09:08:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCCONS(r0, 0x541d) 09:08:40 executing program 2: socketpair(0x1d, 0x4, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0xfffffff8, 0x8}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)) socketpair(0x1d, 0x4, 0x3ff, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0xfffffff8, 0x8}}) (async) pipe(&(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)) (async) 09:08:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCCONS(r0, 0x541d) 09:08:40 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x800, 0x8c}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair(0x21, 0xaa19c10947311ba6, 0x14000000, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept$netrom(r1, &(0x7f00000002c0)={{0x3, @rose}, [@null, @bcast, @rose, @netrom, @default, @rose, @null, @default]}, &(0x7f0000000340)=0x48) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000380)=0x9, &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bdad46e2d6df25860000000800030093d2d923c94477cdf87095fa500902eee9f39d", @ANYRES32=r3, @ANYBLOB="0c009900ff0100007d0000000800a100010000000800270003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x800) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:40 executing program 2: socketpair(0x1d, 0x4, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0xfffffff8, 0x8}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)) socketpair(0x1d, 0x4, 0x3ff, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x8, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0xfffffff8, 0x8}}) (async) pipe(&(0x7f0000000140)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)) (async) 09:08:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TIOCCONS(r0, 0x541d) 09:08:40 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000d00), 0x12) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:40 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x800, 0x8c}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x800, 0x8c}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:40 executing program 4: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x800, 0x8c}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000480)={0xfff7, 0x2, 0x9, 0x5, 0x17, "e52014f47442f6c0"}) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000004c0)={0x0, 0x3, 0xfffa}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0x1e, 0x162, &(0x7f0000000040)}) 09:08:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) socketpair(0xb, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3f, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4436c7ba98cb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "03675f074033de692d25bcc644d5d9f0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) 09:08:40 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000480)={0xfff7, 0x2, 0x9, 0x5, 0x17, "e52014f47442f6c0"}) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000004c0)={0x0, 0x3, 0xfffa}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0x1e, 0x162, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000480)={0xfff7, 0x2, 0x9, 0x5, 0x17, "e52014f47442f6c0"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000004c0)={0x0, 0x3, 0xfffa}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0x1e, 0x162, &(0x7f0000000040)}) (async) 09:08:41 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x1d, 0x0, 0x1, 0x9, 0x6}) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x4009, 0x12, 0x0, 0x0}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r4, 0x4b36) 09:08:41 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x800, 0x8c}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) socketpair(0xb, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3f, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4436c7ba98cb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "03675f074033de692d25bcc644d5d9f0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) 09:08:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) socketpair(0xb, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3f, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4436c7ba98cb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "03675f074033de692d25bcc644d5d9f0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) pipe(&(0x7f0000000040)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) socketpair(0xb, 0x5, 0x8, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000001c0)=0x3f, 0x4) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4436c7ba98cb"}, @NL80211_ATTR_PMKID={0x14, 0x55, "03675f074033de692d25bcc644d5d9f0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) (async) 09:08:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000480)={0xfff7, 0x2, 0x9, 0x5, 0x17, "e52014f47442f6c0"}) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000004c0)={0x0, 0x3, 0xfffa}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0x1e, 0x162, &(0x7f0000000040)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000480)={0xfff7, 0x2, 0x9, 0x5, 0x17, "e52014f47442f6c0"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000004c0)={0x0, 0x3, 0xfffa}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x10, 0x1e, 0x162, &(0x7f0000000040)}) (async) 09:08:41 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:41 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040), 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:41 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000180)={{@any, 0xce}, {@any, 0x7ff}, 0x400, "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"}, 0x418, 0x8}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) r5 = accept$netrom(r1, &(0x7f0000000740)={{0x3, @null}, [@bcast, @bcast, @remote, @remote, @rose, @netrom, @null, @rose]}, &(0x7f00000005c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @bcast, 0x9, 0x3f, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r4}, 0x10) r6 = accept$netrom(r0, &(0x7f0000000840)={{0x3, @null}, [@null, @null, @null, @null, @rose, @netrom, @bcast, @rose]}, &(0x7f00000008c0)=0x48) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000900)=0x7, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8) 09:08:41 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/134, 0x86}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=""/239, 0xef}, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0xc, 0x2, 0x84, &(0x7f00000004c0)}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2ebd) 09:08:41 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x1000, 0x7fffffff, 0x80009, 0x10000081, 0x0, "3b40ca007a000800"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:41 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/134, 0x86}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=""/239, 0xef}, 0x2) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0xc, 0x2, 0x84, &(0x7f00000004c0)}) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2ebd) 09:08:41 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000180)={{@any, 0xce}, {@any, 0x7ff}, 0x400, "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"}, 0x418, 0x8}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) r5 = accept$netrom(r1, &(0x7f0000000740)={{0x3, @null}, [@bcast, @bcast, @remote, @remote, @rose, @netrom, @null, @rose]}, &(0x7f00000005c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @bcast, 0x9, 0x3f, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r4}, 0x10) (async, rerun: 64) r6 = accept$netrom(r0, &(0x7f0000000840)={{0x3, @null}, [@null, @null, @null, @null, @rose, @netrom, @bcast, @rose]}, &(0x7f00000008c0)=0x48) (rerun: 64) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000900)=0x7, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8) 09:08:41 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/134, 0x86}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=""/239, 0xef}, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0xc, 0x2, 0x84, &(0x7f00000004c0)}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2ebd) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/134, 0x86}, {&(0x7f0000001a00)=""/105, 0x69}, {&(0x7f0000001a80)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=""/239, 0xef}, 0x2) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) (async) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000)) (async) pipe(&(0x7f0000000480)) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0xc, 0x2, 0x84, &(0x7f00000004c0)}) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x2ebd) (async) 09:08:41 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:41 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000180)={{@any, 0xce}, {@any, 0x7ff}, 0x400, "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"}, 0x418, 0x8}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) r5 = accept$netrom(r1, &(0x7f0000000740)={{0x3, @null}, [@bcast, @bcast, @remote, @remote, @rose, @netrom, @null, @rose]}, &(0x7f00000005c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @bcast, 0x9, 0x3f, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r4}, 0x10) r6 = accept$netrom(r0, &(0x7f0000000840)={{0x3, @null}, [@null, @null, @null, @null, @rose, @netrom, @bcast, @rose]}, &(0x7f00000008c0)=0x48) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000900)=0x7, 0x4) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8) pipe(&(0x7f0000000080)) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f00000000c0)={&(0x7f0000000180)={{@any, 0xce}, {@any, 0x7ff}, 0x400, "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"}, 0x418, 0x8}) (async) pipe(&(0x7f0000000100)) (async) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0x8, 0x1f, 0x1cecf68c, 0x2, 0x12, "9bee97746a947d0c5aacdbe16bb965ce76f789"}) (async) pipe(&(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', r4, 0x29, 0x2, 0x80, 0x7, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x80000000, 0x6}}) (async) accept$netrom(r1, &(0x7f0000000740)={{0x3, @null}, [@bcast, @bcast, @remote, @remote, @rose, @netrom, @null, @rose]}, &(0x7f00000005c0)=0x48) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @bcast, 0x9, 0x3f, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r4}, 0x10) (async) accept$netrom(r0, &(0x7f0000000840)={{0x3, @null}, [@null, @null, @null, @null, @rose, @netrom, @bcast, @rose]}, &(0x7f00000008c0)=0x48) (async) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000900)=0x7, 0x4) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) write$apparmor_exec(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8) (async) 09:08:42 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x60, 0x14, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x40, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9808}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7da}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x4, 0x8, 0x3}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/194}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x5, 0x9}) 09:08:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:42 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:42 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x5, 0x9}) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x5, 0x9}) (async) 09:08:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x60, 0x14, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x40, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9808}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7da}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x4, 0x8, 0x3}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/194}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x60, 0x14, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x40, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9808}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7da}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x4, 0x8, 0x3}) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/194}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) (async) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) (async) 09:08:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newaddr={0x60, 0x14, 0x400, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x40, 0xfe}, [@IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x8}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9808}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7da}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000140)={0x4, 0x8, 0x3}) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/194}) (async, rerun: 64) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (rerun: 64) 09:08:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x5, 0x9}) 09:08:43 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240), 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:43 executing program 2: ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x3}, 0x1, 0x2, 0x8}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x90000) 09:08:43 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:43 executing program 4: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:43 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:43 executing program 2: ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x3}, 0x1, 0x2, 0x8}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x90000) 09:08:43 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, 0x4) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240), 0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:43 executing program 2: ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x3}, 0x1, 0x2, 0x8}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000000)={{@any, 0x3}, 0x1, 0x2, 0x8}) (async) pipe(&(0x7f00000001c0)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, &(0x7f0000000040)=0x90000) (async) 09:08:43 executing program 0: setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) pipe(&(0x7f0000000040)) (async) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x2, 0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) 09:08:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000480)) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) (async) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000240), 0x4) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:44 executing program 1: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r1, 0x5404, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x9, 0x450, 0x3f, 0x800, 0x16, "561cd1161f1a74106c5d91b25607af9e7654d3"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) socketpair(0x23, 0x5, 0x1, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:44 executing program 2: r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xfc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x20000000, 0x28}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "bb0da186625e40c318fb1c6b8e6a8c423c9c2ff622fe4cb03838f34d8d81dc36b07022a70729f2f1d241ef57137321dbbb9291c9378a3c58f5efcdd98525cf4678d1206ec580aa8470900c88383b5ab3ca8ddb2cb19207c21bc4c75e3ac4f7a848c55a4ba165f776b5de7dd5f1774ee6c6270a1226f542b680261ea75535f8bf96f6d287794d1ab065c6226ba36080695cdac4edb0de3638a44a850bcefcf05b732df631c4c7b20011db80c4f543c5594e6100da81f419e215517fcb185bdb"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000009}, 0x4000015) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0xffff, 0xe4, 0x1, 0x9, 0xb6}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:44 executing program 3: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:44 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) write$cgroup_pid(r0, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000180)) 09:08:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) (async) 09:08:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0xffff, 0xe4, 0x1, 0x9, 0xb6}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:44 executing program 2: r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xfc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x20000000, 0x28}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "bb0da186625e40c318fb1c6b8e6a8c423c9c2ff622fe4cb03838f34d8d81dc36b07022a70729f2f1d241ef57137321dbbb9291c9378a3c58f5efcdd98525cf4678d1206ec580aa8470900c88383b5ab3ca8ddb2cb19207c21bc4c75e3ac4f7a848c55a4ba165f776b5de7dd5f1774ee6c6270a1226f542b680261ea75535f8bf96f6d287794d1ab065c6226ba36080695cdac4edb0de3638a44a850bcefcf05b732df631c4c7b20011db80c4f543c5594e6100da81f419e215517fcb185bdb"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000009}, 0x4000015) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:44 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r1, 0x10002) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000480)}) 09:08:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0xffff, 0xe4, 0x1, 0x9, 0xb6}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) 09:08:44 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, 0x0, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r1, 0x10002) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:44 executing program 2: r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xfc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x0, 0x3, r1}, @val={0xc, 0x99, {0x20000000, 0x28}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "bb0da186625e40c318fb1c6b8e6a8c423c9c2ff622fe4cb03838f34d8d81dc36b07022a70729f2f1d241ef57137321dbbb9291c9378a3c58f5efcdd98525cf4678d1206ec580aa8470900c88383b5ab3ca8ddb2cb19207c21bc4c75e3ac4f7a848c55a4ba165f776b5de7dd5f1774ee6c6270a1226f542b680261ea75535f8bf96f6d287794d1ab065c6226ba36080695cdac4edb0de3638a44a850bcefcf05b732df631c4c7b20011db80c4f543c5594e6100da81f419e215517fcb185bdb"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000009}, 0x4000015) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r2) 09:08:44 executing program 5: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcc5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044011}, 0x4008840) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0xe, 0x16, 0x0, 0x0}) 09:08:45 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:45 executing program 5: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcc5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044011}, 0x4008840) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0xe, 0x16, 0x0, 0x0}) 09:08:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0xe, 0x16, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0xe, 0x16, 0x0, 0x0}) (async) 09:08:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x80000001, 0x7, 0xa0aa, 0x80, 0x4, "3421420ae8353bc9af57ad09191f95c19a7565"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f00000000c0)={0x8000, 0x4, 0x7, 0x1fc, 0x1}) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x9, 0x1, 0x3, 0xbc, 0xe45}) 09:08:45 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x0, 0x406, 0x1e, 0xa4, &(0x7f0000000040)}) 09:08:45 executing program 5: sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcc5}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044011}, 0x4008840) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0x21, 0x6, 0xf1, 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="02002bbd700009db32eb21910000"], 0x14}}, 0x1) 09:08:45 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:45 executing program 4: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x80000001, 0x7, 0xa0aa, 0x80, 0x4, "3421420ae8353bc9af57ad09191f95c19a7565"}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f00000000c0)={0x8000, 0x4, 0x7, 0x1fc, 0x1}) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) (async) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x9, 0x1, 0x3, 0xbc, 0xe45}) 09:08:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) connect$netrom(r1, &(0x7f0000000480)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x1, 0x6, 0x7f, 0x5, 0xe, "5c097eac91155cbe9d5735107ec0e0e65be91e"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 09:08:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0x21, 0x6, 0xf1, 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="02002bbd700009db32eb21910000"], 0x14}}, 0x1) 09:08:45 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) connect$netrom(r1, &(0x7f0000000480)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x1, 0x6, 0x7f, 0x5, 0xe, "5c097eac91155cbe9d5735107ec0e0e65be91e"}) (async, rerun: 64) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (rerun: 64) [ 2649.942540] FAULT_INJECTION: forcing a failure. [ 2649.942540] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.980147] CPU: 1 PID: 15935 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2649.988077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2649.988083] Call Trace: [ 2649.988100] dump_stack+0x1b2/0x281 [ 2649.988115] should_fail.cold+0x10a/0x149 [ 2649.988129] should_failslab+0xd6/0x130 [ 2650.011768] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2650.016445] gsmld_open+0x9e/0x7b0 [ 2650.019991] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2650.024232] tty_ldisc_open+0x6c/0xb0 [ 2650.028043] tty_set_ldisc+0x287/0x5d0 [ 2650.031941] tty_ioctl+0xa2a/0x1430 [ 2650.035576] ? tty_fasync+0x2c0/0x2c0 09:08:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x80000001, 0x7, 0xa0aa, 0x80, 0x4, "3421420ae8353bc9af57ad09191f95c19a7565"}) (async, rerun: 32) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f00000000c0)={0x8000, 0x4, 0x7, 0x1fc, 0x1}) (async) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000140)={0x9, 0x1, 0x3, 0xbc, 0xe45}) [ 2650.039381] ? proc_fail_nth_write+0x7b/0x180 [ 2650.043917] ? trace_hardirqs_on+0x10/0x10 [ 2650.048163] ? fsnotify+0x974/0x11b0 [ 2650.051877] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2650.056812] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2650.061838] ? SyS_write+0x1b7/0x210 [ 2650.065577] ? tty_fasync+0x2c0/0x2c0 [ 2650.069391] do_vfs_ioctl+0x75a/0xff0 09:08:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) connect$netrom(r1, &(0x7f0000000480)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x1, 0x6, 0x7f, 0x5, 0xe, "5c097eac91155cbe9d5735107ec0e0e65be91e"}) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) [ 2650.069404] ? lock_acquire+0x170/0x3f0 [ 2650.069413] ? ioctl_preallocate+0x1a0/0x1a0 09:08:45 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) bind$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 09:08:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async, rerun: 64) bind$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (rerun: 64) [ 2650.069425] ? __fget+0x265/0x3e0 [ 2650.069436] ? do_vfs_ioctl+0xff0/0xff0 [ 2650.069447] ? security_file_ioctl+0x83/0xb0 09:08:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) bind$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(&(0x7f0000000080)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) bind$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) [ 2650.069458] SyS_ioctl+0x7f/0xb0 [ 2650.069465] ? do_vfs_ioctl+0xff0/0xff0 [ 2650.069483] do_syscall_64+0x1d5/0x640 [ 2650.069500] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2650.069508] RIP: 0033:0x7f45f79b00c9 [ 2650.069513] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2650.069524] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 09:08:46 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x15, 0x9f, &(0x7f00000001c0)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, 0x0, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000005c0)={&(0x7f0000000840)=[0x1, 0x1, 0x101, 0xffff, 0x5, 0x2, 0x8001, 0x0, 0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x6, 0x4, 0x7ff, 0x6, 0x5, 0x10000, 0x3, 0x0, 0x7fff, 0x10000, 0x7eb, 0x2, 0x7, 0x3, 0xffffffff, 0x8, 0x6f2c, 0x9, 0x7, 0x8001, 0x2, 0x80000001, 0xffffffff, 0x4, 0x2, 0x1, 0xf3, 0x80, 0x8, 0x7ff, 0x8001, 0x7fffffff, 0x2, 0x48083ce, 0x80, 0x1, 0x0, 0xff, 0x2, 0x3ff, 0x32e, 0x5, 0x6, 0x8, 0x1, 0x7, 0x15, 0x1ff, 0x8, 0xfff, 0xa5f, 0x80, 0x800, 0x3f, 0x0, 0x1, 0x7, 0x2, 0x5, 0x2, 0x3, 0x20, 0x401, 0x4, 0x3796, 0x5, 0xffffffff, 0x3f, 0x1, 0x1, 0x1000, 0x1, 0x1000, 0x5, 0xfffffc01, 0x0, 0x7, 0x0, 0x8a4e, 0x7, 0x100, 0x7, 0x1, 0x6, 0x0, 0x400, 0xad678a2, 0xffffffca, 0x46c, 0x1f, 0x7fff, 0x1ff, 0xc3, 0x0, 0xa0000000, 0x800, 0xffff, 0xfffffffa, 0x7, 0x1, 0x505d, 0x6, 0x1c, 0x6, 0x3, 0xffffffc1, 0x81, 0x9, 0x7, 0xd1, 0x4, 0x7fff, 0x7ff, 0xffffffff, 0x7, 0x8, 0xfffffff7, 0x69, 0x4, 0x7, 0x10001, 0x5, 0xffffff81, 0x3ff, 0xfffffffb, 0x7, 0x4, 0x7, 0xb45, 0x7ff, 0x9, 0x800, 0x8000, 0x2, 0xa96, 0x7, 0xfff, 0x9, 0x3, 0x9, 0x4, 0x7ff, 0x9, 0xff, 0x0, 0x80000000, 0x4, 0x3ff, 0x3, 0x9, 0xda1a, 0x0, 0x4, 0x200, 0x0, 0x0, 0x7fffffff, 0x9, 0x40, 0x1, 0x0, 0xe0c3, 0x8, 0xf34, 0xfffffff9, 0x400, 0x0, 0x1, 0x8, 0x4, 0x57, 0xfffffffa, 0x3, 0x20, 0x5, 0x401, 0x8, 0x1, 0x40, 0x4, 0x280, 0x3, 0x40, 0x1, 0x8, 0xffffffff, 0x3, 0x75, 0xcc, 0x6, 0x81, 0x0, 0x401, 0x7, 0x5, 0x3, 0x6, 0xc76, 0x7f, 0x0, 0x7, 0x8000, 0x2, 0x200, 0xff, 0xfffffffa, 0x5, 0xc10, 0x5, 0x101, 0x7fff, 0x5, 0x40, 0x7ff, 0x1, 0x80000001, 0x6, 0x8, 0x8, 0x2, 0x400, 0x2b, 0x20, 0x80000001, 0x9, 0xffffffff, 0x6, 0x7fff, 0xfffffe00, 0x7, 0x2, 0x8, 0x7f, 0x8, 0x3f, 0x2, 0x0, 0x615e, 0xfd91, 0xffffffff, 0x3, 0x2, 0x5dce, 0x7, 0x3, 0x1, 0x0, 0xd888, 0x3bf, 0x80, 0x200, 0x9, 0x2, 0x2, 0xfffffff8, 0x2cf, 0x7ff, 0x400, 0x1, 0x4, 0x1, 0x1, 0x10000, 0x336, 0x7fffffff, 0x7, 0x2, 0x9d, 0x2, 0x7fe3, 0xffffffff, 0x8001, 0xfffff001, 0x200, 0x80, 0xc1f1, 0x3b, 0x9, 0xa532, 0x351a8a69, 0x6, 0x6f5, 0x4f, 0x5, 0x6, 0x3ff, 0x79, 0x2803, 0x1, 0x1, 0xffffff87, 0x7f, 0x9, 0xfffff893, 0x6, 0xcf02, 0x10001, 0xe89b, 0x6e45, 0x0, 0x1, 0xff, 0x4, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x1f, 0x7, 0x5, 0xffff0001, 0x4, 0x3, 0x0, 0x80000001, 0x401, 0x7, 0x1, 0xa130, 0x2, 0x1, 0x8, 0x20, 0x0, 0x400, 0xcb3, 0x0, 0xd86, 0x5, 0x9, 0x100, 0x8, 0x0, 0xce5120e, 0x80000001, 0x2, 0x200, 0x48e, 0x1f, 0xabbd, 0x6, 0x4, 0x400, 0xc8, 0x2, 0x2, 0x0, 0x7ff, 0x8, 0x8001, 0x8, 0x1, 0xd9b, 0xffffff81, 0x1, 0x4, 0x7, 0x3, 0x9, 0x1, 0x5, 0x5d, 0x4, 0x7, 0x100, 0x7, 0x2, 0x3d, 0x80000000, 0x455, 0x10000, 0x7fff, 0xfd4a, 0xc396, 0x1, 0xffff, 0x4, 0x8, 0x1, 0x36e20000, 0x3, 0x4, 0x7d70, 0xffff5a34, 0x83a2, 0xfffffff7, 0x80000001, 0x46b, 0x9, 0x1, 0x4, 0x8000, 0x0, 0x5, 0xb505, 0x7fffffff, 0x3ff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x0, 0xff, 0x4, 0x279, 0x80000001, 0x2, 0x6, 0x800, 0x2, 0x8001, 0x17, 0x80000000, 0x5, 0x0, 0x5b1, 0x6, 0x124, 0x3, 0x7, 0x800, 0x200, 0x6, 0x65, 0x5, 0x40, 0x3, 0x6, 0x0, 0x1, 0xc6, 0x6, 0x6, 0x1, 0x0, 0x1, 0x5, 0x1, 0x8, 0x6613, 0x9, 0x35, 0xfffffffd, 0x80000001, 0xffff, 0xb906, 0x1, 0x6, 0x8, 0x5, 0x401, 0x2, 0x401, 0x48, 0x9fc8, 0x2, 0x8000, 0x200, 0x54f3, 0x11aa, 0x7ff, 0xfffffff9, 0x5, 0x10000, 0x10000, 0x5, 0x1, 0xffffff00, 0x100, 0xffff, 0x8, 0x3, 0xff, 0x1, 0x2, 0x4c, 0x7fffffff, 0x1, 0xfffffffd, 0x800, 0x4, 0xfff, 0x4, 0x3, 0xfffffffe, 0x1, 0x2, 0x1, 0x7, 0x11, 0x8, 0x2, 0x3, 0x10001, 0x40, 0x9, 0x5, 0x4, 0x2, 0x3, 0x5, 0x3, 0x8, 0xb849, 0x9, 0x8000, 0x1f, 0x7, 0x4, 0x3f, 0x8, 0xffffffff, 0x0, 0x4, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0x7fffffff, 0x3, 0x5b, 0x507, 0x1, 0xffffffff, 0x80000001, 0x3, 0x7fffffff, 0x1, 0x8, 0x3, 0xe5a6, 0x4, 0x4, 0x933, 0x0, 0x80000000, 0xfff, 0x4, 0x0, 0x5, 0xffffffff, 0x9, 0x81, 0x1, 0x7f, 0x2, 0x2, 0x2, 0x7f, 0xfffffffc, 0x963, 0x9, 0x5, 0x10001, 0xffffffff, 0x1, 0x20000000, 0x1, 0x20, 0x6e, 0x1, 0x1f, 0x401, 0x1008, 0x4, 0x800, 0x8, 0x9, 0x75a, 0x0, 0x1, 0x2, 0x9, 0x5, 0x6, 0xffffffff, 0x5, 0x69, 0xffffff7f, 0x37, 0x7, 0x200, 0x5, 0xff, 0xffff, 0xff, 0xfffffffa, 0x90d, 0x10000, 0x9bc6, 0x0, 0x5, 0x64ba, 0x6, 0x4, 0x6000, 0x7, 0x2, 0x4, 0xd7d5, 0xfb, 0x0, 0xa8, 0x9, 0x4, 0x7, 0x0, 0x6, 0xfffffffc, 0x8, 0x9, 0x5, 0x1, 0x9, 0x100, 0xfffffc2b, 0x8000, 0x7e, 0x0, 0x0, 0x8, 0x7fff, 0x451, 0xc2c1, 0x7f, 0x401, 0x101, 0xbd, 0xa0000, 0x3ee9, 0x8, 0x2, 0x0, 0x7f, 0x8, 0xe459, 0xfff, 0x34e1, 0x5, 0x91, 0x5, 0x3ff, 0x1000, 0x0, 0x1ff, 0x8e, 0x238, 0xcfd, 0x4, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xfc, 0x0, 0xff, 0x5, 0x8, 0xd0bc, 0x9, 0x9, 0x19f9, 0x4, 0x70c4, 0x1f, 0x3, 0x1000, 0x4e6, 0xffffffff, 0x5, 0x2, 0x10001, 0x8000, 0x5, 0x0, 0x2, 0x528, 0x401, 0x0, 0x5, 0x800, 0xfffff800, 0x1, 0xc55, 0x6, 0x5, 0x7, 0xfff, 0x2000000, 0x0, 0x9, 0x4, 0x5, 0xffff, 0x9e076d5, 0xe635, 0x3, 0x7, 0x0, 0x8d, 0x5, 0x6, 0x101, 0x6, 0xffffff00, 0x81, 0x73, 0xde, 0x81, 0xfff, 0x81, 0x8b1, 0x2, 0x2, 0x2, 0x3, 0x7, 0xff, 0xa8e9, 0x8, 0x4, 0x3f, 0x8, 0x40, 0x7, 0x1, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x2, 0x2, 0x3, 0x3, 0x8, 0x64, 0x8, 0x1, 0x3, 0x7fffffff, 0x3, 0x8, 0x4, 0x0, 0x41ca, 0x1ff, 0xfb, 0xffffffff, 0x8, 0x1ff, 0x8, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x40, 0xc52, 0xfffff010, 0x7, 0xfd, 0x6, 0x8, 0x100, 0x2, 0x0, 0x2, 0x401, 0x8000000, 0x10001, 0x6, 0x1000, 0x3c41c7c5, 0x8, 0x54d8, 0x991, 0x1, 0xd32a, 0x6, 0x728f7498, 0x0, 0x20, 0x9, 0x3, 0x5, 0x9, 0x1f, 0x80000000, 0x3ff, 0x8, 0x4, 0x9, 0x0, 0x2, 0x8, 0x2, 0x9, 0x48, 0x7, 0x7ff, 0xff, 0x3f, 0x60, 0x7, 0x4, 0x16, 0x7, 0x7, 0xfffffffd, 0x0, 0xff, 0x8000, 0x7f, 0xb33a, 0x7ff, 0x1, 0xffff, 0x5, 0x5, 0x1000, 0x6, 0x6c8c847e, 0x8001, 0x800, 0x0, 0x0, 0x4, 0x4, 0x10001, 0x80, 0x3, 0xfffffffe, 0x9, 0x8, 0x6, 0x1, 0x2, 0x78, 0xff, 0x5, 0x5, 0x3, 0x2000000, 0x1000, 0x5, 0x10000, 0x7, 0x4, 0x4, 0x10001, 0xfffffff8, 0x65, 0x7ff, 0x7, 0x5, 0x8, 0x6, 0x101, 0x0, 0x3, 0x7f, 0xfffffffc, 0x7c000, 0x4, 0xec, 0x7f, 0x10000, 0xffffeb60, 0x200, 0x9, 0x6, 0x6, 0x3, 0x3d, 0x5, 0x10000, 0x4, 0x200, 0x3, 0xc7e1, 0x4, 0x8, 0x1511, 0x400, 0x3, 0xffffffff, 0x1, 0x8001, 0x4, 0x800, 0x8, 0x7f, 0x4, 0x3, 0x1f, 0x2c, 0x10001, 0x101, 0x3ff, 0x6, 0x3, 0x800, 0x8, 0x0, 0x2, 0x3fe, 0x0, 0x7, 0x3, 0x7fffffff, 0x7, 0xdf, 0x0, 0xacb, 0x2, 0x9, 0x0, 0x80000000, 0x8, 0x7f, 0x6, 0x74, 0x20, 0x0, 0xffff8000, 0x7fff, 0x575, 0x1, 0x3, 0x8, 0x1f, 0x7, 0x9, 0xbc4, 0xfffffffe, 0xbde, 0xffffff3a, 0x5, 0x1ff, 0x4, 0x4, 0x7, 0x2, 0x4c41, 0x2, 0xf5, 0x3, 0x0, 0x47, 0x80000001, 0xffff, 0xc, 0x41d6, 0x3, 0x2, 0x4, 0x7f, 0x4, 0x0, 0xffff767b, 0x10001, 0x9e, 0x8, 0x3, 0x6, 0x80000000, 0x1000, 0x6, 0x8, 0x80000000, 0x1, 0x800, 0x8, 0x9, 0x81, 0xfffffff7, 0x1, 0x7, 0x6, 0x9f01, 0x401, 0x40, 0x800, 0xec, 0xb4, 0xffffffff, 0x9, 0x3da, 0x84c7, 0x6, 0xc1, 0x40, 0x6, 0xa7, 0xfff, 0x3f, 0x4, 0x1, 0xffffffff, 0x1, 0x3, 0xc066, 0x7f, 0x6, 0x8], 0x1, 0x400, 0x3f}) syz_open_pts(r3, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000000)={&(0x7f00000000c0)=[0x0, 0x9, 0xff, 0x9, 0x80000001, 0x7, 0xfff, 0x5, 0x3, 0xca52, 0x4, 0x80000001, 0x0, 0x4, 0x100, 0x9, 0x9, 0x3f, 0x7fff, 0x1, 0x2, 0xff, 0x80000000, 0xff, 0x4, 0x2, 0x1c, 0x100, 0x9, 0xce5, 0x80, 0x3, 0x6, 0x5, 0x80, 0x70e8, 0x8, 0x7ff, 0x7, 0x0, 0x3, 0x7, 0x8001, 0x200, 0xffffff01, 0x40, 0x100, 0x6, 0x5e6c, 0x401, 0xc41, 0x3, 0xd2, 0xffff, 0x7fff, 0x2, 0x101, 0x8, 0x0, 0x0, 0xfffffffe, 0x1, 0x3, 0x3f, 0x3c, 0x200, 0x4, 0x40, 0x80000000, 0x401, 0x8000, 0x0, 0x62, 0x5, 0x9, 0x248, 0x6, 0x1, 0x20, 0x0, 0x0, 0x7, 0x7fffffff, 0x7b8, 0xfffffff7, 0x81, 0x8000, 0x63ad, 0x8, 0x46bf1597, 0x5, 0x3ff, 0xfffff21e, 0x8, 0x6, 0x0, 0x3, 0x2ed, 0x1, 0x1, 0x0, 0xfffffffb, 0x58, 0x8, 0x1ff, 0x1, 0x7, 0xfff, 0x0, 0x1000, 0x6, 0x2, 0x1, 0xfffffffb, 0xc47, 0x1, 0x0, 0x3, 0x6, 0x2, 0xffff, 0x7f, 0x3f, 0x3f, 0x4, 0x0, 0x6ee, 0x6, 0x7, 0x4, 0x2, 0x7855b626, 0x7fffffff, 0xfffffffd, 0x1000000, 0x4, 0x1, 0x1, 0xd0, 0x8, 0x3, 0x2, 0x4, 0x401, 0x7f, 0xfffff001, 0x72, 0x9, 0x101, 0x4, 0x8, 0x5, 0x7ff, 0xfffffff9, 0x9, 0x6, 0x20, 0x8, 0x80800000, 0x1, 0x4, 0xbb4f, 0xea, 0xf041, 0x1, 0x3, 0x0, 0xfff, 0x3, 0x2, 0x4, 0x3ff, 0x54, 0x5, 0x3, 0x2d0, 0x1, 0x0, 0x1, 0x8e78, 0x0, 0x7, 0x8, 0x73, 0x1, 0x9, 0xffff, 0x8, 0x3ff, 0x7fff, 0x8, 0x9, 0x100, 0x1f, 0x3f, 0x0, 0x4d59, 0x1000, 0x8, 0x9, 0xffffffff, 0x6, 0x3, 0x7bc, 0x3, 0x6, 0xa6a, 0x4, 0xfffffe00, 0x0, 0x6, 0x5, 0x77, 0x20, 0x40, 0x8, 0x3, 0xfffffff8, 0xd, 0xb017, 0x7, 0x4, 0x1, 0x24, 0xce5, 0xffffff91, 0x0, 0x1b4, 0x3, 0xb7, 0x5, 0x9, 0x1735, 0x1, 0x3, 0x20, 0x401, 0x6, 0x0, 0xc509, 0x4, 0x1, 0x1, 0x9, 0x3, 0x400, 0x8, 0x1ff, 0x6a9, 0x5, 0x20, 0xa35, 0x800, 0x7, 0x8f3147ec, 0x1, 0x0, 0x2, 0x401, 0x1, 0x1, 0x2, 0x8, 0x8, 0x5, 0x4, 0x5, 0x9, 0x4, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0x0, 0x9, 0xa1f2, 0x1, 0xd6, 0xa, 0x101, 0x6, 0x0, 0xffffff36, 0xfffffc01, 0x0, 0x2, 0x3, 0x0, 0x8, 0x6, 0x8001, 0xbc, 0x9, 0x5, 0x6, 0x5, 0x0, 0xff800000, 0x8, 0xe0, 0x100, 0x5db3, 0x0, 0x2, 0x9, 0x7, 0x80000000, 0x291, 0x3ff, 0x5, 0x4, 0x8, 0x80, 0x81, 0x8d5, 0x8, 0x3ff, 0x6, 0x3, 0x4, 0x786, 0x2, 0x10001, 0xfffff000, 0x3, 0x53f, 0xfffffff7, 0x8, 0x8a5, 0x0, 0x1, 0x3, 0x0, 0x4, 0xcbd, 0x7, 0x0, 0xb41, 0x0, 0x161c, 0x7e48da41, 0x3a, 0x18, 0xfffff000, 0x347, 0x4, 0x40, 0xca1, 0x7, 0x9, 0x8, 0x9, 0x7000, 0x9, 0x3f, 0x7fff, 0x63f, 0x101, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x6, 0x7, 0xf39, 0x10001, 0x6, 0x1f31e61d, 0x0, 0x1, 0xffffff81, 0x7fff, 0x4, 0x8e, 0x4, 0x401, 0xb3, 0x4, 0x2, 0x5, 0x2, 0x5, 0x9cc, 0xa0, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x52, 0x96db, 0xc2, 0x9, 0x7, 0xae1, 0x2, 0xdc, 0x8, 0x0, 0x1, 0xed35, 0xe8, 0x8, 0x5, 0x80000001, 0x0, 0x6, 0x1, 0x4, 0xff, 0xffff7fff, 0x400, 0x1, 0x401, 0xdf, 0x4, 0x1, 0x7433, 0x7, 0x80000001, 0xff, 0x0, 0x6, 0x4, 0x3f, 0xffda, 0x639, 0x2, 0x0, 0x8, 0x5e7db7cc, 0x6, 0xb5, 0x2, 0x2e01, 0x1, 0x80000000, 0x7ff, 0x400, 0x400, 0x2f94, 0x1, 0x5c6e, 0x4, 0x2, 0x7, 0xa358, 0x4, 0x7, 0x0, 0x4, 0x7, 0x800, 0x3, 0x1000, 0x1, 0x2d8, 0x4, 0x3, 0x9, 0x4, 0x5ca23799, 0x9, 0x4, 0x3, 0x3ff, 0x2, 0x9, 0x80000000, 0x1, 0x10001, 0x401, 0x4, 0x1, 0x3, 0xfffffffe, 0xcd, 0x0, 0x80, 0x2, 0x3, 0xffff, 0x7f, 0x9, 0x1, 0x7ff, 0x7, 0x8, 0x1ff, 0x400, 0x4, 0x1, 0x575, 0xa3, 0x8001, 0x1f, 0x80, 0x7, 0x7, 0xcd36, 0x80000001, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x400080, 0xffff, 0x1, 0x7, 0x80000000, 0x1f, 0x1, 0x72, 0x5, 0x8, 0x400, 0x6, 0x8000, 0x1, 0x7, 0x1, 0x3ff, 0x5, 0x101, 0x0, 0x1, 0x3f, 0x5156, 0x4, 0x40, 0x3, 0x7, 0x8, 0x80000001, 0x6506, 0x1, 0xfffffbff, 0x3, 0x200, 0x5, 0x4, 0x7ff, 0x3f, 0x7, 0xde, 0x0, 0xff, 0x400, 0x0, 0x4, 0x1000, 0x6, 0x30, 0x6, 0x1, 0x1f, 0x6, 0x7, 0x401, 0x5, 0x9, 0x8, 0x0, 0x7fffffff, 0x2d93bc31, 0x7fffffff, 0x3, 0x6, 0x80, 0x15ed, 0x1666, 0xb7, 0x2, 0x100, 0x6, 0x6, 0x8000, 0x1000, 0xfffffffd, 0xfffffffc, 0x3, 0x4, 0x1, 0x45, 0x7, 0x8, 0x0, 0xf90, 0x3, 0x7, 0x8, 0xacf, 0xb7f0, 0x3, 0xed11, 0xfffffffa, 0x3b9, 0x80, 0x1ff, 0x1, 0x10000, 0x8, 0x9, 0x5, 0x1, 0x1, 0x7, 0x4, 0x0, 0x0, 0x87, 0x1, 0x7, 0x9, 0x0, 0x9, 0xffffff00, 0x800, 0xffffffff, 0x8001, 0x2, 0x0, 0x1, 0x6, 0x80, 0x8, 0x5, 0x9, 0x9, 0x0, 0x9, 0x4, 0x2, 0x8, 0x4cc, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0x1000, 0xfffffff7, 0x4, 0x3f, 0x8, 0x7, 0x6, 0xa084, 0x8, 0x2, 0x1c, 0x101, 0x3, 0x7, 0x8001, 0x7, 0x401, 0x7ff, 0x61, 0x2, 0x7fffffff, 0x7ff, 0x5, 0x7, 0x80, 0x8, 0x6, 0x80000001, 0x2, 0x3, 0x4, 0x7fff, 0x513, 0x3, 0xfffffff7, 0x2, 0x80000001, 0x1, 0xce4, 0x7, 0x1, 0x8c0, 0x10001, 0x0, 0x0, 0xea22, 0x6, 0x9b03, 0x80000001, 0xffffcfa0, 0x10000, 0x2bfb, 0x4, 0x5, 0x200, 0x1, 0x8, 0x8, 0x9, 0x7, 0x4, 0x8000, 0x66, 0x1, 0x6b, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3a, 0x4e0e, 0x3, 0x2, 0x7ff, 0x2, 0x0, 0x8, 0x8b46, 0x3ff, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x9, 0x9, 0x6, 0xffff7fff, 0x2c7, 0x6, 0x5, 0x9, 0xbcb0, 0xff, 0x1, 0x8, 0x0, 0x80000001, 0x9, 0x0, 0xfffffff9, 0x609664be, 0xff, 0x32cf, 0xffffff7f, 0x9, 0x2, 0x1000, 0x8, 0x7fffffff, 0x38, 0x5db9, 0x3f, 0x3, 0x8, 0x9, 0x9, 0xfffffffc, 0x74b4, 0x3, 0x9, 0x196, 0x80000000, 0x3f3b, 0x3ff, 0x5, 0xff, 0xfffffffa, 0x8, 0x60cb, 0x6, 0x7fffffff, 0x8000, 0x2, 0x7, 0x10000, 0xffffffff, 0x7b345b2b, 0x1000, 0x80000000, 0xf12, 0x7f, 0xfffffffc, 0x67e3e890, 0x2, 0x3ff, 0x6, 0xccec000, 0x2, 0x18901650, 0x5, 0x5, 0x2, 0x1, 0x4f, 0x1000, 0x732, 0x0, 0x401, 0x0, 0x10000, 0x6, 0x7, 0x7, 0x8, 0x2, 0x6, 0x5, 0x8001, 0xc00000, 0x9, 0x4, 0x1, 0x1, 0x0, 0x7fff, 0x9, 0xfffffff9, 0xffffffff, 0x72d, 0x42d5, 0x1, 0x0, 0x477, 0x5, 0x4, 0x7, 0x7fff, 0x7, 0x7fffffff, 0x7, 0xfffeffff, 0x800, 0x506, 0x7fffffff, 0x3, 0x10001, 0x8000, 0x1, 0x78, 0x101, 0x0, 0x3, 0x0, 0x54e, 0x3, 0x20, 0x3, 0x1, 0x5, 0xfdff, 0xd6, 0xb66, 0x20, 0x7fffffff, 0x0, 0x8, 0x3, 0x4, 0x2, 0x8, 0x10000, 0x0, 0x64d, 0x1, 0x800, 0x80000000, 0x7178, 0x100, 0x5, 0xbe, 0x5, 0x6, 0x5, 0x80000001, 0x3, 0x3, 0x20, 0x400, 0x95, 0x4, 0x80000000, 0xff, 0x6b8, 0x101, 0x9, 0xffff8001, 0x7fffffff, 0x1, 0x9, 0x1ff, 0x3, 0x8d24, 0x1, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x7fffffff, 0xfffff493, 0x104eb1e7, 0x3112, 0x7, 0x7, 0x9, 0x1, 0xffffffff, 0x40000000, 0xed6a, 0x9dd, 0x9f9, 0x8000, 0x1, 0x4, 0x7, 0x630, 0x1c00, 0x7, 0x4, 0x3, 0x400, 0x0, 0x4, 0x1, 0x5, 0x7, 0x3, 0x100, 0x81, 0x7, 0x9, 0x7, 0x800, 0x2, 0x5, 0x9, 0x0, 0x6, 0x6, 0xbe0, 0xfffffffc, 0x101, 0x80000000, 0x8, 0x80000001, 0x4, 0x0, 0xd1d, 0xfffffffa, 0x3, 0x5, 0xfff, 0x9, 0x8, 0x0, 0x4, 0x8, 0xb231, 0x80000000, 0x7839, 0x3, 0x1, 0x3, 0x2, 0xffff, 0x3f, 0x10001, 0x4, 0x7fff, 0x400, 0x0, 0x4, 0x47, 0x40, 0x9, 0x10001, 0x0, 0x7ff, 0xffffffff, 0x20, 0x101, 0xffff, 0xffff186f, 0x7, 0xb36, 0x6, 0x2, 0x9, 0x7ff, 0x200, 0x3, 0x8001, 0x80, 0x1b18, 0x3, 0x2, 0xfffffe00, 0x1558, 0x81e2, 0x6, 0x1, 0x2, 0x2, 0xffff, 0x5, 0xfffffffe, 0x3, 0x5, 0x1, 0x7fffffff, 0x27, 0xfc7b8000, 0x9, 0x101], 0x2, 0x400, 0x7}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f00000010c0)={{@local, 0x9}, {@my=0x1, 0x3}, 0x400, "a50de1dd0401441c5bbf833e4c7b945585ccd9896c7e15503f927b2f7718188dabe65b948d31f4e1fbf373a6e244950c57d866b74ceae21735065126d9e6e3101a9d8dae4bfe16f382b31bd160efbb0579ba986092285d1a69dbd7f62eb77ef711df26e4a8946af09e59eb18ed9f46e8b6b4db565511697dff2a28eef396330bf1eca915f43232fd052c3c54a38bbaf01901f685f00cac5b636e032576a0550f49fb41dde3cccf16290ed4565f6c8a7891a7fc1dce238bec01402a567a94038d6f34faf86258d1cfb0cd38f935e978c2f7a5f78ea5f7d6c29b4b455816a817912676fa9aa2c38945d84e60b1ab284454a68633fc2cc5501a197ad2701ab262a7021876a49ac5349a8fb68f961c998e920e7ad458dbf67d91b2e17b1ce54767242c14d01d516f01b10c4f31002c12a68ea8db8b6689e8cf13aa02bd6f66718969cdcc6f4f99f81ec666f27a35ad82b654cc1304490d87b6f8f27670fa6dee97c61b2b1a47c7fad284571a3597d66905f960ad612cedc088246c843c08417d9bd853b3910bb201b6d33df8457634e88c4637ed459e387e7add7e4b5f84ed3f49fba91f981108c07d214116da65743f5f37608286a0741739d45bf66c99b9fc556fef680011b4d20ed6645512f9d6dfe059c3de81f9c11fd51bfe088b3a06d6c5ac3d0c05ba89770de6d8962254d327eb25b25bf4127a44e08343fb53ee3d440dc7d9a5124f7b53dfe9a7f0a7a81e040ba1543b98a9cfac3cff9b5c03406d4e6ddb8ed0885409c5ad5389c694b6215c7a21d462797baa6b780fc5332271915e9f4b6be21183a2d5d607c38af1eb731a37b85d032cdf27b50510d26481c0c7cab15c61adf1084a52a412b876b4bd7601431c93f5b486c6dc4b1116d24aacafeef6b0dfbb42ee5de2a18417df2b1f4cd789f3b0b96addf69419ecda8f1e1e5d17f9a7e4c59b919c4f71fc919a1dbf74a945c2b5417f2a3965dae7fc180c091cf236711686672e35df08d72e470f5939ffe40b24cbbf55221d4f0d008d44069009ead1456df4752cf31cdb473a5d2fc6c0c7dfad3491f6c636d37154dcbc98f429363520f438d8df495b09911751b35ac7bd9f6fd6c2e1730640e129d146213c22927ad64e33fa02a07bedcdd455382ae6106580855e2d4bdf87489ece1faa5f39eea097cefd1c3f33b0505d26e4ce9ad6b246d19fde3d48f3f0ef8196fb0b9ed5c23ad1d3a7c6a45c5095c662fa9e5a555dc0d63605ccfec7e456f333939a04dd267030631206f6c88e586048d276bf557d9f8c6a21cbd72cf54c86d44f9190d64157bf200904d6145a7fde54c4cca1136cc5bae80ea9195348647301958aae0b7060edd08947250cea310132b0e27222eb971e78b354efbe03745c6b4f51d6d4d738bfb5d77157d9f18d06460479ee1d5022bf8b0b2df3a6d19b26a7be4b6e0fbc71"}, 0x418, 0x3f}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "ff87983259a89643e6026d374c16343b08e4c6ab4df24634dc46e8598e39df4f5d219db19164be6395bf57b4a4dec6e975a4e22da90399c0aac3647d1893864ccabc783308fd016a6293299d6272e99c16fd5e257ea3204bf1a2c052840a1455b6554e30331f36a644b886850704c672571710bb5e2b688b4cd1a4eb18a650faeedf625d0fd05d21ad97ac2c399a1734ba29a8b99cc117fa25a294a4242839d5d20249cda7af35a83e828fbde6d54bcbb44060fc5780"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048080}, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001700)={{@local, 0x5}, 0x0, 0x2, 0x4}) 09:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) (fail_nth: 1) 09:08:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0x21, 0x6, 0xf1, 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="02002bbd700009db32eb21910000"], 0x14}}, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x4, 0x21, 0x6, 0xf1, 0x0}) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="02002bbd700009db32eb21910000"], 0x14}}, 0x1) (async) 09:08:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x2, 0x3, 0x9) connect$can_bcm(r1, &(0x7f0000000000), 0xa) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:46 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) [ 2650.069529] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2650.069534] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.069539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.069545] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 09:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1f, 0x18, 0x166, &(0x7f0000000240)}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) 09:08:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000000)={&(0x7f00000000c0)=[0x0, 0x9, 0xff, 0x9, 0x80000001, 0x7, 0xfff, 0x5, 0x3, 0xca52, 0x4, 0x80000001, 0x0, 0x4, 0x100, 0x9, 0x9, 0x3f, 0x7fff, 0x1, 0x2, 0xff, 0x80000000, 0xff, 0x4, 0x2, 0x1c, 0x100, 0x9, 0xce5, 0x80, 0x3, 0x6, 0x5, 0x80, 0x70e8, 0x8, 0x7ff, 0x7, 0x0, 0x3, 0x7, 0x8001, 0x200, 0xffffff01, 0x40, 0x100, 0x6, 0x5e6c, 0x401, 0xc41, 0x3, 0xd2, 0xffff, 0x7fff, 0x2, 0x101, 0x8, 0x0, 0x0, 0xfffffffe, 0x1, 0x3, 0x3f, 0x3c, 0x200, 0x4, 0x40, 0x80000000, 0x401, 0x8000, 0x0, 0x62, 0x5, 0x9, 0x248, 0x6, 0x1, 0x20, 0x0, 0x0, 0x7, 0x7fffffff, 0x7b8, 0xfffffff7, 0x81, 0x8000, 0x63ad, 0x8, 0x46bf1597, 0x5, 0x3ff, 0xfffff21e, 0x8, 0x6, 0x0, 0x3, 0x2ed, 0x1, 0x1, 0x0, 0xfffffffb, 0x58, 0x8, 0x1ff, 0x1, 0x7, 0xfff, 0x0, 0x1000, 0x6, 0x2, 0x1, 0xfffffffb, 0xc47, 0x1, 0x0, 0x3, 0x6, 0x2, 0xffff, 0x7f, 0x3f, 0x3f, 0x4, 0x0, 0x6ee, 0x6, 0x7, 0x4, 0x2, 0x7855b626, 0x7fffffff, 0xfffffffd, 0x1000000, 0x4, 0x1, 0x1, 0xd0, 0x8, 0x3, 0x2, 0x4, 0x401, 0x7f, 0xfffff001, 0x72, 0x9, 0x101, 0x4, 0x8, 0x5, 0x7ff, 0xfffffff9, 0x9, 0x6, 0x20, 0x8, 0x80800000, 0x1, 0x4, 0xbb4f, 0xea, 0xf041, 0x1, 0x3, 0x0, 0xfff, 0x3, 0x2, 0x4, 0x3ff, 0x54, 0x5, 0x3, 0x2d0, 0x1, 0x0, 0x1, 0x8e78, 0x0, 0x7, 0x8, 0x73, 0x1, 0x9, 0xffff, 0x8, 0x3ff, 0x7fff, 0x8, 0x9, 0x100, 0x1f, 0x3f, 0x0, 0x4d59, 0x1000, 0x8, 0x9, 0xffffffff, 0x6, 0x3, 0x7bc, 0x3, 0x6, 0xa6a, 0x4, 0xfffffe00, 0x0, 0x6, 0x5, 0x77, 0x20, 0x40, 0x8, 0x3, 0xfffffff8, 0xd, 0xb017, 0x7, 0x4, 0x1, 0x24, 0xce5, 0xffffff91, 0x0, 0x1b4, 0x3, 0xb7, 0x5, 0x9, 0x1735, 0x1, 0x3, 0x20, 0x401, 0x6, 0x0, 0xc509, 0x4, 0x1, 0x1, 0x9, 0x3, 0x400, 0x8, 0x1ff, 0x6a9, 0x5, 0x20, 0xa35, 0x800, 0x7, 0x8f3147ec, 0x1, 0x0, 0x2, 0x401, 0x1, 0x1, 0x2, 0x8, 0x8, 0x5, 0x4, 0x5, 0x9, 0x4, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0x0, 0x9, 0xa1f2, 0x1, 0xd6, 0xa, 0x101, 0x6, 0x0, 0xffffff36, 0xfffffc01, 0x0, 0x2, 0x3, 0x0, 0x8, 0x6, 0x8001, 0xbc, 0x9, 0x5, 0x6, 0x5, 0x0, 0xff800000, 0x8, 0xe0, 0x100, 0x5db3, 0x0, 0x2, 0x9, 0x7, 0x80000000, 0x291, 0x3ff, 0x5, 0x4, 0x8, 0x80, 0x81, 0x8d5, 0x8, 0x3ff, 0x6, 0x3, 0x4, 0x786, 0x2, 0x10001, 0xfffff000, 0x3, 0x53f, 0xfffffff7, 0x8, 0x8a5, 0x0, 0x1, 0x3, 0x0, 0x4, 0xcbd, 0x7, 0x0, 0xb41, 0x0, 0x161c, 0x7e48da41, 0x3a, 0x18, 0xfffff000, 0x347, 0x4, 0x40, 0xca1, 0x7, 0x9, 0x8, 0x9, 0x7000, 0x9, 0x3f, 0x7fff, 0x63f, 0x101, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x6, 0x7, 0xf39, 0x10001, 0x6, 0x1f31e61d, 0x0, 0x1, 0xffffff81, 0x7fff, 0x4, 0x8e, 0x4, 0x401, 0xb3, 0x4, 0x2, 0x5, 0x2, 0x5, 0x9cc, 0xa0, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x52, 0x96db, 0xc2, 0x9, 0x7, 0xae1, 0x2, 0xdc, 0x8, 0x0, 0x1, 0xed35, 0xe8, 0x8, 0x5, 0x80000001, 0x0, 0x6, 0x1, 0x4, 0xff, 0xffff7fff, 0x400, 0x1, 0x401, 0xdf, 0x4, 0x1, 0x7433, 0x7, 0x80000001, 0xff, 0x0, 0x6, 0x4, 0x3f, 0xffda, 0x639, 0x2, 0x0, 0x8, 0x5e7db7cc, 0x6, 0xb5, 0x2, 0x2e01, 0x1, 0x80000000, 0x7ff, 0x400, 0x400, 0x2f94, 0x1, 0x5c6e, 0x4, 0x2, 0x7, 0xa358, 0x4, 0x7, 0x0, 0x4, 0x7, 0x800, 0x3, 0x1000, 0x1, 0x2d8, 0x4, 0x3, 0x9, 0x4, 0x5ca23799, 0x9, 0x4, 0x3, 0x3ff, 0x2, 0x9, 0x80000000, 0x1, 0x10001, 0x401, 0x4, 0x1, 0x3, 0xfffffffe, 0xcd, 0x0, 0x80, 0x2, 0x3, 0xffff, 0x7f, 0x9, 0x1, 0x7ff, 0x7, 0x8, 0x1ff, 0x400, 0x4, 0x1, 0x575, 0xa3, 0x8001, 0x1f, 0x80, 0x7, 0x7, 0xcd36, 0x80000001, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x400080, 0xffff, 0x1, 0x7, 0x80000000, 0x1f, 0x1, 0x72, 0x5, 0x8, 0x400, 0x6, 0x8000, 0x1, 0x7, 0x1, 0x3ff, 0x5, 0x101, 0x0, 0x1, 0x3f, 0x5156, 0x4, 0x40, 0x3, 0x7, 0x8, 0x80000001, 0x6506, 0x1, 0xfffffbff, 0x3, 0x200, 0x5, 0x4, 0x7ff, 0x3f, 0x7, 0xde, 0x0, 0xff, 0x400, 0x0, 0x4, 0x1000, 0x6, 0x30, 0x6, 0x1, 0x1f, 0x6, 0x7, 0x401, 0x5, 0x9, 0x8, 0x0, 0x7fffffff, 0x2d93bc31, 0x7fffffff, 0x3, 0x6, 0x80, 0x15ed, 0x1666, 0xb7, 0x2, 0x100, 0x6, 0x6, 0x8000, 0x1000, 0xfffffffd, 0xfffffffc, 0x3, 0x4, 0x1, 0x45, 0x7, 0x8, 0x0, 0xf90, 0x3, 0x7, 0x8, 0xacf, 0xb7f0, 0x3, 0xed11, 0xfffffffa, 0x3b9, 0x80, 0x1ff, 0x1, 0x10000, 0x8, 0x9, 0x5, 0x1, 0x1, 0x7, 0x4, 0x0, 0x0, 0x87, 0x1, 0x7, 0x9, 0x0, 0x9, 0xffffff00, 0x800, 0xffffffff, 0x8001, 0x2, 0x0, 0x1, 0x6, 0x80, 0x8, 0x5, 0x9, 0x9, 0x0, 0x9, 0x4, 0x2, 0x8, 0x4cc, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0x1000, 0xfffffff7, 0x4, 0x3f, 0x8, 0x7, 0x6, 0xa084, 0x8, 0x2, 0x1c, 0x101, 0x3, 0x7, 0x8001, 0x7, 0x401, 0x7ff, 0x61, 0x2, 0x7fffffff, 0x7ff, 0x5, 0x7, 0x80, 0x8, 0x6, 0x80000001, 0x2, 0x3, 0x4, 0x7fff, 0x513, 0x3, 0xfffffff7, 0x2, 0x80000001, 0x1, 0xce4, 0x7, 0x1, 0x8c0, 0x10001, 0x0, 0x0, 0xea22, 0x6, 0x9b03, 0x80000001, 0xffffcfa0, 0x10000, 0x2bfb, 0x4, 0x5, 0x200, 0x1, 0x8, 0x8, 0x9, 0x7, 0x4, 0x8000, 0x66, 0x1, 0x6b, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3a, 0x4e0e, 0x3, 0x2, 0x7ff, 0x2, 0x0, 0x8, 0x8b46, 0x3ff, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x9, 0x9, 0x6, 0xffff7fff, 0x2c7, 0x6, 0x5, 0x9, 0xbcb0, 0xff, 0x1, 0x8, 0x0, 0x80000001, 0x9, 0x0, 0xfffffff9, 0x609664be, 0xff, 0x32cf, 0xffffff7f, 0x9, 0x2, 0x1000, 0x8, 0x7fffffff, 0x38, 0x5db9, 0x3f, 0x3, 0x8, 0x9, 0x9, 0xfffffffc, 0x74b4, 0x3, 0x9, 0x196, 0x80000000, 0x3f3b, 0x3ff, 0x5, 0xff, 0xfffffffa, 0x8, 0x60cb, 0x6, 0x7fffffff, 0x8000, 0x2, 0x7, 0x10000, 0xffffffff, 0x7b345b2b, 0x1000, 0x80000000, 0xf12, 0x7f, 0xfffffffc, 0x67e3e890, 0x2, 0x3ff, 0x6, 0xccec000, 0x2, 0x18901650, 0x5, 0x5, 0x2, 0x1, 0x4f, 0x1000, 0x732, 0x0, 0x401, 0x0, 0x10000, 0x6, 0x7, 0x7, 0x8, 0x2, 0x6, 0x5, 0x8001, 0xc00000, 0x9, 0x4, 0x1, 0x1, 0x0, 0x7fff, 0x9, 0xfffffff9, 0xffffffff, 0x72d, 0x42d5, 0x1, 0x0, 0x477, 0x5, 0x4, 0x7, 0x7fff, 0x7, 0x7fffffff, 0x7, 0xfffeffff, 0x800, 0x506, 0x7fffffff, 0x3, 0x10001, 0x8000, 0x1, 0x78, 0x101, 0x0, 0x3, 0x0, 0x54e, 0x3, 0x20, 0x3, 0x1, 0x5, 0xfdff, 0xd6, 0xb66, 0x20, 0x7fffffff, 0x0, 0x8, 0x3, 0x4, 0x2, 0x8, 0x10000, 0x0, 0x64d, 0x1, 0x800, 0x80000000, 0x7178, 0x100, 0x5, 0xbe, 0x5, 0x6, 0x5, 0x80000001, 0x3, 0x3, 0x20, 0x400, 0x95, 0x4, 0x80000000, 0xff, 0x6b8, 0x101, 0x9, 0xffff8001, 0x7fffffff, 0x1, 0x9, 0x1ff, 0x3, 0x8d24, 0x1, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x7fffffff, 0xfffff493, 0x104eb1e7, 0x3112, 0x7, 0x7, 0x9, 0x1, 0xffffffff, 0x40000000, 0xed6a, 0x9dd, 0x9f9, 0x8000, 0x1, 0x4, 0x7, 0x630, 0x1c00, 0x7, 0x4, 0x3, 0x400, 0x0, 0x4, 0x1, 0x5, 0x7, 0x3, 0x100, 0x81, 0x7, 0x9, 0x7, 0x800, 0x2, 0x5, 0x9, 0x0, 0x6, 0x6, 0xbe0, 0xfffffffc, 0x101, 0x80000000, 0x8, 0x80000001, 0x4, 0x0, 0xd1d, 0xfffffffa, 0x3, 0x5, 0xfff, 0x9, 0x8, 0x0, 0x4, 0x8, 0xb231, 0x80000000, 0x7839, 0x3, 0x1, 0x3, 0x2, 0xffff, 0x3f, 0x10001, 0x4, 0x7fff, 0x400, 0x0, 0x4, 0x47, 0x40, 0x9, 0x10001, 0x0, 0x7ff, 0xffffffff, 0x20, 0x101, 0xffff, 0xffff186f, 0x7, 0xb36, 0x6, 0x2, 0x9, 0x7ff, 0x200, 0x3, 0x8001, 0x80, 0x1b18, 0x3, 0x2, 0xfffffe00, 0x1558, 0x81e2, 0x6, 0x1, 0x2, 0x2, 0xffff, 0x5, 0xfffffffe, 0x3, 0x5, 0x1, 0x7fffffff, 0x27, 0xfc7b8000, 0x9, 0x101], 0x2, 0x400, 0x7}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f00000010c0)={{@local, 0x9}, {@my=0x1, 0x3}, 0x400, "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"}, 0x418, 0x3f}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "ff87983259a89643e6026d374c16343b08e4c6ab4df24634dc46e8598e39df4f5d219db19164be6395bf57b4a4dec6e975a4e22da90399c0aac3647d1893864ccabc783308fd016a6293299d6272e99c16fd5e257ea3204bf1a2c052840a1455b6554e30331f36a644b886850704c672571710bb5e2b688b4cd1a4eb18a650faeedf625d0fd05d21ad97ac2c399a1734ba29a8b99cc117fa25a294a4242839d5d20249cda7af35a83e828fbde6d54bcbb44060fc5780"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048080}, 0x10) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001700)={{@local, 0x5}, 0x0, 0x2, 0x4}) pipe(&(0x7f0000000080)) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000000)={&(0x7f00000000c0)=[0x0, 0x9, 0xff, 0x9, 0x80000001, 0x7, 0xfff, 0x5, 0x3, 0xca52, 0x4, 0x80000001, 0x0, 0x4, 0x100, 0x9, 0x9, 0x3f, 0x7fff, 0x1, 0x2, 0xff, 0x80000000, 0xff, 0x4, 0x2, 0x1c, 0x100, 0x9, 0xce5, 0x80, 0x3, 0x6, 0x5, 0x80, 0x70e8, 0x8, 0x7ff, 0x7, 0x0, 0x3, 0x7, 0x8001, 0x200, 0xffffff01, 0x40, 0x100, 0x6, 0x5e6c, 0x401, 0xc41, 0x3, 0xd2, 0xffff, 0x7fff, 0x2, 0x101, 0x8, 0x0, 0x0, 0xfffffffe, 0x1, 0x3, 0x3f, 0x3c, 0x200, 0x4, 0x40, 0x80000000, 0x401, 0x8000, 0x0, 0x62, 0x5, 0x9, 0x248, 0x6, 0x1, 0x20, 0x0, 0x0, 0x7, 0x7fffffff, 0x7b8, 0xfffffff7, 0x81, 0x8000, 0x63ad, 0x8, 0x46bf1597, 0x5, 0x3ff, 0xfffff21e, 0x8, 0x6, 0x0, 0x3, 0x2ed, 0x1, 0x1, 0x0, 0xfffffffb, 0x58, 0x8, 0x1ff, 0x1, 0x7, 0xfff, 0x0, 0x1000, 0x6, 0x2, 0x1, 0xfffffffb, 0xc47, 0x1, 0x0, 0x3, 0x6, 0x2, 0xffff, 0x7f, 0x3f, 0x3f, 0x4, 0x0, 0x6ee, 0x6, 0x7, 0x4, 0x2, 0x7855b626, 0x7fffffff, 0xfffffffd, 0x1000000, 0x4, 0x1, 0x1, 0xd0, 0x8, 0x3, 0x2, 0x4, 0x401, 0x7f, 0xfffff001, 0x72, 0x9, 0x101, 0x4, 0x8, 0x5, 0x7ff, 0xfffffff9, 0x9, 0x6, 0x20, 0x8, 0x80800000, 0x1, 0x4, 0xbb4f, 0xea, 0xf041, 0x1, 0x3, 0x0, 0xfff, 0x3, 0x2, 0x4, 0x3ff, 0x54, 0x5, 0x3, 0x2d0, 0x1, 0x0, 0x1, 0x8e78, 0x0, 0x7, 0x8, 0x73, 0x1, 0x9, 0xffff, 0x8, 0x3ff, 0x7fff, 0x8, 0x9, 0x100, 0x1f, 0x3f, 0x0, 0x4d59, 0x1000, 0x8, 0x9, 0xffffffff, 0x6, 0x3, 0x7bc, 0x3, 0x6, 0xa6a, 0x4, 0xfffffe00, 0x0, 0x6, 0x5, 0x77, 0x20, 0x40, 0x8, 0x3, 0xfffffff8, 0xd, 0xb017, 0x7, 0x4, 0x1, 0x24, 0xce5, 0xffffff91, 0x0, 0x1b4, 0x3, 0xb7, 0x5, 0x9, 0x1735, 0x1, 0x3, 0x20, 0x401, 0x6, 0x0, 0xc509, 0x4, 0x1, 0x1, 0x9, 0x3, 0x400, 0x8, 0x1ff, 0x6a9, 0x5, 0x20, 0xa35, 0x800, 0x7, 0x8f3147ec, 0x1, 0x0, 0x2, 0x401, 0x1, 0x1, 0x2, 0x8, 0x8, 0x5, 0x4, 0x5, 0x9, 0x4, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0x0, 0x9, 0xa1f2, 0x1, 0xd6, 0xa, 0x101, 0x6, 0x0, 0xffffff36, 0xfffffc01, 0x0, 0x2, 0x3, 0x0, 0x8, 0x6, 0x8001, 0xbc, 0x9, 0x5, 0x6, 0x5, 0x0, 0xff800000, 0x8, 0xe0, 0x100, 0x5db3, 0x0, 0x2, 0x9, 0x7, 0x80000000, 0x291, 0x3ff, 0x5, 0x4, 0x8, 0x80, 0x81, 0x8d5, 0x8, 0x3ff, 0x6, 0x3, 0x4, 0x786, 0x2, 0x10001, 0xfffff000, 0x3, 0x53f, 0xfffffff7, 0x8, 0x8a5, 0x0, 0x1, 0x3, 0x0, 0x4, 0xcbd, 0x7, 0x0, 0xb41, 0x0, 0x161c, 0x7e48da41, 0x3a, 0x18, 0xfffff000, 0x347, 0x4, 0x40, 0xca1, 0x7, 0x9, 0x8, 0x9, 0x7000, 0x9, 0x3f, 0x7fff, 0x63f, 0x101, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x6, 0x7, 0xf39, 0x10001, 0x6, 0x1f31e61d, 0x0, 0x1, 0xffffff81, 0x7fff, 0x4, 0x8e, 0x4, 0x401, 0xb3, 0x4, 0x2, 0x5, 0x2, 0x5, 0x9cc, 0xa0, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x52, 0x96db, 0xc2, 0x9, 0x7, 0xae1, 0x2, 0xdc, 0x8, 0x0, 0x1, 0xed35, 0xe8, 0x8, 0x5, 0x80000001, 0x0, 0x6, 0x1, 0x4, 0xff, 0xffff7fff, 0x400, 0x1, 0x401, 0xdf, 0x4, 0x1, 0x7433, 0x7, 0x80000001, 0xff, 0x0, 0x6, 0x4, 0x3f, 0xffda, 0x639, 0x2, 0x0, 0x8, 0x5e7db7cc, 0x6, 0xb5, 0x2, 0x2e01, 0x1, 0x80000000, 0x7ff, 0x400, 0x400, 0x2f94, 0x1, 0x5c6e, 0x4, 0x2, 0x7, 0xa358, 0x4, 0x7, 0x0, 0x4, 0x7, 0x800, 0x3, 0x1000, 0x1, 0x2d8, 0x4, 0x3, 0x9, 0x4, 0x5ca23799, 0x9, 0x4, 0x3, 0x3ff, 0x2, 0x9, 0x80000000, 0x1, 0x10001, 0x401, 0x4, 0x1, 0x3, 0xfffffffe, 0xcd, 0x0, 0x80, 0x2, 0x3, 0xffff, 0x7f, 0x9, 0x1, 0x7ff, 0x7, 0x8, 0x1ff, 0x400, 0x4, 0x1, 0x575, 0xa3, 0x8001, 0x1f, 0x80, 0x7, 0x7, 0xcd36, 0x80000001, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x400080, 0xffff, 0x1, 0x7, 0x80000000, 0x1f, 0x1, 0x72, 0x5, 0x8, 0x400, 0x6, 0x8000, 0x1, 0x7, 0x1, 0x3ff, 0x5, 0x101, 0x0, 0x1, 0x3f, 0x5156, 0x4, 0x40, 0x3, 0x7, 0x8, 0x80000001, 0x6506, 0x1, 0xfffffbff, 0x3, 0x200, 0x5, 0x4, 0x7ff, 0x3f, 0x7, 0xde, 0x0, 0xff, 0x400, 0x0, 0x4, 0x1000, 0x6, 0x30, 0x6, 0x1, 0x1f, 0x6, 0x7, 0x401, 0x5, 0x9, 0x8, 0x0, 0x7fffffff, 0x2d93bc31, 0x7fffffff, 0x3, 0x6, 0x80, 0x15ed, 0x1666, 0xb7, 0x2, 0x100, 0x6, 0x6, 0x8000, 0x1000, 0xfffffffd, 0xfffffffc, 0x3, 0x4, 0x1, 0x45, 0x7, 0x8, 0x0, 0xf90, 0x3, 0x7, 0x8, 0xacf, 0xb7f0, 0x3, 0xed11, 0xfffffffa, 0x3b9, 0x80, 0x1ff, 0x1, 0x10000, 0x8, 0x9, 0x5, 0x1, 0x1, 0x7, 0x4, 0x0, 0x0, 0x87, 0x1, 0x7, 0x9, 0x0, 0x9, 0xffffff00, 0x800, 0xffffffff, 0x8001, 0x2, 0x0, 0x1, 0x6, 0x80, 0x8, 0x5, 0x9, 0x9, 0x0, 0x9, 0x4, 0x2, 0x8, 0x4cc, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0x1000, 0xfffffff7, 0x4, 0x3f, 0x8, 0x7, 0x6, 0xa084, 0x8, 0x2, 0x1c, 0x101, 0x3, 0x7, 0x8001, 0x7, 0x401, 0x7ff, 0x61, 0x2, 0x7fffffff, 0x7ff, 0x5, 0x7, 0x80, 0x8, 0x6, 0x80000001, 0x2, 0x3, 0x4, 0x7fff, 0x513, 0x3, 0xfffffff7, 0x2, 0x80000001, 0x1, 0xce4, 0x7, 0x1, 0x8c0, 0x10001, 0x0, 0x0, 0xea22, 0x6, 0x9b03, 0x80000001, 0xffffcfa0, 0x10000, 0x2bfb, 0x4, 0x5, 0x200, 0x1, 0x8, 0x8, 0x9, 0x7, 0x4, 0x8000, 0x66, 0x1, 0x6b, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3a, 0x4e0e, 0x3, 0x2, 0x7ff, 0x2, 0x0, 0x8, 0x8b46, 0x3ff, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x9, 0x9, 0x6, 0xffff7fff, 0x2c7, 0x6, 0x5, 0x9, 0xbcb0, 0xff, 0x1, 0x8, 0x0, 0x80000001, 0x9, 0x0, 0xfffffff9, 0x609664be, 0xff, 0x32cf, 0xffffff7f, 0x9, 0x2, 0x1000, 0x8, 0x7fffffff, 0x38, 0x5db9, 0x3f, 0x3, 0x8, 0x9, 0x9, 0xfffffffc, 0x74b4, 0x3, 0x9, 0x196, 0x80000000, 0x3f3b, 0x3ff, 0x5, 0xff, 0xfffffffa, 0x8, 0x60cb, 0x6, 0x7fffffff, 0x8000, 0x2, 0x7, 0x10000, 0xffffffff, 0x7b345b2b, 0x1000, 0x80000000, 0xf12, 0x7f, 0xfffffffc, 0x67e3e890, 0x2, 0x3ff, 0x6, 0xccec000, 0x2, 0x18901650, 0x5, 0x5, 0x2, 0x1, 0x4f, 0x1000, 0x732, 0x0, 0x401, 0x0, 0x10000, 0x6, 0x7, 0x7, 0x8, 0x2, 0x6, 0x5, 0x8001, 0xc00000, 0x9, 0x4, 0x1, 0x1, 0x0, 0x7fff, 0x9, 0xfffffff9, 0xffffffff, 0x72d, 0x42d5, 0x1, 0x0, 0x477, 0x5, 0x4, 0x7, 0x7fff, 0x7, 0x7fffffff, 0x7, 0xfffeffff, 0x800, 0x506, 0x7fffffff, 0x3, 0x10001, 0x8000, 0x1, 0x78, 0x101, 0x0, 0x3, 0x0, 0x54e, 0x3, 0x20, 0x3, 0x1, 0x5, 0xfdff, 0xd6, 0xb66, 0x20, 0x7fffffff, 0x0, 0x8, 0x3, 0x4, 0x2, 0x8, 0x10000, 0x0, 0x64d, 0x1, 0x800, 0x80000000, 0x7178, 0x100, 0x5, 0xbe, 0x5, 0x6, 0x5, 0x80000001, 0x3, 0x3, 0x20, 0x400, 0x95, 0x4, 0x80000000, 0xff, 0x6b8, 0x101, 0x9, 0xffff8001, 0x7fffffff, 0x1, 0x9, 0x1ff, 0x3, 0x8d24, 0x1, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x7fffffff, 0xfffff493, 0x104eb1e7, 0x3112, 0x7, 0x7, 0x9, 0x1, 0xffffffff, 0x40000000, 0xed6a, 0x9dd, 0x9f9, 0x8000, 0x1, 0x4, 0x7, 0x630, 0x1c00, 0x7, 0x4, 0x3, 0x400, 0x0, 0x4, 0x1, 0x5, 0x7, 0x3, 0x100, 0x81, 0x7, 0x9, 0x7, 0x800, 0x2, 0x5, 0x9, 0x0, 0x6, 0x6, 0xbe0, 0xfffffffc, 0x101, 0x80000000, 0x8, 0x80000001, 0x4, 0x0, 0xd1d, 0xfffffffa, 0x3, 0x5, 0xfff, 0x9, 0x8, 0x0, 0x4, 0x8, 0xb231, 0x80000000, 0x7839, 0x3, 0x1, 0x3, 0x2, 0xffff, 0x3f, 0x10001, 0x4, 0x7fff, 0x400, 0x0, 0x4, 0x47, 0x40, 0x9, 0x10001, 0x0, 0x7ff, 0xffffffff, 0x20, 0x101, 0xffff, 0xffff186f, 0x7, 0xb36, 0x6, 0x2, 0x9, 0x7ff, 0x200, 0x3, 0x8001, 0x80, 0x1b18, 0x3, 0x2, 0xfffffe00, 0x1558, 0x81e2, 0x6, 0x1, 0x2, 0x2, 0xffff, 0x5, 0xfffffffe, 0x3, 0x5, 0x1, 0x7fffffff, 0x27, 0xfc7b8000, 0x9, 0x101], 0x2, 0x400, 0x7}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f00000010c0)={{@local, 0x9}, {@my=0x1, 0x3}, 0x400, "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"}, 0x418, 0x3f}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "ff87983259a89643e6026d374c16343b08e4c6ab4df24634dc46e8598e39df4f5d219db19164be6395bf57b4a4dec6e975a4e22da90399c0aac3647d1893864ccabc783308fd016a6293299d6272e99c16fd5e257ea3204bf1a2c052840a1455b6554e30331f36a644b886850704c672571710bb5e2b688b4cd1a4eb18a650faeedf625d0fd05d21ad97ac2c399a1734ba29a8b99cc117fa25a294a4242839d5d20249cda7af35a83e828fbde6d54bcbb44060fc5780"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048080}, 0x10) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001700)={{@local, 0x5}, 0x0, 0x2, 0x4}) (async) [ 2650.475033] FAULT_INJECTION: forcing a failure. [ 2650.475033] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.496039] CPU: 1 PID: 16110 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2650.503965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 09:08:46 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000000)={&(0x7f00000000c0)=[0x0, 0x9, 0xff, 0x9, 0x80000001, 0x7, 0xfff, 0x5, 0x3, 0xca52, 0x4, 0x80000001, 0x0, 0x4, 0x100, 0x9, 0x9, 0x3f, 0x7fff, 0x1, 0x2, 0xff, 0x80000000, 0xff, 0x4, 0x2, 0x1c, 0x100, 0x9, 0xce5, 0x80, 0x3, 0x6, 0x5, 0x80, 0x70e8, 0x8, 0x7ff, 0x7, 0x0, 0x3, 0x7, 0x8001, 0x200, 0xffffff01, 0x40, 0x100, 0x6, 0x5e6c, 0x401, 0xc41, 0x3, 0xd2, 0xffff, 0x7fff, 0x2, 0x101, 0x8, 0x0, 0x0, 0xfffffffe, 0x1, 0x3, 0x3f, 0x3c, 0x200, 0x4, 0x40, 0x80000000, 0x401, 0x8000, 0x0, 0x62, 0x5, 0x9, 0x248, 0x6, 0x1, 0x20, 0x0, 0x0, 0x7, 0x7fffffff, 0x7b8, 0xfffffff7, 0x81, 0x8000, 0x63ad, 0x8, 0x46bf1597, 0x5, 0x3ff, 0xfffff21e, 0x8, 0x6, 0x0, 0x3, 0x2ed, 0x1, 0x1, 0x0, 0xfffffffb, 0x58, 0x8, 0x1ff, 0x1, 0x7, 0xfff, 0x0, 0x1000, 0x6, 0x2, 0x1, 0xfffffffb, 0xc47, 0x1, 0x0, 0x3, 0x6, 0x2, 0xffff, 0x7f, 0x3f, 0x3f, 0x4, 0x0, 0x6ee, 0x6, 0x7, 0x4, 0x2, 0x7855b626, 0x7fffffff, 0xfffffffd, 0x1000000, 0x4, 0x1, 0x1, 0xd0, 0x8, 0x3, 0x2, 0x4, 0x401, 0x7f, 0xfffff001, 0x72, 0x9, 0x101, 0x4, 0x8, 0x5, 0x7ff, 0xfffffff9, 0x9, 0x6, 0x20, 0x8, 0x80800000, 0x1, 0x4, 0xbb4f, 0xea, 0xf041, 0x1, 0x3, 0x0, 0xfff, 0x3, 0x2, 0x4, 0x3ff, 0x54, 0x5, 0x3, 0x2d0, 0x1, 0x0, 0x1, 0x8e78, 0x0, 0x7, 0x8, 0x73, 0x1, 0x9, 0xffff, 0x8, 0x3ff, 0x7fff, 0x8, 0x9, 0x100, 0x1f, 0x3f, 0x0, 0x4d59, 0x1000, 0x8, 0x9, 0xffffffff, 0x6, 0x3, 0x7bc, 0x3, 0x6, 0xa6a, 0x4, 0xfffffe00, 0x0, 0x6, 0x5, 0x77, 0x20, 0x40, 0x8, 0x3, 0xfffffff8, 0xd, 0xb017, 0x7, 0x4, 0x1, 0x24, 0xce5, 0xffffff91, 0x0, 0x1b4, 0x3, 0xb7, 0x5, 0x9, 0x1735, 0x1, 0x3, 0x20, 0x401, 0x6, 0x0, 0xc509, 0x4, 0x1, 0x1, 0x9, 0x3, 0x400, 0x8, 0x1ff, 0x6a9, 0x5, 0x20, 0xa35, 0x800, 0x7, 0x8f3147ec, 0x1, 0x0, 0x2, 0x401, 0x1, 0x1, 0x2, 0x8, 0x8, 0x5, 0x4, 0x5, 0x9, 0x4, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0x0, 0x9, 0xa1f2, 0x1, 0xd6, 0xa, 0x101, 0x6, 0x0, 0xffffff36, 0xfffffc01, 0x0, 0x2, 0x3, 0x0, 0x8, 0x6, 0x8001, 0xbc, 0x9, 0x5, 0x6, 0x5, 0x0, 0xff800000, 0x8, 0xe0, 0x100, 0x5db3, 0x0, 0x2, 0x9, 0x7, 0x80000000, 0x291, 0x3ff, 0x5, 0x4, 0x8, 0x80, 0x81, 0x8d5, 0x8, 0x3ff, 0x6, 0x3, 0x4, 0x786, 0x2, 0x10001, 0xfffff000, 0x3, 0x53f, 0xfffffff7, 0x8, 0x8a5, 0x0, 0x1, 0x3, 0x0, 0x4, 0xcbd, 0x7, 0x0, 0xb41, 0x0, 0x161c, 0x7e48da41, 0x3a, 0x18, 0xfffff000, 0x347, 0x4, 0x40, 0xca1, 0x7, 0x9, 0x8, 0x9, 0x7000, 0x9, 0x3f, 0x7fff, 0x63f, 0x101, 0x0, 0x1, 0x0, 0x7ff, 0x0, 0x6, 0x7, 0xf39, 0x10001, 0x6, 0x1f31e61d, 0x0, 0x1, 0xffffff81, 0x7fff, 0x4, 0x8e, 0x4, 0x401, 0xb3, 0x4, 0x2, 0x5, 0x2, 0x5, 0x9cc, 0xa0, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x52, 0x96db, 0xc2, 0x9, 0x7, 0xae1, 0x2, 0xdc, 0x8, 0x0, 0x1, 0xed35, 0xe8, 0x8, 0x5, 0x80000001, 0x0, 0x6, 0x1, 0x4, 0xff, 0xffff7fff, 0x400, 0x1, 0x401, 0xdf, 0x4, 0x1, 0x7433, 0x7, 0x80000001, 0xff, 0x0, 0x6, 0x4, 0x3f, 0xffda, 0x639, 0x2, 0x0, 0x8, 0x5e7db7cc, 0x6, 0xb5, 0x2, 0x2e01, 0x1, 0x80000000, 0x7ff, 0x400, 0x400, 0x2f94, 0x1, 0x5c6e, 0x4, 0x2, 0x7, 0xa358, 0x4, 0x7, 0x0, 0x4, 0x7, 0x800, 0x3, 0x1000, 0x1, 0x2d8, 0x4, 0x3, 0x9, 0x4, 0x5ca23799, 0x9, 0x4, 0x3, 0x3ff, 0x2, 0x9, 0x80000000, 0x1, 0x10001, 0x401, 0x4, 0x1, 0x3, 0xfffffffe, 0xcd, 0x0, 0x80, 0x2, 0x3, 0xffff, 0x7f, 0x9, 0x1, 0x7ff, 0x7, 0x8, 0x1ff, 0x400, 0x4, 0x1, 0x575, 0xa3, 0x8001, 0x1f, 0x80, 0x7, 0x7, 0xcd36, 0x80000001, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x400080, 0xffff, 0x1, 0x7, 0x80000000, 0x1f, 0x1, 0x72, 0x5, 0x8, 0x400, 0x6, 0x8000, 0x1, 0x7, 0x1, 0x3ff, 0x5, 0x101, 0x0, 0x1, 0x3f, 0x5156, 0x4, 0x40, 0x3, 0x7, 0x8, 0x80000001, 0x6506, 0x1, 0xfffffbff, 0x3, 0x200, 0x5, 0x4, 0x7ff, 0x3f, 0x7, 0xde, 0x0, 0xff, 0x400, 0x0, 0x4, 0x1000, 0x6, 0x30, 0x6, 0x1, 0x1f, 0x6, 0x7, 0x401, 0x5, 0x9, 0x8, 0x0, 0x7fffffff, 0x2d93bc31, 0x7fffffff, 0x3, 0x6, 0x80, 0x15ed, 0x1666, 0xb7, 0x2, 0x100, 0x6, 0x6, 0x8000, 0x1000, 0xfffffffd, 0xfffffffc, 0x3, 0x4, 0x1, 0x45, 0x7, 0x8, 0x0, 0xf90, 0x3, 0x7, 0x8, 0xacf, 0xb7f0, 0x3, 0xed11, 0xfffffffa, 0x3b9, 0x80, 0x1ff, 0x1, 0x10000, 0x8, 0x9, 0x5, 0x1, 0x1, 0x7, 0x4, 0x0, 0x0, 0x87, 0x1, 0x7, 0x9, 0x0, 0x9, 0xffffff00, 0x800, 0xffffffff, 0x8001, 0x2, 0x0, 0x1, 0x6, 0x80, 0x8, 0x5, 0x9, 0x9, 0x0, 0x9, 0x4, 0x2, 0x8, 0x4cc, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0x1000, 0xfffffff7, 0x4, 0x3f, 0x8, 0x7, 0x6, 0xa084, 0x8, 0x2, 0x1c, 0x101, 0x3, 0x7, 0x8001, 0x7, 0x401, 0x7ff, 0x61, 0x2, 0x7fffffff, 0x7ff, 0x5, 0x7, 0x80, 0x8, 0x6, 0x80000001, 0x2, 0x3, 0x4, 0x7fff, 0x513, 0x3, 0xfffffff7, 0x2, 0x80000001, 0x1, 0xce4, 0x7, 0x1, 0x8c0, 0x10001, 0x0, 0x0, 0xea22, 0x6, 0x9b03, 0x80000001, 0xffffcfa0, 0x10000, 0x2bfb, 0x4, 0x5, 0x200, 0x1, 0x8, 0x8, 0x9, 0x7, 0x4, 0x8000, 0x66, 0x1, 0x6b, 0x7fff, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3a, 0x4e0e, 0x3, 0x2, 0x7ff, 0x2, 0x0, 0x8, 0x8b46, 0x3ff, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x80000001, 0x9, 0x9, 0x6, 0xffff7fff, 0x2c7, 0x6, 0x5, 0x9, 0xbcb0, 0xff, 0x1, 0x8, 0x0, 0x80000001, 0x9, 0x0, 0xfffffff9, 0x609664be, 0xff, 0x32cf, 0xffffff7f, 0x9, 0x2, 0x1000, 0x8, 0x7fffffff, 0x38, 0x5db9, 0x3f, 0x3, 0x8, 0x9, 0x9, 0xfffffffc, 0x74b4, 0x3, 0x9, 0x196, 0x80000000, 0x3f3b, 0x3ff, 0x5, 0xff, 0xfffffffa, 0x8, 0x60cb, 0x6, 0x7fffffff, 0x8000, 0x2, 0x7, 0x10000, 0xffffffff, 0x7b345b2b, 0x1000, 0x80000000, 0xf12, 0x7f, 0xfffffffc, 0x67e3e890, 0x2, 0x3ff, 0x6, 0xccec000, 0x2, 0x18901650, 0x5, 0x5, 0x2, 0x1, 0x4f, 0x1000, 0x732, 0x0, 0x401, 0x0, 0x10000, 0x6, 0x7, 0x7, 0x8, 0x2, 0x6, 0x5, 0x8001, 0xc00000, 0x9, 0x4, 0x1, 0x1, 0x0, 0x7fff, 0x9, 0xfffffff9, 0xffffffff, 0x72d, 0x42d5, 0x1, 0x0, 0x477, 0x5, 0x4, 0x7, 0x7fff, 0x7, 0x7fffffff, 0x7, 0xfffeffff, 0x800, 0x506, 0x7fffffff, 0x3, 0x10001, 0x8000, 0x1, 0x78, 0x101, 0x0, 0x3, 0x0, 0x54e, 0x3, 0x20, 0x3, 0x1, 0x5, 0xfdff, 0xd6, 0xb66, 0x20, 0x7fffffff, 0x0, 0x8, 0x3, 0x4, 0x2, 0x8, 0x10000, 0x0, 0x64d, 0x1, 0x800, 0x80000000, 0x7178, 0x100, 0x5, 0xbe, 0x5, 0x6, 0x5, 0x80000001, 0x3, 0x3, 0x20, 0x400, 0x95, 0x4, 0x80000000, 0xff, 0x6b8, 0x101, 0x9, 0xffff8001, 0x7fffffff, 0x1, 0x9, 0x1ff, 0x3, 0x8d24, 0x1, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x7fffffff, 0xfffff493, 0x104eb1e7, 0x3112, 0x7, 0x7, 0x9, 0x1, 0xffffffff, 0x40000000, 0xed6a, 0x9dd, 0x9f9, 0x8000, 0x1, 0x4, 0x7, 0x630, 0x1c00, 0x7, 0x4, 0x3, 0x400, 0x0, 0x4, 0x1, 0x5, 0x7, 0x3, 0x100, 0x81, 0x7, 0x9, 0x7, 0x800, 0x2, 0x5, 0x9, 0x0, 0x6, 0x6, 0xbe0, 0xfffffffc, 0x101, 0x80000000, 0x8, 0x80000001, 0x4, 0x0, 0xd1d, 0xfffffffa, 0x3, 0x5, 0xfff, 0x9, 0x8, 0x0, 0x4, 0x8, 0xb231, 0x80000000, 0x7839, 0x3, 0x1, 0x3, 0x2, 0xffff, 0x3f, 0x10001, 0x4, 0x7fff, 0x400, 0x0, 0x4, 0x47, 0x40, 0x9, 0x10001, 0x0, 0x7ff, 0xffffffff, 0x20, 0x101, 0xffff, 0xffff186f, 0x7, 0xb36, 0x6, 0x2, 0x9, 0x7ff, 0x200, 0x3, 0x8001, 0x80, 0x1b18, 0x3, 0x2, 0xfffffe00, 0x1558, 0x81e2, 0x6, 0x1, 0x2, 0x2, 0xffff, 0x5, 0xfffffffe, 0x3, 0x5, 0x1, 0x7fffffff, 0x27, 0xfc7b8000, 0x9, 0x101], 0x2, 0x400, 0x7}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={&(0x7f00000010c0)={{@local, 0x9}, {@my=0x1, 0x3}, 0x400, "a50de1dd0401441c5bbf833e4c7b945585ccd9896c7e15503f927b2f7718188dabe65b948d31f4e1fbf373a6e244950c57d866b74ceae21735065126d9e6e3101a9d8dae4bfe16f382b31bd160efbb0579ba986092285d1a69dbd7f62eb77ef711df26e4a8946af09e59eb18ed9f46e8b6b4db565511697dff2a28eef396330bf1eca915f43232fd052c3c54a38bbaf01901f685f00cac5b636e032576a0550f49fb41dde3cccf16290ed4565f6c8a7891a7fc1dce238bec01402a567a94038d6f34faf86258d1cfb0cd38f935e978c2f7a5f78ea5f7d6c29b4b455816a817912676fa9aa2c38945d84e60b1ab284454a68633fc2cc5501a197ad2701ab262a7021876a49ac5349a8fb68f961c998e920e7ad458dbf67d91b2e17b1ce54767242c14d01d516f01b10c4f31002c12a68ea8db8b6689e8cf13aa02bd6f66718969cdcc6f4f99f81ec666f27a35ad82b654cc1304490d87b6f8f27670fa6dee97c61b2b1a47c7fad284571a3597d66905f960ad612cedc088246c843c08417d9bd853b3910bb201b6d33df8457634e88c4637ed459e387e7add7e4b5f84ed3f49fba91f981108c07d214116da65743f5f37608286a0741739d45bf66c99b9fc556fef680011b4d20ed6645512f9d6dfe059c3de81f9c11fd51bfe088b3a06d6c5ac3d0c05ba89770de6d8962254d327eb25b25bf4127a44e08343fb53ee3d440dc7d9a5124f7b53dfe9a7f0a7a81e040ba1543b98a9cfac3cff9b5c03406d4e6ddb8ed0885409c5ad5389c694b6215c7a21d462797baa6b780fc5332271915e9f4b6be21183a2d5d607c38af1eb731a37b85d032cdf27b50510d26481c0c7cab15c61adf1084a52a412b876b4bd7601431c93f5b486c6dc4b1116d24aacafeef6b0dfbb42ee5de2a18417df2b1f4cd789f3b0b96addf69419ecda8f1e1e5d17f9a7e4c59b919c4f71fc919a1dbf74a945c2b5417f2a3965dae7fc180c091cf236711686672e35df08d72e470f5939ffe40b24cbbf55221d4f0d008d44069009ead1456df4752cf31cdb473a5d2fc6c0c7dfad3491f6c636d37154dcbc98f429363520f438d8df495b09911751b35ac7bd9f6fd6c2e1730640e129d146213c22927ad64e33fa02a07bedcdd455382ae6106580855e2d4bdf87489ece1faa5f39eea097cefd1c3f33b0505d26e4ce9ad6b246d19fde3d48f3f0ef8196fb0b9ed5c23ad1d3a7c6a45c5095c662fa9e5a555dc0d63605ccfec7e456f333939a04dd267030631206f6c88e586048d276bf557d9f8c6a21cbd72cf54c86d44f9190d64157bf200904d6145a7fde54c4cca1136cc5bae80ea9195348647301958aae0b7060edd08947250cea310132b0e27222eb971e78b354efbe03745c6b4f51d6d4d738bfb5d77157d9f18d06460479ee1d5022bf8b0b2df3a6d19b26a7be4b6e0fbc71"}, 0x418, 0x3f}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001580)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xba, 0xac, "ff87983259a89643e6026d374c16343b08e4c6ab4df24634dc46e8598e39df4f5d219db19164be6395bf57b4a4dec6e975a4e22da90399c0aac3647d1893864ccabc783308fd016a6293299d6272e99c16fd5e257ea3204bf1a2c052840a1455b6554e30331f36a644b886850704c672571710bb5e2b688b4cd1a4eb18a650faeedf625d0fd05d21ad97ac2c399a1734ba29a8b99cc117fa25a294a4242839d5d20249cda7af35a83e828fbde6d54bcbb44060fc5780"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1f}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048080}, 0x10) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000001700)={{@local, 0x5}, 0x0, 0x2, 0x4}) [ 2650.503969] Call Trace: [ 2650.503986] dump_stack+0x1b2/0x281 [ 2650.504001] should_fail.cold+0x10a/0x149 [ 2650.504016] should_failslab+0xd6/0x130 [ 2650.504029] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2650.504042] gsmld_open+0xe5/0x7b0 09:08:46 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_overlay={0x1ff, 0x2, 0x4, 0x0, 0x101, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x8, 0x3b, 0x3, "b1b8610c"}, 0xfffffffa, 0x3, {&(0x7f0000000000)=[{0x8, 0x1, {0x9}, 0xf8e0}, {0x3, 0x1, {0x24000}, 0xe61}]}, 0x8}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0x20, 0x2) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000f14fb6b4af541045a690bcb8", @ANYRES16=r1, @ANYBLOB="00082bbd7000060000001c0000000c0099000001000039000000", @ANYRES64=r0, @ANYRESHEX=r2], 0x20}}, 0x6401c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ccb6c00a395ec34948bc8c5f5680000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="1000c700800600073e4c7a020b1218551a00c7000401c0041f0103018102f90701009d4aeebdf802b45b00001400c700030780050701020364b8c4f7878323712200c700040781053f060902080508061f0205030102f804040573cffcc1beca117d00001e00c700fb0401031306020004060a010105030303051feda3f89eb2c7e800002a00c700090301060607ff033f0007031f050701040702050903040209003f020600486c874400fd82460000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 2650.504051] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2650.504062] tty_ldisc_open+0x6c/0xb0 [ 2650.504072] tty_set_ldisc+0x287/0x5d0 [ 2650.504084] tty_ioctl+0xa2a/0x1430 [ 2650.504093] ? tty_fasync+0x2c0/0x2c0 [ 2650.504104] ? proc_fail_nth_write+0x7b/0x180 [ 2650.504115] ? trace_hardirqs_on+0x10/0x10 [ 2650.504129] ? fsnotify+0x974/0x11b0 [ 2650.504137] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2650.504146] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2650.504155] ? SyS_write+0x1b7/0x210 [ 2650.504166] ? tty_fasync+0x2c0/0x2c0 [ 2650.504176] do_vfs_ioctl+0x75a/0xff0 [ 2650.504186] ? lock_acquire+0x170/0x3f0 [ 2650.504195] ? ioctl_preallocate+0x1a0/0x1a0 [ 2650.504207] ? __fget+0x265/0x3e0 [ 2650.504218] ? do_vfs_ioctl+0xff0/0xff0 [ 2650.504228] ? security_file_ioctl+0x83/0xb0 [ 2650.504238] SyS_ioctl+0x7f/0xb0 [ 2650.504245] ? do_vfs_ioctl+0xff0/0xff0 [ 2650.504256] do_syscall_64+0x1d5/0x640 [ 2650.504271] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2650.504279] RIP: 0033:0x7f45f79b00c9 [ 2650.504284] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:08:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) 09:08:46 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 3) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) [ 2650.504294] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 [ 2650.504300] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2650.504305] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.504311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.504316] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 09:08:46 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x15, 0x9f, &(0x7f00000001c0)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, 0x0, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000005c0)={&(0x7f0000000840)=[0x1, 0x1, 0x101, 0xffff, 0x5, 0x2, 0x8001, 0x0, 0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x6, 0x4, 0x7ff, 0x6, 0x5, 0x10000, 0x3, 0x0, 0x7fff, 0x10000, 0x7eb, 0x2, 0x7, 0x3, 0xffffffff, 0x8, 0x6f2c, 0x9, 0x7, 0x8001, 0x2, 0x80000001, 0xffffffff, 0x4, 0x2, 0x1, 0xf3, 0x80, 0x8, 0x7ff, 0x8001, 0x7fffffff, 0x2, 0x48083ce, 0x80, 0x1, 0x0, 0xff, 0x2, 0x3ff, 0x32e, 0x5, 0x6, 0x8, 0x1, 0x7, 0x15, 0x1ff, 0x8, 0xfff, 0xa5f, 0x80, 0x800, 0x3f, 0x0, 0x1, 0x7, 0x2, 0x5, 0x2, 0x3, 0x20, 0x401, 0x4, 0x3796, 0x5, 0xffffffff, 0x3f, 0x1, 0x1, 0x1000, 0x1, 0x1000, 0x5, 0xfffffc01, 0x0, 0x7, 0x0, 0x8a4e, 0x7, 0x100, 0x7, 0x1, 0x6, 0x0, 0x400, 0xad678a2, 0xffffffca, 0x46c, 0x1f, 0x7fff, 0x1ff, 0xc3, 0x0, 0xa0000000, 0x800, 0xffff, 0xfffffffa, 0x7, 0x1, 0x505d, 0x6, 0x1c, 0x6, 0x3, 0xffffffc1, 0x81, 0x9, 0x7, 0xd1, 0x4, 0x7fff, 0x7ff, 0xffffffff, 0x7, 0x8, 0xfffffff7, 0x69, 0x4, 0x7, 0x10001, 0x5, 0xffffff81, 0x3ff, 0xfffffffb, 0x7, 0x4, 0x7, 0xb45, 0x7ff, 0x9, 0x800, 0x8000, 0x2, 0xa96, 0x7, 0xfff, 0x9, 0x3, 0x9, 0x4, 0x7ff, 0x9, 0xff, 0x0, 0x80000000, 0x4, 0x3ff, 0x3, 0x9, 0xda1a, 0x0, 0x4, 0x200, 0x0, 0x0, 0x7fffffff, 0x9, 0x40, 0x1, 0x0, 0xe0c3, 0x8, 0xf34, 0xfffffff9, 0x400, 0x0, 0x1, 0x8, 0x4, 0x57, 0xfffffffa, 0x3, 0x20, 0x5, 0x401, 0x8, 0x1, 0x40, 0x4, 0x280, 0x3, 0x40, 0x1, 0x8, 0xffffffff, 0x3, 0x75, 0xcc, 0x6, 0x81, 0x0, 0x401, 0x7, 0x5, 0x3, 0x6, 0xc76, 0x7f, 0x0, 0x7, 0x8000, 0x2, 0x200, 0xff, 0xfffffffa, 0x5, 0xc10, 0x5, 0x101, 0x7fff, 0x5, 0x40, 0x7ff, 0x1, 0x80000001, 0x6, 0x8, 0x8, 0x2, 0x400, 0x2b, 0x20, 0x80000001, 0x9, 0xffffffff, 0x6, 0x7fff, 0xfffffe00, 0x7, 0x2, 0x8, 0x7f, 0x8, 0x3f, 0x2, 0x0, 0x615e, 0xfd91, 0xffffffff, 0x3, 0x2, 0x5dce, 0x7, 0x3, 0x1, 0x0, 0xd888, 0x3bf, 0x80, 0x200, 0x9, 0x2, 0x2, 0xfffffff8, 0x2cf, 0x7ff, 0x400, 0x1, 0x4, 0x1, 0x1, 0x10000, 0x336, 0x7fffffff, 0x7, 0x2, 0x9d, 0x2, 0x7fe3, 0xffffffff, 0x8001, 0xfffff001, 0x200, 0x80, 0xc1f1, 0x3b, 0x9, 0xa532, 0x351a8a69, 0x6, 0x6f5, 0x4f, 0x5, 0x6, 0x3ff, 0x79, 0x2803, 0x1, 0x1, 0xffffff87, 0x7f, 0x9, 0xfffff893, 0x6, 0xcf02, 0x10001, 0xe89b, 0x6e45, 0x0, 0x1, 0xff, 0x4, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x1f, 0x7, 0x5, 0xffff0001, 0x4, 0x3, 0x0, 0x80000001, 0x401, 0x7, 0x1, 0xa130, 0x2, 0x1, 0x8, 0x20, 0x0, 0x400, 0xcb3, 0x0, 0xd86, 0x5, 0x9, 0x100, 0x8, 0x0, 0xce5120e, 0x80000001, 0x2, 0x200, 0x48e, 0x1f, 0xabbd, 0x6, 0x4, 0x400, 0xc8, 0x2, 0x2, 0x0, 0x7ff, 0x8, 0x8001, 0x8, 0x1, 0xd9b, 0xffffff81, 0x1, 0x4, 0x7, 0x3, 0x9, 0x1, 0x5, 0x5d, 0x4, 0x7, 0x100, 0x7, 0x2, 0x3d, 0x80000000, 0x455, 0x10000, 0x7fff, 0xfd4a, 0xc396, 0x1, 0xffff, 0x4, 0x8, 0x1, 0x36e20000, 0x3, 0x4, 0x7d70, 0xffff5a34, 0x83a2, 0xfffffff7, 0x80000001, 0x46b, 0x9, 0x1, 0x4, 0x8000, 0x0, 0x5, 0xb505, 0x7fffffff, 0x3ff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x0, 0xff, 0x4, 0x279, 0x80000001, 0x2, 0x6, 0x800, 0x2, 0x8001, 0x17, 0x80000000, 0x5, 0x0, 0x5b1, 0x6, 0x124, 0x3, 0x7, 0x800, 0x200, 0x6, 0x65, 0x5, 0x40, 0x3, 0x6, 0x0, 0x1, 0xc6, 0x6, 0x6, 0x1, 0x0, 0x1, 0x5, 0x1, 0x8, 0x6613, 0x9, 0x35, 0xfffffffd, 0x80000001, 0xffff, 0xb906, 0x1, 0x6, 0x8, 0x5, 0x401, 0x2, 0x401, 0x48, 0x9fc8, 0x2, 0x8000, 0x200, 0x54f3, 0x11aa, 0x7ff, 0xfffffff9, 0x5, 0x10000, 0x10000, 0x5, 0x1, 0xffffff00, 0x100, 0xffff, 0x8, 0x3, 0xff, 0x1, 0x2, 0x4c, 0x7fffffff, 0x1, 0xfffffffd, 0x800, 0x4, 0xfff, 0x4, 0x3, 0xfffffffe, 0x1, 0x2, 0x1, 0x7, 0x11, 0x8, 0x2, 0x3, 0x10001, 0x40, 0x9, 0x5, 0x4, 0x2, 0x3, 0x5, 0x3, 0x8, 0xb849, 0x9, 0x8000, 0x1f, 0x7, 0x4, 0x3f, 0x8, 0xffffffff, 0x0, 0x4, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0x7fffffff, 0x3, 0x5b, 0x507, 0x1, 0xffffffff, 0x80000001, 0x3, 0x7fffffff, 0x1, 0x8, 0x3, 0xe5a6, 0x4, 0x4, 0x933, 0x0, 0x80000000, 0xfff, 0x4, 0x0, 0x5, 0xffffffff, 0x9, 0x81, 0x1, 0x7f, 0x2, 0x2, 0x2, 0x7f, 0xfffffffc, 0x963, 0x9, 0x5, 0x10001, 0xffffffff, 0x1, 0x20000000, 0x1, 0x20, 0x6e, 0x1, 0x1f, 0x401, 0x1008, 0x4, 0x800, 0x8, 0x9, 0x75a, 0x0, 0x1, 0x2, 0x9, 0x5, 0x6, 0xffffffff, 0x5, 0x69, 0xffffff7f, 0x37, 0x7, 0x200, 0x5, 0xff, 0xffff, 0xff, 0xfffffffa, 0x90d, 0x10000, 0x9bc6, 0x0, 0x5, 0x64ba, 0x6, 0x4, 0x6000, 0x7, 0x2, 0x4, 0xd7d5, 0xfb, 0x0, 0xa8, 0x9, 0x4, 0x7, 0x0, 0x6, 0xfffffffc, 0x8, 0x9, 0x5, 0x1, 0x9, 0x100, 0xfffffc2b, 0x8000, 0x7e, 0x0, 0x0, 0x8, 0x7fff, 0x451, 0xc2c1, 0x7f, 0x401, 0x101, 0xbd, 0xa0000, 0x3ee9, 0x8, 0x2, 0x0, 0x7f, 0x8, 0xe459, 0xfff, 0x34e1, 0x5, 0x91, 0x5, 0x3ff, 0x1000, 0x0, 0x1ff, 0x8e, 0x238, 0xcfd, 0x4, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xfc, 0x0, 0xff, 0x5, 0x8, 0xd0bc, 0x9, 0x9, 0x19f9, 0x4, 0x70c4, 0x1f, 0x3, 0x1000, 0x4e6, 0xffffffff, 0x5, 0x2, 0x10001, 0x8000, 0x5, 0x0, 0x2, 0x528, 0x401, 0x0, 0x5, 0x800, 0xfffff800, 0x1, 0xc55, 0x6, 0x5, 0x7, 0xfff, 0x2000000, 0x0, 0x9, 0x4, 0x5, 0xffff, 0x9e076d5, 0xe635, 0x3, 0x7, 0x0, 0x8d, 0x5, 0x6, 0x101, 0x6, 0xffffff00, 0x81, 0x73, 0xde, 0x81, 0xfff, 0x81, 0x8b1, 0x2, 0x2, 0x2, 0x3, 0x7, 0xff, 0xa8e9, 0x8, 0x4, 0x3f, 0x8, 0x40, 0x7, 0x1, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x2, 0x2, 0x3, 0x3, 0x8, 0x64, 0x8, 0x1, 0x3, 0x7fffffff, 0x3, 0x8, 0x4, 0x0, 0x41ca, 0x1ff, 0xfb, 0xffffffff, 0x8, 0x1ff, 0x8, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x40, 0xc52, 0xfffff010, 0x7, 0xfd, 0x6, 0x8, 0x100, 0x2, 0x0, 0x2, 0x401, 0x8000000, 0x10001, 0x6, 0x1000, 0x3c41c7c5, 0x8, 0x54d8, 0x991, 0x1, 0xd32a, 0x6, 0x728f7498, 0x0, 0x20, 0x9, 0x3, 0x5, 0x9, 0x1f, 0x80000000, 0x3ff, 0x8, 0x4, 0x9, 0x0, 0x2, 0x8, 0x2, 0x9, 0x48, 0x7, 0x7ff, 0xff, 0x3f, 0x60, 0x7, 0x4, 0x16, 0x7, 0x7, 0xfffffffd, 0x0, 0xff, 0x8000, 0x7f, 0xb33a, 0x7ff, 0x1, 0xffff, 0x5, 0x5, 0x1000, 0x6, 0x6c8c847e, 0x8001, 0x800, 0x0, 0x0, 0x4, 0x4, 0x10001, 0x80, 0x3, 0xfffffffe, 0x9, 0x8, 0x6, 0x1, 0x2, 0x78, 0xff, 0x5, 0x5, 0x3, 0x2000000, 0x1000, 0x5, 0x10000, 0x7, 0x4, 0x4, 0x10001, 0xfffffff8, 0x65, 0x7ff, 0x7, 0x5, 0x8, 0x6, 0x101, 0x0, 0x3, 0x7f, 0xfffffffc, 0x7c000, 0x4, 0xec, 0x7f, 0x10000, 0xffffeb60, 0x200, 0x9, 0x6, 0x6, 0x3, 0x3d, 0x5, 0x10000, 0x4, 0x200, 0x3, 0xc7e1, 0x4, 0x8, 0x1511, 0x400, 0x3, 0xffffffff, 0x1, 0x8001, 0x4, 0x800, 0x8, 0x7f, 0x4, 0x3, 0x1f, 0x2c, 0x10001, 0x101, 0x3ff, 0x6, 0x3, 0x800, 0x8, 0x0, 0x2, 0x3fe, 0x0, 0x7, 0x3, 0x7fffffff, 0x7, 0xdf, 0x0, 0xacb, 0x2, 0x9, 0x0, 0x80000000, 0x8, 0x7f, 0x6, 0x74, 0x20, 0x0, 0xffff8000, 0x7fff, 0x575, 0x1, 0x3, 0x8, 0x1f, 0x7, 0x9, 0xbc4, 0xfffffffe, 0xbde, 0xffffff3a, 0x5, 0x1ff, 0x4, 0x4, 0x7, 0x2, 0x4c41, 0x2, 0xf5, 0x3, 0x0, 0x47, 0x80000001, 0xffff, 0xc, 0x41d6, 0x3, 0x2, 0x4, 0x7f, 0x4, 0x0, 0xffff767b, 0x10001, 0x9e, 0x8, 0x3, 0x6, 0x80000000, 0x1000, 0x6, 0x8, 0x80000000, 0x1, 0x800, 0x8, 0x9, 0x81, 0xfffffff7, 0x1, 0x7, 0x6, 0x9f01, 0x401, 0x40, 0x800, 0xec, 0xb4, 0xffffffff, 0x9, 0x3da, 0x84c7, 0x6, 0xc1, 0x40, 0x6, 0xa7, 0xfff, 0x3f, 0x4, 0x1, 0xffffffff, 0x1, 0x3, 0xc066, 0x7f, 0x6, 0x8], 0x1, 0x400, 0x3f}) syz_open_pts(r3, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x15, 0x9f, &(0x7f00000001c0)}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, 0x0, 0x0) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000005c0)={&(0x7f0000000840)=[0x1, 0x1, 0x101, 0xffff, 0x5, 0x2, 0x8001, 0x0, 0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x6, 0x4, 0x7ff, 0x6, 0x5, 0x10000, 0x3, 0x0, 0x7fff, 0x10000, 0x7eb, 0x2, 0x7, 0x3, 0xffffffff, 0x8, 0x6f2c, 0x9, 0x7, 0x8001, 0x2, 0x80000001, 0xffffffff, 0x4, 0x2, 0x1, 0xf3, 0x80, 0x8, 0x7ff, 0x8001, 0x7fffffff, 0x2, 0x48083ce, 0x80, 0x1, 0x0, 0xff, 0x2, 0x3ff, 0x32e, 0x5, 0x6, 0x8, 0x1, 0x7, 0x15, 0x1ff, 0x8, 0xfff, 0xa5f, 0x80, 0x800, 0x3f, 0x0, 0x1, 0x7, 0x2, 0x5, 0x2, 0x3, 0x20, 0x401, 0x4, 0x3796, 0x5, 0xffffffff, 0x3f, 0x1, 0x1, 0x1000, 0x1, 0x1000, 0x5, 0xfffffc01, 0x0, 0x7, 0x0, 0x8a4e, 0x7, 0x100, 0x7, 0x1, 0x6, 0x0, 0x400, 0xad678a2, 0xffffffca, 0x46c, 0x1f, 0x7fff, 0x1ff, 0xc3, 0x0, 0xa0000000, 0x800, 0xffff, 0xfffffffa, 0x7, 0x1, 0x505d, 0x6, 0x1c, 0x6, 0x3, 0xffffffc1, 0x81, 0x9, 0x7, 0xd1, 0x4, 0x7fff, 0x7ff, 0xffffffff, 0x7, 0x8, 0xfffffff7, 0x69, 0x4, 0x7, 0x10001, 0x5, 0xffffff81, 0x3ff, 0xfffffffb, 0x7, 0x4, 0x7, 0xb45, 0x7ff, 0x9, 0x800, 0x8000, 0x2, 0xa96, 0x7, 0xfff, 0x9, 0x3, 0x9, 0x4, 0x7ff, 0x9, 0xff, 0x0, 0x80000000, 0x4, 0x3ff, 0x3, 0x9, 0xda1a, 0x0, 0x4, 0x200, 0x0, 0x0, 0x7fffffff, 0x9, 0x40, 0x1, 0x0, 0xe0c3, 0x8, 0xf34, 0xfffffff9, 0x400, 0x0, 0x1, 0x8, 0x4, 0x57, 0xfffffffa, 0x3, 0x20, 0x5, 0x401, 0x8, 0x1, 0x40, 0x4, 0x280, 0x3, 0x40, 0x1, 0x8, 0xffffffff, 0x3, 0x75, 0xcc, 0x6, 0x81, 0x0, 0x401, 0x7, 0x5, 0x3, 0x6, 0xc76, 0x7f, 0x0, 0x7, 0x8000, 0x2, 0x200, 0xff, 0xfffffffa, 0x5, 0xc10, 0x5, 0x101, 0x7fff, 0x5, 0x40, 0x7ff, 0x1, 0x80000001, 0x6, 0x8, 0x8, 0x2, 0x400, 0x2b, 0x20, 0x80000001, 0x9, 0xffffffff, 0x6, 0x7fff, 0xfffffe00, 0x7, 0x2, 0x8, 0x7f, 0x8, 0x3f, 0x2, 0x0, 0x615e, 0xfd91, 0xffffffff, 0x3, 0x2, 0x5dce, 0x7, 0x3, 0x1, 0x0, 0xd888, 0x3bf, 0x80, 0x200, 0x9, 0x2, 0x2, 0xfffffff8, 0x2cf, 0x7ff, 0x400, 0x1, 0x4, 0x1, 0x1, 0x10000, 0x336, 0x7fffffff, 0x7, 0x2, 0x9d, 0x2, 0x7fe3, 0xffffffff, 0x8001, 0xfffff001, 0x200, 0x80, 0xc1f1, 0x3b, 0x9, 0xa532, 0x351a8a69, 0x6, 0x6f5, 0x4f, 0x5, 0x6, 0x3ff, 0x79, 0x2803, 0x1, 0x1, 0xffffff87, 0x7f, 0x9, 0xfffff893, 0x6, 0xcf02, 0x10001, 0xe89b, 0x6e45, 0x0, 0x1, 0xff, 0x4, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x1f, 0x7, 0x5, 0xffff0001, 0x4, 0x3, 0x0, 0x80000001, 0x401, 0x7, 0x1, 0xa130, 0x2, 0x1, 0x8, 0x20, 0x0, 0x400, 0xcb3, 0x0, 0xd86, 0x5, 0x9, 0x100, 0x8, 0x0, 0xce5120e, 0x80000001, 0x2, 0x200, 0x48e, 0x1f, 0xabbd, 0x6, 0x4, 0x400, 0xc8, 0x2, 0x2, 0x0, 0x7ff, 0x8, 0x8001, 0x8, 0x1, 0xd9b, 0xffffff81, 0x1, 0x4, 0x7, 0x3, 0x9, 0x1, 0x5, 0x5d, 0x4, 0x7, 0x100, 0x7, 0x2, 0x3d, 0x80000000, 0x455, 0x10000, 0x7fff, 0xfd4a, 0xc396, 0x1, 0xffff, 0x4, 0x8, 0x1, 0x36e20000, 0x3, 0x4, 0x7d70, 0xffff5a34, 0x83a2, 0xfffffff7, 0x80000001, 0x46b, 0x9, 0x1, 0x4, 0x8000, 0x0, 0x5, 0xb505, 0x7fffffff, 0x3ff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x0, 0xff, 0x4, 0x279, 0x80000001, 0x2, 0x6, 0x800, 0x2, 0x8001, 0x17, 0x80000000, 0x5, 0x0, 0x5b1, 0x6, 0x124, 0x3, 0x7, 0x800, 0x200, 0x6, 0x65, 0x5, 0x40, 0x3, 0x6, 0x0, 0x1, 0xc6, 0x6, 0x6, 0x1, 0x0, 0x1, 0x5, 0x1, 0x8, 0x6613, 0x9, 0x35, 0xfffffffd, 0x80000001, 0xffff, 0xb906, 0x1, 0x6, 0x8, 0x5, 0x401, 0x2, 0x401, 0x48, 0x9fc8, 0x2, 0x8000, 0x200, 0x54f3, 0x11aa, 0x7ff, 0xfffffff9, 0x5, 0x10000, 0x10000, 0x5, 0x1, 0xffffff00, 0x100, 0xffff, 0x8, 0x3, 0xff, 0x1, 0x2, 0x4c, 0x7fffffff, 0x1, 0xfffffffd, 0x800, 0x4, 0xfff, 0x4, 0x3, 0xfffffffe, 0x1, 0x2, 0x1, 0x7, 0x11, 0x8, 0x2, 0x3, 0x10001, 0x40, 0x9, 0x5, 0x4, 0x2, 0x3, 0x5, 0x3, 0x8, 0xb849, 0x9, 0x8000, 0x1f, 0x7, 0x4, 0x3f, 0x8, 0xffffffff, 0x0, 0x4, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0x7fffffff, 0x3, 0x5b, 0x507, 0x1, 0xffffffff, 0x80000001, 0x3, 0x7fffffff, 0x1, 0x8, 0x3, 0xe5a6, 0x4, 0x4, 0x933, 0x0, 0x80000000, 0xfff, 0x4, 0x0, 0x5, 0xffffffff, 0x9, 0x81, 0x1, 0x7f, 0x2, 0x2, 0x2, 0x7f, 0xfffffffc, 0x963, 0x9, 0x5, 0x10001, 0xffffffff, 0x1, 0x20000000, 0x1, 0x20, 0x6e, 0x1, 0x1f, 0x401, 0x1008, 0x4, 0x800, 0x8, 0x9, 0x75a, 0x0, 0x1, 0x2, 0x9, 0x5, 0x6, 0xffffffff, 0x5, 0x69, 0xffffff7f, 0x37, 0x7, 0x200, 0x5, 0xff, 0xffff, 0xff, 0xfffffffa, 0x90d, 0x10000, 0x9bc6, 0x0, 0x5, 0x64ba, 0x6, 0x4, 0x6000, 0x7, 0x2, 0x4, 0xd7d5, 0xfb, 0x0, 0xa8, 0x9, 0x4, 0x7, 0x0, 0x6, 0xfffffffc, 0x8, 0x9, 0x5, 0x1, 0x9, 0x100, 0xfffffc2b, 0x8000, 0x7e, 0x0, 0x0, 0x8, 0x7fff, 0x451, 0xc2c1, 0x7f, 0x401, 0x101, 0xbd, 0xa0000, 0x3ee9, 0x8, 0x2, 0x0, 0x7f, 0x8, 0xe459, 0xfff, 0x34e1, 0x5, 0x91, 0x5, 0x3ff, 0x1000, 0x0, 0x1ff, 0x8e, 0x238, 0xcfd, 0x4, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xfc, 0x0, 0xff, 0x5, 0x8, 0xd0bc, 0x9, 0x9, 0x19f9, 0x4, 0x70c4, 0x1f, 0x3, 0x1000, 0x4e6, 0xffffffff, 0x5, 0x2, 0x10001, 0x8000, 0x5, 0x0, 0x2, 0x528, 0x401, 0x0, 0x5, 0x800, 0xfffff800, 0x1, 0xc55, 0x6, 0x5, 0x7, 0xfff, 0x2000000, 0x0, 0x9, 0x4, 0x5, 0xffff, 0x9e076d5, 0xe635, 0x3, 0x7, 0x0, 0x8d, 0x5, 0x6, 0x101, 0x6, 0xffffff00, 0x81, 0x73, 0xde, 0x81, 0xfff, 0x81, 0x8b1, 0x2, 0x2, 0x2, 0x3, 0x7, 0xff, 0xa8e9, 0x8, 0x4, 0x3f, 0x8, 0x40, 0x7, 0x1, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x2, 0x2, 0x3, 0x3, 0x8, 0x64, 0x8, 0x1, 0x3, 0x7fffffff, 0x3, 0x8, 0x4, 0x0, 0x41ca, 0x1ff, 0xfb, 0xffffffff, 0x8, 0x1ff, 0x8, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x40, 0xc52, 0xfffff010, 0x7, 0xfd, 0x6, 0x8, 0x100, 0x2, 0x0, 0x2, 0x401, 0x8000000, 0x10001, 0x6, 0x1000, 0x3c41c7c5, 0x8, 0x54d8, 0x991, 0x1, 0xd32a, 0x6, 0x728f7498, 0x0, 0x20, 0x9, 0x3, 0x5, 0x9, 0x1f, 0x80000000, 0x3ff, 0x8, 0x4, 0x9, 0x0, 0x2, 0x8, 0x2, 0x9, 0x48, 0x7, 0x7ff, 0xff, 0x3f, 0x60, 0x7, 0x4, 0x16, 0x7, 0x7, 0xfffffffd, 0x0, 0xff, 0x8000, 0x7f, 0xb33a, 0x7ff, 0x1, 0xffff, 0x5, 0x5, 0x1000, 0x6, 0x6c8c847e, 0x8001, 0x800, 0x0, 0x0, 0x4, 0x4, 0x10001, 0x80, 0x3, 0xfffffffe, 0x9, 0x8, 0x6, 0x1, 0x2, 0x78, 0xff, 0x5, 0x5, 0x3, 0x2000000, 0x1000, 0x5, 0x10000, 0x7, 0x4, 0x4, 0x10001, 0xfffffff8, 0x65, 0x7ff, 0x7, 0x5, 0x8, 0x6, 0x101, 0x0, 0x3, 0x7f, 0xfffffffc, 0x7c000, 0x4, 0xec, 0x7f, 0x10000, 0xffffeb60, 0x200, 0x9, 0x6, 0x6, 0x3, 0x3d, 0x5, 0x10000, 0x4, 0x200, 0x3, 0xc7e1, 0x4, 0x8, 0x1511, 0x400, 0x3, 0xffffffff, 0x1, 0x8001, 0x4, 0x800, 0x8, 0x7f, 0x4, 0x3, 0x1f, 0x2c, 0x10001, 0x101, 0x3ff, 0x6, 0x3, 0x800, 0x8, 0x0, 0x2, 0x3fe, 0x0, 0x7, 0x3, 0x7fffffff, 0x7, 0xdf, 0x0, 0xacb, 0x2, 0x9, 0x0, 0x80000000, 0x8, 0x7f, 0x6, 0x74, 0x20, 0x0, 0xffff8000, 0x7fff, 0x575, 0x1, 0x3, 0x8, 0x1f, 0x7, 0x9, 0xbc4, 0xfffffffe, 0xbde, 0xffffff3a, 0x5, 0x1ff, 0x4, 0x4, 0x7, 0x2, 0x4c41, 0x2, 0xf5, 0x3, 0x0, 0x47, 0x80000001, 0xffff, 0xc, 0x41d6, 0x3, 0x2, 0x4, 0x7f, 0x4, 0x0, 0xffff767b, 0x10001, 0x9e, 0x8, 0x3, 0x6, 0x80000000, 0x1000, 0x6, 0x8, 0x80000000, 0x1, 0x800, 0x8, 0x9, 0x81, 0xfffffff7, 0x1, 0x7, 0x6, 0x9f01, 0x401, 0x40, 0x800, 0xec, 0xb4, 0xffffffff, 0x9, 0x3da, 0x84c7, 0x6, 0xc1, 0x40, 0x6, 0xa7, 0xfff, 0x3f, 0x4, 0x1, 0xffffffff, 0x1, 0x3, 0xc066, 0x7f, 0x6, 0x8], 0x1, 0x400, 0x3f}) (async) syz_open_pts(r3, 0x10002) (async) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) (async) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) 09:08:46 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_overlay={0x1ff, 0x2, 0x4, 0x0, 0x101, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x8, 0x3b, 0x3, "b1b8610c"}, 0xfffffffa, 0x3, {&(0x7f0000000000)=[{0x8, 0x1, {0x9}, 0xf8e0}, {0x3, 0x1, {0x24000}, 0xe61}]}, 0x8}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0x20, 0x2) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000f14fb6b4af541045a690bcb8", @ANYRES16=r1, @ANYBLOB="00082bbd7000060000001c0000000c0099000001000039000000", @ANYRES64=r0, @ANYRESHEX=r2], 0x20}}, 0x6401c) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ccb6c00a395ec34948bc8c5f5680000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="1000c700800600073e4c7a020b1218551a00c7000401c0041f0103018102f90701009d4aeebdf802b45b00001400c700030780050701020364b8c4f7878323712200c700040781053f060902080508061f0205030102f804040573cffcc1beca117d00001e00c700fb0401031306020004060a010105030303051feda3f89eb2c7e800002a00c700090301060607ff033f0007031f050701040702050903040209003f020600486c874400fd82460000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) 09:08:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1f, 0x18, 0x166, &(0x7f0000000240)}) (async) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) 09:08:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x2, 0x3, 0x9) connect$can_bcm(r1, &(0x7f0000000000), 0xa) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x2, 0x3, 0x9) connect$can_bcm(r1, &(0x7f0000000000), 0xa) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) [ 2650.873620] FAULT_INJECTION: forcing a failure. [ 2650.873620] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.921479] CPU: 1 PID: 16154 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2650.929390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2650.938752] Call Trace: [ 2650.941344] dump_stack+0x1b2/0x281 [ 2650.944978] should_fail.cold+0x10a/0x149 [ 2650.949136] should_failslab+0xd6/0x130 [ 2650.953119] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2650.957797] gsmld_open+0x151/0x7b0 [ 2650.961425] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2650.965669] tty_ldisc_open+0x6c/0xb0 [ 2650.969476] tty_set_ldisc+0x287/0x5d0 [ 2650.973368] tty_ioctl+0xa2a/0x1430 [ 2650.976999] ? tty_fasync+0x2c0/0x2c0 [ 2650.980796] ? proc_fail_nth_write+0x7b/0x180 [ 2650.985304] ? trace_hardirqs_on+0x10/0x10 [ 2650.989639] ? fsnotify+0x974/0x11b0 [ 2650.993357] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2650.998292] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2651.003316] ? SyS_write+0x1b7/0x210 [ 2651.007037] ? tty_fasync+0x2c0/0x2c0 [ 2651.010846] do_vfs_ioctl+0x75a/0xff0 [ 2651.014651] ? lock_acquire+0x170/0x3f0 09:08:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) [ 2651.018631] ? ioctl_preallocate+0x1a0/0x1a0 [ 2651.023149] ? __fget+0x265/0x3e0 [ 2651.026607] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.030583] ? security_file_ioctl+0x83/0xb0 [ 2651.034999] SyS_ioctl+0x7f/0xb0 [ 2651.038368] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.042348] do_syscall_64+0x1d5/0x640 [ 2651.046241] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2651.051441] RIP: 0033:0x7f45f79b00c9 [ 2651.055147] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2651.062855] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 [ 2651.070126] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2651.077399] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.084771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.084777] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 09:08:47 executing program 2: ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_overlay={0x1ff, 0x2, 0x4, 0x0, 0x101, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x8, 0x3b, 0x3, "b1b8610c"}, 0xfffffffa, 0x3, {&(0x7f0000000000)=[{0x8, 0x1, {0x9}, 0xf8e0}, {0x3, 0x1, {0x24000}, 0xe61}]}, 0x8}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0x20, 0x2) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000f14fb6b4af541045a690bcb8", @ANYRES16=r1, @ANYBLOB="00082bbd7000060000001c0000000c0099000001000039000000", @ANYRES64=r0, @ANYRESHEX=r2], 0x20}}, 0x6401c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ccb6c00a395ec34948bc8c5f5680000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="1000c700800600073e4c7a020b1218551a00c7000401c0041f0103018102f90701009d4aeebdf802b45b00001400c700030780050701020364b8c4f7878323712200c700040781053f060902080508061f0205030102f804040573cffcc1beca117d00001e00c700fb0401031306020004060a010105030303051feda3f89eb2c7e800002a00c700090301060607ff033f0007031f050701040702050903040209003f020600486c874400fd82460000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@multiplanar_overlay={0x1ff, 0x2, 0x4, 0x0, 0x101, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x8, 0x3b, 0x3, "b1b8610c"}, 0xfffffffa, 0x3, {&(0x7f0000000000)=[{0x8, 0x1, {0x9}, 0xf8e0}, {0x3, 0x1, {0x24000}, 0xe61}]}, 0x8}) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r0, &(0x7f0000000d00), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0x20, 0x2) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000f14fb6b4af541045a690bcb8", @ANYRES16=r1, @ANYBLOB="00082bbd7000060000001c0000000c0099000001000039000000", @ANYRES64=r0, @ANYRESHEX=r2], 0x20}}, 0x6401c) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ccb6c00a395ec34948bc8c5f5680000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fbdbdf256800000008000300", @ANYRES32=0x0, @ANYBLOB="1000c700800600073e4c7a020b1218551a00c7000401c0041f0103018102f90701009d4aeebdf802b45b00001400c700030780050701020364b8c4f7878323712200c700040781053f060902080508061f0205030102f804040573cffcc1beca117d00001e00c700fb0401031306020004060a010105030303051feda3f89eb2c7e800002a00c700090301060607ff033f0007031f050701040702050903040209003f020600486c874400fd82460000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0xc081) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) 09:08:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) write$cgroup_pid(r2, &(0x7f0000000080)=0xffffffffffffffff, 0x12) (async) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x1f, 0x18, 0x166, &(0x7f0000000240)}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) 09:08:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x9, 0x12, 0x0, 0x0}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x3) 09:08:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:47 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) [ 2651.330526] FAULT_INJECTION: forcing a failure. [ 2651.330526] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.373145] CPU: 1 PID: 16297 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2651.381062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2651.390419] Call Trace: [ 2651.393012] dump_stack+0x1b2/0x281 [ 2651.396646] should_fail.cold+0x10a/0x149 [ 2651.400904] ? gsm_activate_mux+0x224/0x2e0 [ 2651.405235] should_failslab+0xd6/0x130 [ 2651.409220] kmem_cache_alloc_trace+0x47/0x3d0 [ 2651.413898] gsm_dlci_alloc+0x46/0x460 [ 2651.417896] gsm_activate_mux+0x22e/0x2e0 [ 2651.422061] gsmld_open+0x4ed/0x7b0 [ 2651.425748] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2651.429988] tty_ldisc_open+0x6c/0xb0 [ 2651.433796] tty_set_ldisc+0x287/0x5d0 [ 2651.437695] tty_ioctl+0xa2a/0x1430 [ 2651.441330] ? tty_fasync+0x2c0/0x2c0 [ 2651.445134] ? proc_fail_nth_write+0x7b/0x180 [ 2651.449635] ? trace_hardirqs_on+0x10/0x10 [ 2651.453878] ? fsnotify+0x974/0x11b0 [ 2651.457596] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2651.462525] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2651.467547] ? SyS_write+0x1b7/0x210 [ 2651.471267] ? tty_fasync+0x2c0/0x2c0 [ 2651.475071] do_vfs_ioctl+0x75a/0xff0 [ 2651.478877] ? lock_acquire+0x170/0x3f0 [ 2651.482933] ? ioctl_preallocate+0x1a0/0x1a0 [ 2651.487346] ? __fget+0x265/0x3e0 [ 2651.490805] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.494790] ? security_file_ioctl+0x83/0xb0 [ 2651.499205] SyS_ioctl+0x7f/0xb0 [ 2651.502575] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.506557] do_syscall_64+0x1d5/0x640 [ 2651.510463] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2651.515659] RIP: 0033:0x7f45f79b00c9 [ 2651.519370] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2651.527168] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 [ 2651.534441] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2651.541710] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.548986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.556259] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 09:08:47 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x15, 0x9f, &(0x7f00000001c0)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, 0x0, 0x0) (async) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000005c0)={&(0x7f0000000840)=[0x1, 0x1, 0x101, 0xffff, 0x5, 0x2, 0x8001, 0x0, 0x0, 0x1, 0x4, 0x4, 0x5, 0x1, 0x6, 0x4, 0x7ff, 0x6, 0x5, 0x10000, 0x3, 0x0, 0x7fff, 0x10000, 0x7eb, 0x2, 0x7, 0x3, 0xffffffff, 0x8, 0x6f2c, 0x9, 0x7, 0x8001, 0x2, 0x80000001, 0xffffffff, 0x4, 0x2, 0x1, 0xf3, 0x80, 0x8, 0x7ff, 0x8001, 0x7fffffff, 0x2, 0x48083ce, 0x80, 0x1, 0x0, 0xff, 0x2, 0x3ff, 0x32e, 0x5, 0x6, 0x8, 0x1, 0x7, 0x15, 0x1ff, 0x8, 0xfff, 0xa5f, 0x80, 0x800, 0x3f, 0x0, 0x1, 0x7, 0x2, 0x5, 0x2, 0x3, 0x20, 0x401, 0x4, 0x3796, 0x5, 0xffffffff, 0x3f, 0x1, 0x1, 0x1000, 0x1, 0x1000, 0x5, 0xfffffc01, 0x0, 0x7, 0x0, 0x8a4e, 0x7, 0x100, 0x7, 0x1, 0x6, 0x0, 0x400, 0xad678a2, 0xffffffca, 0x46c, 0x1f, 0x7fff, 0x1ff, 0xc3, 0x0, 0xa0000000, 0x800, 0xffff, 0xfffffffa, 0x7, 0x1, 0x505d, 0x6, 0x1c, 0x6, 0x3, 0xffffffc1, 0x81, 0x9, 0x7, 0xd1, 0x4, 0x7fff, 0x7ff, 0xffffffff, 0x7, 0x8, 0xfffffff7, 0x69, 0x4, 0x7, 0x10001, 0x5, 0xffffff81, 0x3ff, 0xfffffffb, 0x7, 0x4, 0x7, 0xb45, 0x7ff, 0x9, 0x800, 0x8000, 0x2, 0xa96, 0x7, 0xfff, 0x9, 0x3, 0x9, 0x4, 0x7ff, 0x9, 0xff, 0x0, 0x80000000, 0x4, 0x3ff, 0x3, 0x9, 0xda1a, 0x0, 0x4, 0x200, 0x0, 0x0, 0x7fffffff, 0x9, 0x40, 0x1, 0x0, 0xe0c3, 0x8, 0xf34, 0xfffffff9, 0x400, 0x0, 0x1, 0x8, 0x4, 0x57, 0xfffffffa, 0x3, 0x20, 0x5, 0x401, 0x8, 0x1, 0x40, 0x4, 0x280, 0x3, 0x40, 0x1, 0x8, 0xffffffff, 0x3, 0x75, 0xcc, 0x6, 0x81, 0x0, 0x401, 0x7, 0x5, 0x3, 0x6, 0xc76, 0x7f, 0x0, 0x7, 0x8000, 0x2, 0x200, 0xff, 0xfffffffa, 0x5, 0xc10, 0x5, 0x101, 0x7fff, 0x5, 0x40, 0x7ff, 0x1, 0x80000001, 0x6, 0x8, 0x8, 0x2, 0x400, 0x2b, 0x20, 0x80000001, 0x9, 0xffffffff, 0x6, 0x7fff, 0xfffffe00, 0x7, 0x2, 0x8, 0x7f, 0x8, 0x3f, 0x2, 0x0, 0x615e, 0xfd91, 0xffffffff, 0x3, 0x2, 0x5dce, 0x7, 0x3, 0x1, 0x0, 0xd888, 0x3bf, 0x80, 0x200, 0x9, 0x2, 0x2, 0xfffffff8, 0x2cf, 0x7ff, 0x400, 0x1, 0x4, 0x1, 0x1, 0x10000, 0x336, 0x7fffffff, 0x7, 0x2, 0x9d, 0x2, 0x7fe3, 0xffffffff, 0x8001, 0xfffff001, 0x200, 0x80, 0xc1f1, 0x3b, 0x9, 0xa532, 0x351a8a69, 0x6, 0x6f5, 0x4f, 0x5, 0x6, 0x3ff, 0x79, 0x2803, 0x1, 0x1, 0xffffff87, 0x7f, 0x9, 0xfffff893, 0x6, 0xcf02, 0x10001, 0xe89b, 0x6e45, 0x0, 0x1, 0xff, 0x4, 0xffffffff, 0x5, 0x1, 0x9, 0x6, 0x1f, 0x7, 0x5, 0xffff0001, 0x4, 0x3, 0x0, 0x80000001, 0x401, 0x7, 0x1, 0xa130, 0x2, 0x1, 0x8, 0x20, 0x0, 0x400, 0xcb3, 0x0, 0xd86, 0x5, 0x9, 0x100, 0x8, 0x0, 0xce5120e, 0x80000001, 0x2, 0x200, 0x48e, 0x1f, 0xabbd, 0x6, 0x4, 0x400, 0xc8, 0x2, 0x2, 0x0, 0x7ff, 0x8, 0x8001, 0x8, 0x1, 0xd9b, 0xffffff81, 0x1, 0x4, 0x7, 0x3, 0x9, 0x1, 0x5, 0x5d, 0x4, 0x7, 0x100, 0x7, 0x2, 0x3d, 0x80000000, 0x455, 0x10000, 0x7fff, 0xfd4a, 0xc396, 0x1, 0xffff, 0x4, 0x8, 0x1, 0x36e20000, 0x3, 0x4, 0x7d70, 0xffff5a34, 0x83a2, 0xfffffff7, 0x80000001, 0x46b, 0x9, 0x1, 0x4, 0x8000, 0x0, 0x5, 0xb505, 0x7fffffff, 0x3ff, 0x7, 0x1, 0x8, 0x6, 0x8, 0x0, 0xff, 0x4, 0x279, 0x80000001, 0x2, 0x6, 0x800, 0x2, 0x8001, 0x17, 0x80000000, 0x5, 0x0, 0x5b1, 0x6, 0x124, 0x3, 0x7, 0x800, 0x200, 0x6, 0x65, 0x5, 0x40, 0x3, 0x6, 0x0, 0x1, 0xc6, 0x6, 0x6, 0x1, 0x0, 0x1, 0x5, 0x1, 0x8, 0x6613, 0x9, 0x35, 0xfffffffd, 0x80000001, 0xffff, 0xb906, 0x1, 0x6, 0x8, 0x5, 0x401, 0x2, 0x401, 0x48, 0x9fc8, 0x2, 0x8000, 0x200, 0x54f3, 0x11aa, 0x7ff, 0xfffffff9, 0x5, 0x10000, 0x10000, 0x5, 0x1, 0xffffff00, 0x100, 0xffff, 0x8, 0x3, 0xff, 0x1, 0x2, 0x4c, 0x7fffffff, 0x1, 0xfffffffd, 0x800, 0x4, 0xfff, 0x4, 0x3, 0xfffffffe, 0x1, 0x2, 0x1, 0x7, 0x11, 0x8, 0x2, 0x3, 0x10001, 0x40, 0x9, 0x5, 0x4, 0x2, 0x3, 0x5, 0x3, 0x8, 0xb849, 0x9, 0x8000, 0x1f, 0x7, 0x4, 0x3f, 0x8, 0xffffffff, 0x0, 0x4, 0x0, 0x800, 0x8, 0x0, 0x2, 0x6, 0x7fffffff, 0x3, 0x5b, 0x507, 0x1, 0xffffffff, 0x80000001, 0x3, 0x7fffffff, 0x1, 0x8, 0x3, 0xe5a6, 0x4, 0x4, 0x933, 0x0, 0x80000000, 0xfff, 0x4, 0x0, 0x5, 0xffffffff, 0x9, 0x81, 0x1, 0x7f, 0x2, 0x2, 0x2, 0x7f, 0xfffffffc, 0x963, 0x9, 0x5, 0x10001, 0xffffffff, 0x1, 0x20000000, 0x1, 0x20, 0x6e, 0x1, 0x1f, 0x401, 0x1008, 0x4, 0x800, 0x8, 0x9, 0x75a, 0x0, 0x1, 0x2, 0x9, 0x5, 0x6, 0xffffffff, 0x5, 0x69, 0xffffff7f, 0x37, 0x7, 0x200, 0x5, 0xff, 0xffff, 0xff, 0xfffffffa, 0x90d, 0x10000, 0x9bc6, 0x0, 0x5, 0x64ba, 0x6, 0x4, 0x6000, 0x7, 0x2, 0x4, 0xd7d5, 0xfb, 0x0, 0xa8, 0x9, 0x4, 0x7, 0x0, 0x6, 0xfffffffc, 0x8, 0x9, 0x5, 0x1, 0x9, 0x100, 0xfffffc2b, 0x8000, 0x7e, 0x0, 0x0, 0x8, 0x7fff, 0x451, 0xc2c1, 0x7f, 0x401, 0x101, 0xbd, 0xa0000, 0x3ee9, 0x8, 0x2, 0x0, 0x7f, 0x8, 0xe459, 0xfff, 0x34e1, 0x5, 0x91, 0x5, 0x3ff, 0x1000, 0x0, 0x1ff, 0x8e, 0x238, 0xcfd, 0x4, 0x9, 0x1, 0xffff, 0x4, 0x9, 0xfc, 0x0, 0xff, 0x5, 0x8, 0xd0bc, 0x9, 0x9, 0x19f9, 0x4, 0x70c4, 0x1f, 0x3, 0x1000, 0x4e6, 0xffffffff, 0x5, 0x2, 0x10001, 0x8000, 0x5, 0x0, 0x2, 0x528, 0x401, 0x0, 0x5, 0x800, 0xfffff800, 0x1, 0xc55, 0x6, 0x5, 0x7, 0xfff, 0x2000000, 0x0, 0x9, 0x4, 0x5, 0xffff, 0x9e076d5, 0xe635, 0x3, 0x7, 0x0, 0x8d, 0x5, 0x6, 0x101, 0x6, 0xffffff00, 0x81, 0x73, 0xde, 0x81, 0xfff, 0x81, 0x8b1, 0x2, 0x2, 0x2, 0x3, 0x7, 0xff, 0xa8e9, 0x8, 0x4, 0x3f, 0x8, 0x40, 0x7, 0x1, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x2, 0x2, 0x3, 0x3, 0x8, 0x64, 0x8, 0x1, 0x3, 0x7fffffff, 0x3, 0x8, 0x4, 0x0, 0x41ca, 0x1ff, 0xfb, 0xffffffff, 0x8, 0x1ff, 0x8, 0x0, 0xfffffffa, 0x101, 0x80000000, 0x40, 0xc52, 0xfffff010, 0x7, 0xfd, 0x6, 0x8, 0x100, 0x2, 0x0, 0x2, 0x401, 0x8000000, 0x10001, 0x6, 0x1000, 0x3c41c7c5, 0x8, 0x54d8, 0x991, 0x1, 0xd32a, 0x6, 0x728f7498, 0x0, 0x20, 0x9, 0x3, 0x5, 0x9, 0x1f, 0x80000000, 0x3ff, 0x8, 0x4, 0x9, 0x0, 0x2, 0x8, 0x2, 0x9, 0x48, 0x7, 0x7ff, 0xff, 0x3f, 0x60, 0x7, 0x4, 0x16, 0x7, 0x7, 0xfffffffd, 0x0, 0xff, 0x8000, 0x7f, 0xb33a, 0x7ff, 0x1, 0xffff, 0x5, 0x5, 0x1000, 0x6, 0x6c8c847e, 0x8001, 0x800, 0x0, 0x0, 0x4, 0x4, 0x10001, 0x80, 0x3, 0xfffffffe, 0x9, 0x8, 0x6, 0x1, 0x2, 0x78, 0xff, 0x5, 0x5, 0x3, 0x2000000, 0x1000, 0x5, 0x10000, 0x7, 0x4, 0x4, 0x10001, 0xfffffff8, 0x65, 0x7ff, 0x7, 0x5, 0x8, 0x6, 0x101, 0x0, 0x3, 0x7f, 0xfffffffc, 0x7c000, 0x4, 0xec, 0x7f, 0x10000, 0xffffeb60, 0x200, 0x9, 0x6, 0x6, 0x3, 0x3d, 0x5, 0x10000, 0x4, 0x200, 0x3, 0xc7e1, 0x4, 0x8, 0x1511, 0x400, 0x3, 0xffffffff, 0x1, 0x8001, 0x4, 0x800, 0x8, 0x7f, 0x4, 0x3, 0x1f, 0x2c, 0x10001, 0x101, 0x3ff, 0x6, 0x3, 0x800, 0x8, 0x0, 0x2, 0x3fe, 0x0, 0x7, 0x3, 0x7fffffff, 0x7, 0xdf, 0x0, 0xacb, 0x2, 0x9, 0x0, 0x80000000, 0x8, 0x7f, 0x6, 0x74, 0x20, 0x0, 0xffff8000, 0x7fff, 0x575, 0x1, 0x3, 0x8, 0x1f, 0x7, 0x9, 0xbc4, 0xfffffffe, 0xbde, 0xffffff3a, 0x5, 0x1ff, 0x4, 0x4, 0x7, 0x2, 0x4c41, 0x2, 0xf5, 0x3, 0x0, 0x47, 0x80000001, 0xffff, 0xc, 0x41d6, 0x3, 0x2, 0x4, 0x7f, 0x4, 0x0, 0xffff767b, 0x10001, 0x9e, 0x8, 0x3, 0x6, 0x80000000, 0x1000, 0x6, 0x8, 0x80000000, 0x1, 0x800, 0x8, 0x9, 0x81, 0xfffffff7, 0x1, 0x7, 0x6, 0x9f01, 0x401, 0x40, 0x800, 0xec, 0xb4, 0xffffffff, 0x9, 0x3da, 0x84c7, 0x6, 0xc1, 0x40, 0x6, 0xa7, 0xfff, 0x3f, 0x4, 0x1, 0xffffffff, 0x1, 0x3, 0xc066, 0x7f, 0x6, 0x8], 0x1, 0x400, 0x3f}) (async) syz_open_pts(r3, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async) pipe(&(0x7f0000000600)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 09:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@my=0x0, 0x5}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) 09:08:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x7, 0x16b, 0x0}) 09:08:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf250700000008000100590000001c00e7005fe501b730b0e41da757e5e6d2bc2aceb03c974a29479fc70a00180003030303030300001c00e700caa7433d831ac63490a0c9a29fda352edbfa3363c3adb1d71c00e7009ca111315a62226e800c7734337afa85a2ee1fb4e59720370c00178004000100040006000a00e8000802000001000008001780040004001c00e700de7f68af2d2878c3214329264f0efd598115d259be9b0d960a00e80008021100000100001800178004000600040002000400010004000400040002000a001800030378f1012113dec1fa97d00303030300000400cc0000"], 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x40014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b1055b830752"}, @NL80211_ATTR_PMKID={0x14, 0x55, "56501a1eabccce59798543010ae18940"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48002}, 0x24004000) 09:08:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x1e, 0x160, &(0x7f0000000040)}) 09:08:47 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 5) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x17, 0x160, &(0x7f0000000480)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x5a0, 0x9, 0x9, 0x5, 0xa, "d45db4e34178bdfd"}) 09:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@my=0x0, 0x5}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) 09:08:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x7, 0x16b, 0x0}) 09:08:47 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf250700000008000100590000001c00e7005fe501b730b0e41da757e5e6d2bc2aceb03c974a29479fc70a00180003030303030300001c00e700caa7433d831ac63490a0c9a29fda352edbfa3363c3adb1d71c00e7009ca111315a62226e800c7734337afa85a2ee1fb4e59720370c00178004000100040006000a00e8000802000001000008001780040004001c00e700de7f68af2d2878c3214329264f0efd598115d259be9b0d960a00e80008021100000100001800178004000600040002000400010004000400040002000a001800030378f1012113dec1fa97d00303030300000400cc0000"], 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x40014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b1055b830752"}, @NL80211_ATTR_PMKID={0x14, 0x55, "56501a1eabccce59798543010ae18940"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48002}, 0x24004000) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) (async) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf250700000008000100590000001c00e7005fe501b730b0e41da757e5e6d2bc2aceb03c974a29479fc70a00180003030303030300001c00e700caa7433d831ac63490a0c9a29fda352edbfa3363c3adb1d71c00e7009ca111315a62226e800c7734337afa85a2ee1fb4e59720370c00178004000100040006000a00e8000802000001000008001780040004001c00e700de7f68af2d2878c3214329264f0efd598115d259be9b0d960a00e80008021100000100001800178004000600040002000400010004000400040002000a001800030378f1012113dec1fa97d00303030300000400cc0000"], 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x40014) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b1055b830752"}, @NL80211_ATTR_PMKID={0x14, 0x55, "56501a1eabccce59798543010ae18940"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48002}, 0x24004000) (async) 09:08:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@my=0x0, 0x5}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000000)={@my=0x0, 0x5}) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b22dd1609d151016"}) (async) 09:08:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x7, 0x16b, 0x0}) [ 2651.726103] FAULT_INJECTION: forcing a failure. [ 2651.726103] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.796009] CPU: 1 PID: 16369 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2651.803921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2651.813272] Call Trace: [ 2651.815865] dump_stack+0x1b2/0x281 [ 2651.819508] should_fail.cold+0x10a/0x149 [ 2651.823667] should_failslab+0xd6/0x130 [ 2651.827654] __kmalloc+0x2c1/0x400 [ 2651.831197] ? __kfifo_alloc+0xdc/0x240 [ 2651.835178] __kfifo_alloc+0xdc/0x240 [ 2651.838984] gsm_dlci_alloc+0xd4/0x460 [ 2651.842876] gsm_activate_mux+0x22e/0x2e0 [ 2651.847027] gsmld_open+0x4ed/0x7b0 [ 2651.850664] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2651.854910] tty_ldisc_open+0x6c/0xb0 [ 2651.858712] tty_set_ldisc+0x287/0x5d0 [ 2651.862604] tty_ioctl+0xa2a/0x1430 [ 2651.866243] ? tty_fasync+0x2c0/0x2c0 [ 2651.870051] ? proc_fail_nth_write+0x7b/0x180 [ 2651.874548] ? trace_hardirqs_on+0x10/0x10 [ 2651.878786] ? fsnotify+0x974/0x11b0 [ 2651.882502] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 2651.887441] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2651.892459] ? SyS_write+0x1b7/0x210 [ 2651.896179] ? tty_fasync+0x2c0/0x2c0 [ 2651.899987] do_vfs_ioctl+0x75a/0xff0 [ 2651.903792] ? lock_acquire+0x170/0x3f0 [ 2651.907771] ? ioctl_preallocate+0x1a0/0x1a0 [ 2651.912186] ? __fget+0x265/0x3e0 [ 2651.915650] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.919634] ? security_file_ioctl+0x83/0xb0 [ 2651.924043] SyS_ioctl+0x7f/0xb0 [ 2651.927410] ? do_vfs_ioctl+0xff0/0xff0 [ 2651.931387] do_syscall_64+0x1d5/0x640 [ 2651.935288] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2651.940498] RIP: 0033:0x7f45f79b00c9 [ 2651.944204] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2651.951913] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 [ 2651.959191] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2651.966460] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.973733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.981004] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 09:08:48 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) accept$netrom(r3, &(0x7f00000001c0)={{}, [@default, @remote, @rose, @bcast, @netrom, @netrom, @default]}, &(0x7f00000000c0)=0x48) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) syz_open_pts(r2, 0x10002) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040)=0x107fc, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x5, 0x400, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x88, 0x20, 0xffff, 0x9}}) 09:08:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x17, 0x160, &(0x7f0000000480)}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x5a0, 0x9, 0x9, 0x5, 0xa, "d45db4e34178bdfd"}) 09:08:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf250700000008000100590000001c00e7005fe501b730b0e41da757e5e6d2bc2aceb03c974a29479fc70a00180003030303030300001c00e700caa7433d831ac63490a0c9a29fda352edbfa3363c3adb1d71c00e7009ca111315a62226e800c7734337afa85a2ee1fb4e59720370c00178004000100040006000a00e8000802000001000008001780040004001c00e700de7f68af2d2878c3214329264f0efd598115d259be9b0d960a00e80008021100000100001800178004000600040002000400010004000400040002000a001800030378f1012113dec1fa97d00303030300000400cc0000"], 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x40014) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b1055b830752"}, @NL80211_ATTR_PMKID={0x14, 0x55, "56501a1eabccce59798543010ae18940"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48002}, 0x24004000) 09:08:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0xfffffffc, 0x9, 0x13, 0x0, 0x0}) 09:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)) ioctl$TIOCSIG(r0, 0x40045436, 0xe) 09:08:48 executing program 3: ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (fail_nth: 6) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) ioctl$TCSETSF(r2, 0x5404, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000006c0)={0x0, 0x7fffffff, 0x9, 0x1ff, 0x0, "5cb3113b0c250d3b40ca000e52d14b11dfcc7a"}) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000040)=0x800, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x33) 09:08:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0xfffffffc, 0x9, 0x13, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0xfffffffc, 0x9, 0x13, 0x0, 0x0}) (async) 09:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)) (async) ioctl$TIOCSIG(r0, 0x40045436, 0xe) 09:08:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x1) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0xf, 0x17, 0x160, &(0x7f0000000480)}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000d00), 0x12) (async, rerun: 32) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x5a0, 0x9, 0x9, 0x5, 0xa, "d45db4e34178bdfd"}) (rerun: 32) [ 2652.372008] FAULT_INJECTION: forcing a failure. [ 2652.372008] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.426015] CPU: 0 PID: 16532 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2652.433950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2652.433953] Call Trace: [ 2652.433970] dump_stack+0x1b2/0x281 [ 2652.449539] should_fail.cold+0x10a/0x149 [ 2652.449553] should_failslab+0xd6/0x130 [ 2652.457662] kmem_cache_alloc_trace+0x29a/0x3d0 [ 2652.457677] tty_register_device_attr+0x1d2/0x710 [ 2652.457689] ? redirected_tty_write+0xb0/0xb0 [ 2652.457698] ? __raw_spin_lock_init+0x28/0x100 [ 2652.457708] ? tty_port_init+0xa2/0x190 [ 2652.457717] ? gsm_dlci_alloc+0x390/0x460 [ 2652.457728] gsmld_open+0x548/0x7b0 [ 2652.457735] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 2652.457745] tty_ldisc_open+0x6c/0xb0 [ 2652.457753] tty_set_ldisc+0x287/0x5d0 [ 2652.457763] tty_ioctl+0xa2a/0x1430 [ 2652.457772] ? tty_fasync+0x2c0/0x2c0 [ 2652.457782] ? proc_fail_nth_write+0x7b/0x180 [ 2652.457792] ? trace_hardirqs_on+0x10/0x10 [ 2652.457806] ? fsnotify+0x974/0x11b0 [ 2652.457815] ? proc_tgid_io_accounting+0x7a0/0x7a0 09:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)) ioctl$TIOCSIG(r0, 0x40045436, 0xe) 09:08:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x1) (async) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) [ 2652.457824] ? debug_check_no_obj_freed+0x2c0/0x680 [ 2652.457834] ? SyS_write+0x1b7/0x210 [ 2652.533325] ? tty_fasync+0x2c0/0x2c0 [ 2652.533337] do_vfs_ioctl+0x75a/0xff0 [ 2652.533349] ? lock_acquire+0x170/0x3f0 [ 2652.533359] ? ioctl_preallocate+0x1a0/0x1a0 [ 2652.533371] ? __fget+0x265/0x3e0 [ 2652.533381] ? do_vfs_ioctl+0xff0/0xff0 [ 2652.533392] ? security_file_ioctl+0x83/0xb0 [ 2652.533402] SyS_ioctl+0x7f/0xb0 [ 2652.533409] ? do_vfs_ioctl+0xff0/0xff0 [ 2652.533420] do_syscall_64+0x1d5/0x640 [ 2652.533435] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2652.533442] RIP: 0033:0x7f45f79b00c9 [ 2652.533447] RSP: 002b:00007f45f5f22168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2652.533457] RAX: ffffffffffffffda RBX: 00007f45f7acff80 RCX: 00007f45f79b00c9 [ 2652.533462] RDX: 0000000020000640 RSI: 0000000000005423 RDI: 0000000000000003 [ 2652.533467] RBP: 00007f45f5f221d0 R08: 0000000000000000 R09: 0000000000000000 [ 2652.533472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:08:48 executing program 1: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0xda, 0x8, 0x400, 0x3f, 0x7, "e5d36e6ebff5e0da"}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000640)=0x15) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/83}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write$cgroup_pid(r2, 0x0, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000d00), 0x12) (async, rerun: 32) accept$netrom(r3, &(0x7f00000001c0)={{}, [@default, @remote, @rose, @bcast, @netrom, @netrom, @default]}, &(0x7f00000000c0)=0x48) (async, rerun: 32) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800)) (async, rerun: 64) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000680)={0x0, 0x1, 0x5, 0x7fffffff, 0x10, "f0ccd27364cad38082f40ffeb67bfbc2b0d7ab"}) (rerun: 64) syz_open_pts(r2, 0x10002) (async) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000040)=0x107fc, 0x4) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000740)={0x4, 0x80000001, 0x800, 0x22ad, 0x1}) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (rerun: 64) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x5, 0x400, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x88, 0x20, 0xffff, 0x9}}) 09:08:48 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000d00), 0x12) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB=')'], 0x28}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 09:08:48 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) 09:08:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000240)={0x1, 0xfffffffc, 0x9, 0x13, 0x0, 0x0}) 09:08:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x81, 0x0, "b22dd1609d151016"}) [ 2652.533477] R13: 00007ffc9ffe86df R14: 00007f45f5f22300 R15: 0000000000022000 [ 2653.178786] kasan: CONFIG_KASAN_INLINE enabled [ 2653.183573] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2653.230524] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2653.236779] Modules linked in: [ 2653.239965] CPU: 1 PID: 16526 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 [ 2653.247855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2653.257212] task: ffff88808df101c0 task.stack: ffff888091498000 [ 2653.263272] RIP: 0010:cdev_del+0x22/0x90 [ 2653.267330] RSP: 0018:ffff88809149fca0 EFLAGS: 00010207 [ 2653.272692] RAX: dffffc0000000000 RBX: ffff8880b0b1c900 RCX: 0000000000000000 [ 2653.279950] RDX: 000000000000000c RSI: ffff88808df10a48 RDI: 0000000000000064 [ 2653.287337] RBP: 0000000000000000 R08: ffffffff8b9c4300 R09: 0000000000000000 [ 2653.294611] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b0b1c908 [ 2653.294619] R13: ffff8880af7c5948 R14: ffff8880b2d884c0 R15: ffff8880a38e9158 [ 2653.309251] FS: 0000555555ca7400(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 2653.317552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2653.323442] CR2: 000055b679a18118 CR3: 000000009849e000 CR4: 00000000003406e0 [ 2653.331493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2653.338758] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2653.346020] Call Trace: [ 2653.348607] tty_unregister_device+0x101/0x1a0 [ 2653.353188] gsmld_close+0xaa/0x1f0 [ 2653.356809] ? gsmtty_cleanup+0x150/0x150 [ 2653.360951] tty_ldisc_close+0x8c/0xc0 [ 2653.364841] tty_ldisc_release+0xe8/0x400 [ 2653.368993] tty_release_struct+0x20/0xe0 [ 2653.373137] tty_release+0xb3f/0x10d0 [ 2653.376954] ? do_tty_hangup+0x30/0x30 [ 2653.380840] __fput+0x25f/0x7a0 [ 2653.384116] task_work_run+0x11f/0x190 [ 2653.388014] exit_to_usermode_loop+0x1ad/0x200 [ 2653.392597] do_syscall_64+0x4a3/0x640 [ 2653.396484] entry_SYSCALL_64_after_hwframe+0x5e/0xd3 [ 2653.401664] RIP: 0033:0x7f45f7961f7b [ 2653.405372] RSP: 002b:00007ffc9ffe8740 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2653.413083] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f45f7961f7b [ 2653.420352] RDX: 0000000000000000 RSI: 0000001b30023140 RDI: 0000000000000003 [ 2653.427619] RBP: 00007f45f7ad1980 R08: 0000000000000000 R09: 000000009ed7ebcc [ 2653.434884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000287cd2 [ 2653.442149] R13: 00007ffc9ffe8840 R14: 00007f45f7ad0050 R15: 0000000000000032 [ 2653.449502] Code: 95 3f f7 ff eb d2 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 83 7e cd ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f [ 2653.468754] RIP: cdev_del+0x22/0x90 RSP: ffff88809149fca0 [ 2653.475219] ---[ end trace 33488121c4fd7ff1 ]--- [ 2653.480423] Kernel panic - not syncing: Fatal exception [ 2653.485930] Kernel Offset: disabled [ 2653.489548] Rebooting in 86400 seconds..