)={0x1, r5, 0x1}) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f00000000c0)={0x9, 0x0, 0x3, 0x400}) 00:22:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 00:22:05 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/185}) (rerun: 64) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 00:22:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) 00:22:05 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) (async) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:05 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x0) 00:22:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x18) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) 00:22:05 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x4}) 00:22:05 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x0) 00:22:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) 00:22:05 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x0) 00:22:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:05 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x32000) 00:22:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x4}) (async) 00:22:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:05 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='-}//[)(/:{\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x32000) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x32000) 00:22:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x4}) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xfe8250fdd972048) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) 00:22:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xfe8250fdd972048) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x2, 0xfe8250fdd972048) 00:22:06 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000000)) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r2, &(0x7f00000001c0)=""/4096}) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 00:22:06 executing program 1: eventfd2(0x0, 0x801) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x20002) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3}) (async) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10081, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}]}) (rerun: 64) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r2, &(0x7f00000001c0)=""/4096}) 00:22:06 executing program 1: eventfd2(0x0, 0x801) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) (async) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x20002) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r2}) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r2, &(0x7f00000001c0)=""/4096}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={r2, &(0x7f00000001c0)=""/4096}) (async) 00:22:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0x3f, 0xf5d7, 0x2, 0x16, "52d8a58ae6253a6c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009759a353f7079fe80000000000000000200000007000000000000000000000000000000000000000000000000000000def7"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xff, 0x10000, 0x6, 0x4, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 1: eventfd2(0x0, 0x801) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x20002) eventfd2(0x0, 0x801) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) (async) syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x20002) (async) 00:22:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400080) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2b50, 0x305600) connect$caif(0xffffffffffffffff, &(0x7f00000001c0)=@util={0x25, "477b6de68c448e70c3006b95fb5798af"}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x400002) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0x3f, 0xf5d7, 0x2, 0x16, "52d8a58ae6253a6c"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (rerun: 32) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 00:22:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2b50, 0x305600) (async) connect$caif(0xffffffffffffffff, &(0x7f00000001c0)=@util={0x25, "477b6de68c448e70c3006b95fb5798af"}, 0x18) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x400002) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) 00:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009759a353f7079fe80000000000000000200000007000000000000000000000000000000000000000000000000000000def7"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xff, 0x10000, 0x6, 0x4, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009759a353f7079fe80000000000000000200000007000000000000000000000000000000000000000000000000000000def7"]) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xff, 0x10000, 0x6, 0x4, 0x100}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) (async) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x5a80) 00:22:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x2b50, 0x305600) (async) connect$caif(0xffffffffffffffff, &(0x7f00000001c0)=@util={0x25, "477b6de68c448e70c3006b95fb5798af"}, 0x18) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x400002) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) (async, rerun: 32) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) 00:22:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x6, 0x3f, 0xf5d7, 0x2, 0x16, "52d8a58ae6253a6c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:06 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (rerun: 32) 00:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009759a353f7079fe80000000000000000200000007000000000000000000000000000000000000000000000000000000def7"]) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xff, 0x10000, 0x6, 0x4, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000009759a353f7079fe80000000000000000200000007000000000000000000000000000000000000000000000000000000def7"]) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000000)={0xff, 0x10000, 0x6, 0x4, 0x100}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) (async) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x5a80) 00:22:06 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='*{\x00') r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x42a00) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x14}) 00:22:06 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x235, 0x101200) 00:22:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x151}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x10000) r3 = syz_open_pts(r1, 0x42040) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x34) 00:22:06 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x5a80) 00:22:06 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='*{\x00') r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x42a00) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x14}) 00:22:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:06 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x235, 0x101200) syz_open_dev$dri(&(0x7f0000000180), 0x235, 0x101200) (async) 00:22:06 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x5a80) 00:22:06 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='*{\x00') r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x42a00) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={r2, 0x14}) 00:22:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x151}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x10000) r3 = syz_open_pts(r1, 0x42040) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x34) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x151}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x10000) (async) syz_open_pts(r1, 0x42040) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x34) (async) 00:22:06 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x235, 0x101200) 00:22:06 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:22:07 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:22:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x151}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x10000) r3 = syz_open_pts(r1, 0x42040) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x34) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x151}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x84) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x10000) (async) syz_open_pts(r1, 0x42040) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x34) (async) 00:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={0x0, 0x3}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) 00:22:07 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 00:22:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={0x0, 0x3}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={0x0, 0x3}) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={0x0, 0x3}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) 00:22:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/4096}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x70281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x9d, 0x4, 0xf8, 0x0, 0x8001, 0x80002, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x61f, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x47480, 0xfffffffffffffe00, 0x3f, 0x0, 0x100000000, 0x0, 0x82f9, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000011c0)='/dev/dri/card#\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001200), 0x303800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001240)={0x101, "5fbb341ef064a0afef1b3bd884839bd536dc1153b0ceddafa6859a9465730f9c"}) 00:22:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/4096}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x70281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) (async) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x9d, 0x4, 0xf8, 0x0, 0x8001, 0x80002, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x61f, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x47480, 0xfffffffffffffe00, 0x3f, 0x0, 0x100000000, 0x0, 0x82f9, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000011c0)='/dev/dri/card#\x00') (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001200), 0x303800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001240)={0x101, "5fbb341ef064a0afef1b3bd884839bd536dc1153b0ceddafa6859a9465730f9c"}) 00:22:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={0x0, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={0x0, 0x3}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) 00:22:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/4096}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x70281) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x9d, 0x4, 0xf8, 0x0, 0x8001, 0x80002, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x61f, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x47480, 0xfffffffffffffe00, 0x3f, 0x0, 0x100000000, 0x0, 0x82f9, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000011c0)='/dev/dri/card#\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001200), 0x303800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001240)={0x101, "5fbb341ef064a0afef1b3bd884839bd536dc1153b0ceddafa6859a9465730f9c"}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/4096}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x70281) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x9d, 0x4, 0xf8, 0x0, 0x8001, 0x80002, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x61f, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x47480, 0xfffffffffffffe00, 0x3f, 0x0, 0x100000000, 0x0, 0x82f9, 0x0, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000011c0)='/dev/dri/card#\x00') (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001200), 0x303800, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001240)={0x101, "5fbb341ef064a0afef1b3bd884839bd536dc1153b0ceddafa6859a9465730f9c"}) (async) 00:22:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:07 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x90c00) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={0x0, 0x10}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x1}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={0x0, 0x1}) 00:22:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) 00:22:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) 00:22:09 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) 00:22:09 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x90c00) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={0x0, 0x10}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={0x0, 0x1}) 00:22:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:09 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x90c00) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={0x0, 0x10}) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x1}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000080), 0x7ff, 0x90c00) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={0x0, 0x10}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) (async) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x20, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={0x0, 0x1}) (async) 00:22:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:09 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) 00:22:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x1}) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 4: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x7f, 0x0, 0x4, 0x0, 0x6, 0x80, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae9a, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x4c110, 0x6, 0xdcc, 0x8, 0x68c, 0x3, 0x27, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000140)={0xd000, 0x4, 0x3, 0x4}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x8, 0x0, 0x2, 0x0, 0x400, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8000000000000001, 0x4}, 0x400, 0x6, 0x9, 0x4, 0x9, 0x4e0, 0x14, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r0, 0x2) 00:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:10 executing program 4: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x7f, 0x0, 0x4, 0x0, 0x6, 0x80, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae9a, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x4c110, 0x6, 0xdcc, 0x8, 0x68c, 0x3, 0x27, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000140)={0xd000, 0x4, 0x3, 0x4}) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x8, 0x0, 0x2, 0x0, 0x400, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8000000000000001, 0x4}, 0x400, 0x6, 0x9, 0x4, 0x9, 0x4e0, 0x14, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r0, 0x2) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x92400) 00:22:10 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x48040, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="94912776ee495cfdde3eec1f7f5ab12fff985a2e56136048c40f48ff0d2f17336f72c39c31a88cb60f8cf934a5f09fa9d979f0aa1f8032df315ca80cae46c8adda81e47790c137a8b12a25e946888449d92dee65efe21d96") 00:22:10 executing program 4: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x7f, 0x0, 0x4, 0x0, 0x6, 0x80, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae9a, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x4c110, 0x6, 0xdcc, 0x8, 0x68c, 0x3, 0x27, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000140)={0xd000, 0x4, 0x3, 0x4}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x8, 0x0, 0x2, 0x0, 0x400, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8000000000000001, 0x4}, 0x400, 0x6, 0x9, 0x4, 0x9, 0x4e0, 0x14, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r0, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x5) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x7f, 0x0, 0x4, 0x0, 0x6, 0x80, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae9a, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x4c110, 0x6, 0xdcc, 0x8, 0x68c, 0x3, 0x27, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x3) (async) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000140)={0xd000, 0x4, 0x3, 0x4}) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x8, 0x0, 0x2, 0x0, 0x400, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x8000000000000001, 0x4}, 0x400, 0x6, 0x9, 0x4, 0x9, 0x4e0, 0x14, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r0, 0x2) (async) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x92400) syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x92400) (async) 00:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) (async) 00:22:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="94912776ee495cfdde3eec1f7f5ab12fff985a2e56136048c40f48ff0d2f17336f72c39c31a88cb60f8cf934a5f09fa9d979f0aa1f8032df315ca80cae46c8adda81e47790c137a8b12a25e946888449d92dee65efe21d96") syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) (async) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="94912776ee495cfdde3eec1f7f5ab12fff985a2e56136048c40f48ff0d2f17336f72c39c31a88cb60f8cf934a5f09fa9d979f0aa1f8032df315ca80cae46c8adda81e47790c137a8b12a25e946888449d92dee65efe21d96") (async) 00:22:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffffffff, 0x92400) 00:22:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x7e, 0x121340) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x7e, 0x121340) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"9538ff4e5bdfb9ae348b93c1394a730458d51de63148557594b9dcf587302884", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) geteuid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5f, 0x2, 0xc, 0x5, 0x6, 0x81}) accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x80000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) 00:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2}) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="94912776ee495cfdde3eec1f7f5ab12fff985a2e56136048c40f48ff0d2f17336f72c39c31a88cb60f8cf934a5f09fa9d979f0aa1f8032df315ca80cae46c8adda81e47790c137a8b12a25e946888449d92dee65efe21d96") 00:22:10 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x7e, 0x121340) 00:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1004) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"9538ff4e5bdfb9ae348b93c1394a730458d51de63148557594b9dcf587302884", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) geteuid() (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5f, 0x2, 0xc, 0x5, 0x6, 0x81}) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x80000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:10 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) (async) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x105201) 00:22:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"9538ff4e5bdfb9ae348b93c1394a730458d51de63148557594b9dcf587302884", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) geteuid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5f, 0x2, 0xc, 0x5, 0x6, 0x81}) accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x80000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"9538ff4e5bdfb9ae348b93c1394a730458d51de63148557594b9dcf587302884", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) geteuid() r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5f, 0x2, 0xc, 0x5, 0x6, 0x81}) accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x80000) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x1004) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"9538ff4e5bdfb9ae348b93c1394a730458d51de63148557594b9dcf587302884"}) (async) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) geteuid() (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000240)={0x5f, 0x2, 0xc, 0x5, 0x6, 0x81}) (async) accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x80000) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:10 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x105201) 00:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x2) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x105201) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x105201) (async) 00:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x203, 0x3, 0x400, 0x2, 0xa95}) 00:22:11 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x800002, r0, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000400)={r5, 0x6, &(0x7f00000000c0)=[0x901, 0x200, 0xfb, 0x0, 0x1, 0x800], &(0x7f0000000140)=[0x4], 0x14, 0x3, 0x7f, &(0x7f0000000380)=[0x9, 0x4, 0x0], &(0x7f00000003c0)=[0x7, 0x1, 0x65fc, 0xff, 0x9, 0x3]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x8, 0x1, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x3f, 0x4, 0x0, 0x0, @adapter={0x5, 0x7b, 0x2, 0x6, 0x2}}, {0x7, 0x4, 0x0, 0x0, @msi={0xc7e, 0x8, 0x5, 0x401}}, {0x5e, 0x2, 0x0, 0x0, @adapter={0x401, 0x1, 0x6, 0x1cc, 0xfffffedb}}, {0xb5000000, 0x3, 0x0, 0x0, @msi={0x101, 0xffff7fff, 0xc4}}, {0x10, 0x4, 0x0, 0x0, @sint={0x10001, 0x5}}, {0xce, 0x1, 0x0, 0x0, @msi={0x0, 0x9, 0x40, 0x5}}, {0x0, 0x4, 0x0, 0x0, @sint={0x1, 0x4}}, {0x3f, 0x4, 0x0, 0x0, @irqchip={0x100, 0x6}}]}) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x2) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfffd, 0x8, 0x4, 0xc4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x7}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0xfe}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x3, 0xfffffff9}) 00:22:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:11 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x101200) 00:22:11 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x800002, r0, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000400)={r5, 0x6, &(0x7f00000000c0)=[0x901, 0x200, 0xfb, 0x0, 0x1, 0x800], &(0x7f0000000140)=[0x4], 0x14, 0x3, 0x7f, &(0x7f0000000380)=[0x9, 0x4, 0x0], &(0x7f00000003c0)=[0x7, 0x1, 0x65fc, 0xff, 0x9, 0x3]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x8, 0x1, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x3f, 0x4, 0x0, 0x0, @adapter={0x5, 0x7b, 0x2, 0x6, 0x2}}, {0x7, 0x4, 0x0, 0x0, @msi={0xc7e, 0x8, 0x5, 0x401}}, {0x5e, 0x2, 0x0, 0x0, @adapter={0x401, 0x1, 0x6, 0x1cc, 0xfffffedb}}, {0xb5000000, 0x3, 0x0, 0x0, @msi={0x101, 0xffff7fff, 0xc4}}, {0x10, 0x4, 0x0, 0x0, @sint={0x10001, 0x5}}, {0xce, 0x1, 0x0, 0x0, @msi={0x0, 0x9, 0x40, 0x5}}, {0x0, 0x4, 0x0, 0x0, @sint={0x1, 0x4}}, {0x3f, 0x4, 0x0, 0x0, @irqchip={0x100, 0x6}}]}) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x203, 0x3, 0x400, 0x2, 0xa95}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x203, 0x3, 0x400, 0x2, 0xa95}) (async) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x7}) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0xfe}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x3, 0xfffffff9}) 00:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7837087d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x17) 00:22:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:11 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x800002, r0, 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000400)={r5, 0x6, &(0x7f00000000c0)=[0x901, 0x200, 0xfb, 0x0, 0x1, 0x800], &(0x7f0000000140)=[0x4], 0x14, 0x3, 0x7f, &(0x7f0000000380)=[0x9, 0x4, 0x0], &(0x7f00000003c0)=[0x7, 0x1, 0x65fc, 0xff, 0x9, 0x3]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x8, 0x1, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x3f, 0x4, 0x0, 0x0, @adapter={0x5, 0x7b, 0x2, 0x6, 0x2}}, {0x7, 0x4, 0x0, 0x0, @msi={0xc7e, 0x8, 0x5, 0x401}}, {0x5e, 0x2, 0x0, 0x0, @adapter={0x401, 0x1, 0x6, 0x1cc, 0xfffffedb}}, {0xb5000000, 0x3, 0x0, 0x0, @msi={0x101, 0xffff7fff, 0xc4}}, {0x10, 0x4, 0x0, 0x0, @sint={0x10001, 0x5}}, {0xce, 0x1, 0x0, 0x0, @msi={0x0, 0x9, 0x40, 0x5}}, {0x0, 0x4, 0x0, 0x0, @sint={0x1, 0x4}}, {0x3f, 0x4, 0x0, 0x0, @irqchip={0x100, 0x6}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x800002, r0, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000400)={r5, 0x6, &(0x7f00000000c0)=[0x901, 0x200, 0xfb, 0x0, 0x1, 0x800], &(0x7f0000000140)=[0x4], 0x14, 0x3, 0x7f, &(0x7f0000000380)=[0x9, 0x4, 0x0], &(0x7f00000003c0)=[0x7, 0x1, 0x65fc, 0xff, 0x9, 0x3]}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x8, 0x1, 0x0, 0x0, @irqchip={0x3, 0x1}}, {0x3f, 0x4, 0x0, 0x0, @adapter={0x5, 0x7b, 0x2, 0x6, 0x2}}, {0x7, 0x4, 0x0, 0x0, @msi={0xc7e, 0x8, 0x5, 0x401}}, {0x5e, 0x2, 0x0, 0x0, @adapter={0x401, 0x1, 0x6, 0x1cc, 0xfffffedb}}, {0xb5000000, 0x3, 0x0, 0x0, @msi={0x101, 0xffff7fff, 0xc4}}, {0x10, 0x4, 0x0, 0x0, @sint={0x10001, 0x5}}, {0xce, 0x1, 0x0, 0x0, @msi={0x0, 0x9, 0x40, 0x5}}, {0x0, 0x4, 0x0, 0x0, @sint={0x1, 0x4}}, {0x3f, 0x4, 0x0, 0x0, @irqchip={0x100, 0x6}}]}) (async) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000080)={0x203, 0x3, 0x400, 0x2, 0xa95}) 00:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20140, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x7}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async, rerun: 32) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0xfe}) (async, rerun: 32) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)={0x3, 0xfffffff9}) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7837087d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x17) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7837087d) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x17) (async) 00:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r1, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) (async) 00:22:11 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x9) syz_open_dev$dri(&(0x7f0000000080), 0x54d5, 0x20c081) 00:22:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x9) syz_open_dev$dri(&(0x7f0000000080), 0x54d5, 0x20c081) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7837087d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x17) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7837087d) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x17) (async) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r1, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x2001) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x12b, 0x4082) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 00:22:11 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x9) (async) syz_open_dev$dri(&(0x7f0000000080), 0x54d5, 0x20c081) 00:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r1, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x84, 0x0, 0x2, 0x70bd28, 0x7, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x4}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48015}, 0x8841) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x4295) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x6925469d756bb763) 00:22:11 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x2001) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x12b, 0x4082) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 00:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x4295) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x3) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x4295) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) (async) 00:22:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) 00:22:11 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x2001) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x12b, 0x4082) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x2001) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000140)={0x0, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x12b, 0x4082) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) (async) 00:22:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="65670f01cfac670fb4920300f40f01df1da2429264960c0707a50f01c2f22e660fc156133e0f01c5", 0x28}], 0x1, 0x10, &(0x7f0000000040)=[@dstype3={0x7, 0x1}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x670}], 0x2) 00:22:11 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x6925469d756bb763) syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x6925469d756bb763) (async) 00:22:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x109580) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={0x0, 0x2}) socket$caif_stream(0x25, 0x1, 0x3) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x4295) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x16) 00:22:12 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x6925469d756bb763) syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x6925469d756bb763) (async) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) 00:22:12 executing program 1: ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x52d240) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="c409cebcf5bbb9f97cccb384a80689cac818968917b0fae94e1c5330d96d1c72cc293ccef18ad7aec255713a75761a9abeef0c836431dc57432b6a8033499fa185367f935eca26e17212e0876a66205bfe47b70b03b59d1e63b09dfdb97b614592f4a8d306a1f28b") 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x109580) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={0x0, 0x2}) (async, rerun: 32) socket$caif_stream(0x25, 0x1, 0x3) (rerun: 32) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x52d240) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="c409cebcf5bbb9f97cccb384a80689cac818968917b0fae94e1c5330d96d1c72cc293ccef18ad7aec255713a75761a9abeef0c836431dc57432b6a8033499fa185367f935eca26e17212e0876a66205bfe47b70b03b59d1e63b09dfdb97b614592f4a8d306a1f28b") 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x109580) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={0x0, 0x2}) (async) socket$caif_stream(0x25, 0x1, 0x3) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x52d240) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="c409cebcf5bbb9f97cccb384a80689cac818968917b0fae94e1c5330d96d1c72cc293ccef18ad7aec255713a75761a9abeef0c836431dc57432b6a8033499fa185367f935eca26e17212e0876a66205bfe47b70b03b59d1e63b09dfdb97b614592f4a8d306a1f28b") ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0xffffffff}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x52d240) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="c409cebcf5bbb9f97cccb384a80689cac818968917b0fae94e1c5330d96d1c72cc293ccef18ad7aec255713a75761a9abeef0c836431dc57432b6a8033499fa185367f935eca26e17212e0876a66205bfe47b70b03b59d1e63b09dfdb97b614592f4a8d306a1f28b") (async) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) (async) syz_open_pts(r0, 0x2) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00098f9f7063266a91eac6e8d81b19bf2dbd7080a39734c374408c645f00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x880) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x800000004d, 0x80181) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:12 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4014) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x800000004d, 0x80181) syz_open_dev$dri(&(0x7f0000000180), 0x800000004d, 0x80181) (async) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4014) 00:22:12 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x800000004d, 0x80181) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4014) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 00:22:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x101a41, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000240)={0x6, 0x6}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x20000000000001fe, &(0x7f0000000040)}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000100)={0x5, 0x4, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async, rerun: 32) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x101a41, 0x0) (async, rerun: 32) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000240)={0x6, 0x6}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x20000000000001fe, &(0x7f0000000040)}) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000100)={0x5, 0x4, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) 00:22:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x101a41, 0x0) (async) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400001, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000240)={0x6, 0x6}) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x20000000000001fe, &(0x7f0000000040)}) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f0000000100)={0x5, 0x4, 0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={0x0, 0x8}) 00:22:12 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) (async) 00:22:12 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (rerun: 64) 00:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) (async) 00:22:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0xc0500) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0xc0500) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) (async) 00:22:13 executing program 1: getgroups(0x8, &(0x7f0000000180)=[0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0xee01, 0xee00, 0xee00, r0, 0xf6, 0x1}, 0xfffffff8, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x105a83) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/202}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000240)={0x0, 0x4}) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0xc0500) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 1: getgroups(0x8, &(0x7f0000000180)=[0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0xee01, 0xee00, 0xee00, r0, 0xf6, 0x1}, 0xfffffff8, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x7}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x105a83) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/202}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000240)={0x0, 0x4}) 00:22:13 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDENABIO(r0, 0x4b36) 00:22:13 executing program 1: getgroups(0x8, &(0x7f0000000180)=[0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0xee01, 0xee00, 0xee00, r0, 0xf6, 0x1}, 0xfffffff8, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x105a83) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/202}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000240)={0x0, 0x4}) getgroups(0x8, &(0x7f0000000180)=[0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0x0]) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, 0xee01, 0xee00, 0xee00, r0, 0xf6, 0x1}, 0xfffffff8, 0xfffffffffffffffd, 0x1, 0x9, 0x0, 0x0, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x105a83) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000000)={0x0, &(0x7f0000000080)=""/202}) (async) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000240)={0x0, 0x4}) (async) 00:22:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) (async) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x800) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) (async) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDENABIO(r0, 0x4b36) 00:22:13 executing program 1: socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x8000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=""/227}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) 00:22:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r1}) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 1: socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x8000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=""/227}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x17}) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0xa) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000000001, 0x2a0200) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$KDENABIO(r0, 0x4b36) 00:22:13 executing program 1: socket$caif_seqpacket(0x25, 0x5, 0x3) (async) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x8000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=""/227}) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0xa) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000000001, 0x2a0200) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0xa) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000000001, 0x2a0200) (async) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) (async) 00:22:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) socketpair(0x22, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/182}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x40, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x4000) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)={0x0, 0x7}) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_pts(r0, 0x14602) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:22:13 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x17}) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0xa) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000000001, 0x2a0200) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f}, 0xa) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4000000000000001, 0x2a0200) (async) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) (async) 00:22:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) socketpair(0x22, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/182}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x40, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x4000) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)={0x0, 0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) socketpair(0x22, 0x3, 0x4, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/182}) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x40, 0x4) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x4000) (async) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)={0x0, 0x7}) (async) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_pts(r0, 0x14602) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:22:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) socketpair(0x22, 0x3, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=""/182}) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x40, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x4000) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)={0x0, 0x7}) 00:22:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async, rerun: 64) r1 = syz_open_pts(r0, 0x14602) (rerun: 64) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:22:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x17}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x17}) (async) 00:22:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async, rerun: 64) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) (rerun: 64) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/212}) 00:22:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) 00:22:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/212}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/212}) (async) 00:22:14 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) 00:22:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) (async) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000080)=""/212}) 00:22:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x6}) 00:22:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x101200) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=""/226}) 00:22:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/72}) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x101200) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=""/226}) 00:22:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x6}) (rerun: 32) 00:22:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/72}) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x101200) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f00000002c0)=""/226}) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90080) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/149) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4ea880) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0)) 00:22:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x6}) (async) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/54}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x34, 0x500) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x28200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000340)={r3, &(0x7f0000000240)=""/238}) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/72}) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90080) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/149) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4ea880) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0)) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x5, 0x5, 0x2, 0x9, 0x3, 0x22, 0x19, "e323af7a481e5ec5a586b7215caadcbe62b1e5ef", "465a6a030cccf5d8aaba06f3efaa6f86eaf42f3d"}) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x5d, 0x5}) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/54}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x34, 0x500) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x28200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000340)={r3, &(0x7f0000000240)=""/238}) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/54}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x34, 0x500) (async) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x28200) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000340)={r3, &(0x7f0000000240)=""/238}) (async) 00:22:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) 00:22:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x5, 0x5, 0x2, 0x9, 0x3, 0x22, 0x19, "e323af7a481e5ec5a586b7215caadcbe62b1e5ef", "465a6a030cccf5d8aaba06f3efaa6f86eaf42f3d"}) (async) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x5d, 0x5}) 00:22:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90080) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/149) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4ea880) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) (async) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0)) 00:22:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/54}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x34, 0x500) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x28200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000340)={r3, &(0x7f0000000240)=""/238}) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) (async) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/54}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x34, 0x500) (async) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={0x0, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x28200) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000340)={r3, &(0x7f0000000240)=""/238}) (async) 00:22:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) 00:22:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x5, 0x5, 0x2, 0x9, 0x3, 0x22, 0x19, "e323af7a481e5ec5a586b7215caadcbe62b1e5ef", "465a6a030cccf5d8aaba06f3efaa6f86eaf42f3d"}) (async) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000080)={0x5d, 0x5}) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x101200) socketpair(0x1f, 0xc, 0x3f, &(0x7f0000000000)) 00:22:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) (async) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x199583) r0 = syz_open_pts(0xffffffffffffffff, 0xa0420) ioctl$TIOCNXCL(r0, 0x540d) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x101200) socketpair(0x1f, 0xc, 0x3f, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x101200) (async) socketpair(0x1f, 0xc, 0x3f, &(0x7f0000000000)) (async) 00:22:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x199583) (async) r0 = syz_open_pts(0xffffffffffffffff, 0xa0420) ioctl$TIOCNXCL(r0, 0x540d) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x40, 0x101200) (async) socketpair(0x1f, 0xc, 0x3f, &(0x7f0000000000)) 00:22:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) (async) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x199583) (async) r0 = syz_open_pts(0xffffffffffffffff, 0xa0420) ioctl$TIOCNXCL(r0, 0x540d) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x200008, 0x0) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x200008, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x200008, 0x0) (async) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) (async) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 00:22:15 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x200008, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x200008, 0x0) (async) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x6, 0x9, 0x8, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x6}, 0x3482, 0x7, 0x2, 0x1, 0x91, 0x3ff, 0xf001, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x1, @perf_config_ext={0xfff, 0x965}, 0x11000, 0x0, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0x8f6}, 0xffffffffffffffff, 0xc, r2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 00:22:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (async) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x6, 0x9, 0x8, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x6}, 0x3482, 0x7, 0x2, 0x1, 0x91, 0x3ff, 0xf001, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x1, @perf_config_ext={0xfff, 0x965}, 0x11000, 0x0, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0x8f6}, 0xffffffffffffffff, 0xc, r2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x6, 0x9, 0x8, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x6}, 0x3482, 0x7, 0x2, 0x1, 0x91, 0x3ff, 0xf001, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) ioctl$KDENABIO(r3, 0x4b36) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x1, @perf_config_ext={0xfff, 0x965}, 0x11000, 0x0, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0x8f6}, 0xffffffffffffffff, 0xc, r2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'team_slave_0\x00', 0x7, 0x7fffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x100) 00:22:15 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'team_slave_0\x00', 0x7, 0x7fffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x100) 00:22:15 executing program 4: ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/100}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x0, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000001) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) 00:22:15 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x6, 0x9, 0x8, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x6}, 0x3482, 0x7, 0x2, 0x1, 0x91, 0x3ff, 0xf001, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$KDENABIO(r3, 0x4b36) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x1, @perf_config_ext={0xfff, 0x965}, 0x11000, 0x0, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0x8f6}, 0xffffffffffffffff, 0xc, r2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x7f80000, 0x4) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'team_slave_0\x00', 0x7, 0x7fffffff}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x100) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3a0, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xbd, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x5}, {0x0, 0x8, 0x3f, 0x1d9111a}, {0xd544, 0x3, 0x5, 0x5}, {0x100, 0x8, 0x0, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000140)={0x9, 0x1, 0x100, 0x2, 0x20, 0x10, 0xe, "90bbdc129688a7e182ec79000efd9014fd81e35c", "53c44f080fb77c332a756b76590e55929741aa3b"}) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x5, 0xffffffff, 0xc1}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000002c0)={0xff, 0x20}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x6, 0x2, 0x2000, 0x1, 0x5, 0x0, 0x1f, "8715106fd1c26012d0e5a4fbcf6b313651a77882", "38f11e6d2a337c83bf1878235dacb62447415745"}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) 00:22:15 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) (async) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x7f80000, 0x4) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x0, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000001) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141800) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x0, 0x8}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000001) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) (async) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) 00:22:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3a0, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xbd, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x5}, {0x0, 0x8, 0x3f, 0x1d9111a}, {0xd544, 0x3, 0x5, 0x5}, {0x100, 0x8, 0x0, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000140)={0x9, 0x1, 0x100, 0x2, 0x20, 0x10, 0xe, "90bbdc129688a7e182ec79000efd9014fd81e35c", "53c44f080fb77c332a756b76590e55929741aa3b"}) (async) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x5, 0xffffffff, 0xc1}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000002c0)={0xff, 0x20}) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x6, 0x2, 0x2000, 0x1, 0x5, 0x0, 0x1f, "8715106fd1c26012d0e5a4fbcf6b313651a77882", "38f11e6d2a337c83bf1878235dacb62447415745"}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) r1 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x7f80000, 0x4) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) (async) socket$caif_stream(0x25, 0x1, 0x3) (async) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x7f80000, 0x4) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:15 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x0, 0x8}) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000001) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) 00:22:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:15 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x101200) (async) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3a0, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xbd, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x5}, {0x0, 0x8, 0x3f, 0x1d9111a}, {0xd544, 0x3, 0x5, 0x5}, {0x100, 0x8, 0x0, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000140)={0x9, 0x1, 0x100, 0x2, 0x20, 0x10, 0xe, "90bbdc129688a7e182ec79000efd9014fd81e35c", "53c44f080fb77c332a756b76590e55929741aa3b"}) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x5, 0xffffffff, 0xc1}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000002c0)={0xff, 0x20}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x6, 0x2, 0x2000, 0x1, 0x5, 0x0, 0x1f, "8715106fd1c26012d0e5a4fbcf6b313651a77882", "38f11e6d2a337c83bf1878235dacb62447415745"}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3a0, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xbd, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x5}, {0x0, 0x8, 0x3f, 0x1d9111a}, {0xd544, 0x3, 0x5, 0x5}, {0x100, 0x8, 0x0, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000140)={0x9, 0x1, 0x100, 0x2, 0x20, 0x10, 0xe, "90bbdc129688a7e182ec79000efd9014fd81e35c", "53c44f080fb77c332a756b76590e55929741aa3b"}) (async) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x5, 0xffffffff, 0xc1}) (async) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000002c0)={0xff, 0x20}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x6, 0x2, 0x2000, 0x1, 0x5, 0x0, 0x1f, "8715106fd1c26012d0e5a4fbcf6b313651a77882", "38f11e6d2a337c83bf1878235dacb62447415745"}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:16 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 00:22:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 0: r0 = getpgrp(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) r4 = getpgrp(r3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) r6 = getpgrp(r0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) sched_rr_get_interval(r0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x200, 0xdd, 0x3f, 0x104, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) ptrace$setopts(0x4206, r4, 0xfffffffffffffffc, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, r2, 0x80, 0x80}, 0xfffffff7, 0x0, 0x4, 0x1ff, r4, r0, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) r8 = geteuid() r9 = getpgrp(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x9, 0x44) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0xee01, r7, r8, r2, 0x188, 0x40}, 0x8, 0x9fbc, 0x5, 0x1, r9, r6, 0x56b3}) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 00:22:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 0: r0 = getpgrp(0x0) (async, rerun: 32) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) r4 = getpgrp(r3) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) (async) r6 = getpgrp(r0) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) (async, rerun: 32) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) (async, rerun: 32) sched_rr_get_interval(r0, &(0x7f00000002c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x200, 0xdd, 0x3f, 0x104, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) ptrace$setopts(0x4206, r4, 0xfffffffffffffffc, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, r2, 0x80, 0x80}, 0xfffffff7, 0x0, 0x4, 0x1ff, r4, r0, 0x2}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) (async, rerun: 64) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) (async, rerun: 64) r8 = geteuid() (async) r9 = getpgrp(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x9, 0x44) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0xee01, r7, r8, r2, 0x188, 0x40}, 0x8, 0x9fbc, 0x5, 0x1, r9, r6, 0x56b3}) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:22:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e4f100000000000700000000c2b88000c72fc45c819378dd00000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xd, 0x99e2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x1, 0xb, 0x2, 0x1, 0xf60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="74756e6c300000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00010020ffffffff000000014b25006c0067000003299078ac1414aa7f000001070b99e0000002ac141431444cfdc37f000001000000bb0a0101000000000400000076000000080a010100800000007f00000100000000ac1414bb00000081ac1414aa0000044bffffffff00000040e00000020000000000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xee, 0x3, 0xff0000, 0x214, r1, 0x22ed, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000ac0)={0x7, 0x3, 0x7, 0x1ff, 0x10, "ca08e767ffdf1934"}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x7ff, 0xffffffe0, {{0x33, 0x4, 0x1, 0x0, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0x9, [{@empty, 0x7}, {@multicast2, 0xe01}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0x4, [{@multicast1, 0x1}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x7, [{@multicast1, 0x1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x7, [0xfac, 0x101, 0x2352, 0x3f, 0x10000, 0xac, 0x9]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="14040000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000effff00080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) 00:22:16 executing program 4: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 00:22:16 executing program 0: r0 = getpgrp(0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) r4 = getpgrp(r3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) r6 = getpgrp(r0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) sched_rr_get_interval(r0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x200, 0xdd, 0x3f, 0x104, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) ptrace$setopts(0x4206, r4, 0xfffffffffffffffc, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, r2, 0x80, 0x80}, 0xfffffff7, 0x0, 0x4, 0x1ff, r4, r0, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) r8 = geteuid() r9 = getpgrp(0xffffffffffffffff) ptrace$setopts(0xffffffffffffffff, 0x0, 0x9, 0x44) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0xee01, r7, r8, r2, 0x188, 0x40}, 0x8, 0x9fbc, 0x5, 0x1, r9, r6, 0x56b3}) getpgrp(0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) (async) getpgrp(r3) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) (async) getpgrp(r0) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000280)) (async) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) (async) sched_rr_get_interval(r0, &(0x7f00000002c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x200, 0xdd, 0x3f, 0x104, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) (async) ptrace$setopts(0x4206, r4, 0xfffffffffffffffc, 0x0) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, r2, 0x80, 0x80}, 0xfffffff7, 0x0, 0x4, 0x1ff, r4, r0, 0x2}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) (async) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async) geteuid() (async) getpgrp(0xffffffffffffffff) (async) ptrace$setopts(0xffffffffffffffff, 0x0, 0x9, 0x44) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, 0xee01, r7, r8, r2, 0x188, 0x40}, 0x8, 0x9fbc, 0x5, 0x1, r9, r6, 0x56b3}) (async) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x80) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) 00:22:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e4f100000000000700000000c2b88000c72fc45c819378dd00000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xd, 0x99e2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x1, 0xb, 0x2, 0x1, 0xf60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="74756e6c300000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00010020ffffffff000000014b25006c0067000003299078ac1414aa7f000001070b99e0000002ac141431444cfdc37f000001000000bb0a0101000000000400000076000000080a010100800000007f00000100000000ac1414bb00000081ac1414aa0000044bffffffff00000040e00000020000000000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xee, 0x3, 0xff0000, 0x214, r1, 0x22ed, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000ac0)={0x7, 0x3, 0x7, 0x1ff, 0x10, "ca08e767ffdf1934"}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x7ff, 0xffffffe0, {{0x33, 0x4, 0x1, 0x0, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0x9, [{@empty, 0x7}, {@multicast2, 0xe01}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0x4, [{@multicast1, 0x1}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x7, [{@multicast1, 0x1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x7, [0xfac, 0x101, 0x2352, 0x3f, 0x10000, 0xac, 0x9]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="14040000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000effff00080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e4f100000000000700000000c2b88000c72fc45c819378dd00000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xd, 0x99e2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x1, 0xb, 0x2, 0x1, 0xf60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="74756e6c300000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00010020ffffffff000000014b25006c0067000003299078ac1414aa7f000001070b99e0000002ac141431444cfdc37f000001000000bb0a0101000000000400000076000000080a010100800000007f00000100000000ac1414bb00000081ac1414aa0000044bffffffff00000040e00000020000000000"]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xee, 0x3, 0xff0000, 0x214, r1, 0x22ed, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x9}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000ac0)={0x7, 0x3, 0x7, 0x1ff, 0x10, "ca08e767ffdf1934"}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x7ff, 0xffffffe0, {{0x33, 0x4, 0x1, 0x0, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0x9, [{@empty, 0x7}, {@multicast2, 0xe01}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0x4, [{@multicast1, 0x1}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x7, [{@multicast1, 0x1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x7, [0xfac, 0x101, 0x2352, 0x3f, 0x10000, 0xac, 0x9]}, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="14040000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000effff00080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) (async) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) 00:22:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x0) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e4f100000000000700000000c2b88000c72fc45c819378dd00000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0xd, 0x99e2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x6, 0x1, 0xb, 0x2, 0x1, 0xf60, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xb}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="74756e6c300000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00010020ffffffff000000014b25006c0067000003299078ac1414aa7f000001070b99e0000002ac141431444cfdc37f000001000000bb0a0101000000000400000076000000080a010100800000007f00000100000000ac1414bb00000081ac1414aa0000044bffffffff00000040e00000020000000000"]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xee, 0x3, 0xff0000, 0x214, r1, 0x22ed, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x9}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000ac0)={0x7, 0x3, 0x7, 0x1ff, 0x10, "ca08e767ffdf1934"}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x7ff, 0xffffffe0, {{0x33, 0x4, 0x1, 0x0, 0xcc, 0x64, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x43, 0x3, 0x9, [{@empty, 0x7}, {@multicast2, 0xe01}, {@loopback, 0x8}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0x4, [{@multicast1, 0x1}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010102}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x7, [{@multicast1, 0x1}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x7, [{@private=0xa010102, 0x5}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x7, [0xfac, 0x101, 0x2352, 0x3f, 0x10000, 0xac, 0x9]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000a80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="14040000", @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000effff00080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0402028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f8ffffff38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004002e030000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004005b0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c00040008000900f900000005006ef104000000010080400700000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x414}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) 00:22:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) (async) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2000000000000005, 0x8581) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x91d1, 0x4002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) 00:22:16 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8) getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0xc2, 0x1, 0x0, 0x1, "0aefea7d643c1bbb30ed18904da52f59ddbc17f23fee003397c6f7e90899b7a8bc0fd933daaae62c59f78dc2d98e1e67531b6e18ec6b43f08455ce8d24062e85e6235cb2eae5409be8eb9383263551a69cc78161142d504f92149ad0c18a800dff77b4ed8ee01be43d4ce4723bedef4ec0714a4d37a35120d53d07f96ed14e5f384450ad06f2366ef33eacd57d371198a261d8412ab5ce1589d75d11e64cfaa79d09d9724fbff9314e30"}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2000000000000005, 0x8581) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x91d1, 0x4002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) 00:22:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2}) 00:22:16 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8) getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0xc2, 0x1, 0x0, 0x1, "0aefea7d643c1bbb30ed18904da52f59ddbc17f23fee003397c6f7e90899b7a8bc0fd933daaae62c59f78dc2d98e1e67531b6e18ec6b43f08455ce8d24062e85e6235cb2eae5409be8eb9383263551a69cc78161142d504f92149ad0c18a800dff77b4ed8ee01be43d4ce4723bedef4ec0714a4d37a35120d53d07f96ed14e5f384450ad06f2366ef33eacd57d371198a261d8412ab5ce1589d75d11e64cfaa79d09d9724fbff9314e30"}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x8}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8) (async) getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0xc2, 0x1, 0x0, 0x1, "0aefea7d643c1bbb30ed18904da52f59ddbc17f23fee003397c6f7e90899b7a8bc0fd933daaae62c59f78dc2d98e1e67531b6e18ec6b43f08455ce8d24062e85e6235cb2eae5409be8eb9383263551a69cc78161142d504f92149ad0c18a800dff77b4ed8ee01be43d4ce4723bedef4ec0714a4d37a35120d53d07f96ed14e5f384450ad06f2366ef33eacd57d371198a261d8412ab5ce1589d75d11e64cfaa79d09d9724fbff9314e30"}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2000000000000005, 0x8581) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x91d1, 0x4002) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000080)) 00:22:16 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x80) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x4}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:16 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x8}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8) (async) getresgid(&(0x7f0000000340), &(0x7f0000000380), 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000080)={0xc2, 0x1, 0x0, 0x1, "0aefea7d643c1bbb30ed18904da52f59ddbc17f23fee003397c6f7e90899b7a8bc0fd933daaae62c59f78dc2d98e1e67531b6e18ec6b43f08455ce8d24062e85e6235cb2eae5409be8eb9383263551a69cc78161142d504f92149ad0c18a800dff77b4ed8ee01be43d4ce4723bedef4ec0714a4d37a35120d53d07f96ed14e5f384450ad06f2366ef33eacd57d371198a261d8412ab5ce1589d75d11e64cfaa79d09d9724fbff9314e30"}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x6ecc609c2d8ef1fc) 00:22:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) 00:22:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x18000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x3, &(0x7f0000000140)=[0x400, 0x1, 0x7fffffff], &(0x7f00000001c0)=[0xffff, 0x6, 0x10001, 0x80000001, 0x7f], 0x30, 0x2, 0x9, &(0x7f0000000200)=[0x8, 0x7f], &(0x7f0000000240)=[0x1000, 0x800]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x0) 00:22:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x4}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x4}) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2020c0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f00000002c0)={0x4, 0x6, 0xff, 0x0, 0x8000}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x6ecc609c2d8ef1fc) 00:22:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x2, 0x80}) 00:22:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x0) 00:22:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x18000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x3, &(0x7f0000000140)=[0x400, 0x1, 0x7fffffff], &(0x7f00000001c0)=[0xffff, 0x6, 0x10001, 0x80000001, 0x7f], 0x30, 0x2, 0x9, &(0x7f0000000200)=[0x8, 0x7f], &(0x7f0000000240)=[0x1000, 0x800]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x6ecc609c2d8ef1fc) 00:22:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:22:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x18000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0x3, &(0x7f0000000140)=[0x400, 0x1, 0x7fffffff], &(0x7f00000001c0)=[0xffff, 0x6, 0x10001, 0x80000001, 0x7f], 0x30, 0x2, 0x9, &(0x7f0000000200)=[0x8, 0x7f], &(0x7f0000000240)=[0x1000, 0x800]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={0x0, 0x1}) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x321604) 00:22:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x4}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:16 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x3, 0x6ecc609c2d8ef1fc) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2020c0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f00000002c0)={0x4, 0x6, 0xff, 0x0, 0x8000}) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) (rerun: 64) 00:22:16 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x189241) 00:22:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000008, 0x242002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000380)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x20, 0x4, 0x6, 0x20, 0x40, 0x1c, 0x26, "03d35315241c9c4d1d40b53d1ecc5d519f2d4305", "6d42b14eac6074e0a1a2f16f7225a10a178d6dd5"}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/151}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xb0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "45dfb8aee8e4994a35fce1f53e5ad36156398f6766c1f71c5810fed089db8f1c"}) 00:22:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000040)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x4}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:16 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x321604) 00:22:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 00:22:17 executing program 2: syz_open_dev$dri(0x0, 0x7, 0x189241) 00:22:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2020c0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f00000002c0)={0x4, 0x6, 0xff, 0x0, 0x8000}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000001c0)=r2) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2020c0) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) (async) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f00000002c0)={0x4, 0x6, 0xff, 0x0, 0x8000}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000008, 0x242002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000380)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x20, 0x4, 0x6, 0x20, 0x40, 0x1c, 0x26, "03d35315241c9c4d1d40b53d1ecc5d519f2d4305", "6d42b14eac6074e0a1a2f16f7225a10a178d6dd5"}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/151}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) (async, rerun: 64) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xb0) (async, rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "45dfb8aee8e4994a35fce1f53e5ad36156398f6766c1f71c5810fed089db8f1c"}) 00:22:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}}, 0x80) 00:22:17 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x321604) 00:22:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) (async) 00:22:17 executing program 2: syz_open_dev$dri(0x0, 0x7, 0x189241) 00:22:17 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) sendto$rose(r0, &(0x7f0000000080)="ab2c00de7cbbfa9716c6036f03bfb7ab372408ae2b77c7e915ae650012333a0ffa8da657b4c077d1ec99ef5e485deb2c6e0444347a17cc027c0c7564c1835ac97b5c3c1806151716c0d83977d0396d20ea8dc4332b582d0c16abf4e9a0e5bc5deaa0fddf745f6170c7846dbcb9d87ebe6877242eabd792cb91cee020e85369b5da552e1d8a58ad8ea855a37cdfc74c9307f493385bb7728b94b0cff856064caff4561d7977d9b7b0e5d386ca350de4786efb6d681fe435f8442707cc85ff575f44752a0992199d2b087192882304ee586c5db1be4201eef9f16b26d2ac", 0xdd, 0x20000000, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0xc0e02) 00:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x400000008, 0x242002) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000380)) (async) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async, rerun: 32) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x20, 0x4, 0x6, 0x20, 0x40, 0x1c, 0x26, "03d35315241c9c4d1d40b53d1ecc5d519f2d4305", "6d42b14eac6074e0a1a2f16f7225a10a178d6dd5"}) (async, rerun: 32) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000340)={0x0, &(0x7f0000000280)=""/151}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xb0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x9, "45dfb8aee8e4994a35fce1f53e5ad36156398f6766c1f71c5810fed089db8f1c"}) 00:22:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 00:22:17 executing program 2: syz_open_dev$dri(0x0, 0x7, 0x189241) 00:22:17 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) sendto$rose(r0, &(0x7f0000000080)="ab2c00de7cbbfa9716c6036f03bfb7ab372408ae2b77c7e915ae650012333a0ffa8da657b4c077d1ec99ef5e485deb2c6e0444347a17cc027c0c7564c1835ac97b5c3c1806151716c0d83977d0396d20ea8dc4332b582d0c16abf4e9a0e5bc5deaa0fddf745f6170c7846dbcb9d87ebe6877242eabd792cb91cee020e85369b5da552e1d8a58ad8ea855a37cdfc74c9307f493385bb7728b94b0cff856064caff4561d7977d9b7b0e5d386ca350de4786efb6d681fe435f8442707cc85ff575f44752a0992199d2b087192882304ee586c5db1be4201eef9f16b26d2ac", 0xdd, 0x20000000, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0xc0e02) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) (async) sendto$rose(r0, &(0x7f0000000080)="ab2c00de7cbbfa9716c6036f03bfb7ab372408ae2b77c7e915ae650012333a0ffa8da657b4c077d1ec99ef5e485deb2c6e0444347a17cc027c0c7564c1835ac97b5c3c1806151716c0d83977d0396d20ea8dc4332b582d0c16abf4e9a0e5bc5deaa0fddf745f6170c7846dbcb9d87ebe6877242eabd792cb91cee020e85369b5da552e1d8a58ad8ea855a37cdfc74c9307f493385bb7728b94b0cff856064caff4561d7977d9b7b0e5d386ca350de4786efb6d681fe435f8442707cc85ff575f44752a0992199d2b087192882304ee586c5db1be4201eef9f16b26d2ac", 0xdd, 0x20000000, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) (async) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0xc0e02) (async) 00:22:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) 00:22:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189241) 00:22:17 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) (async) sendto$rose(r0, &(0x7f0000000080)="ab2c00de7cbbfa9716c6036f03bfb7ab372408ae2b77c7e915ae650012333a0ffa8da657b4c077d1ec99ef5e485deb2c6e0444347a17cc027c0c7564c1835ac97b5c3c1806151716c0d83977d0396d20ea8dc4332b582d0c16abf4e9a0e5bc5deaa0fddf745f6170c7846dbcb9d87ebe6877242eabd792cb91cee020e85369b5da552e1d8a58ad8ea855a37cdfc74c9307f493385bb7728b94b0cff856064caff4561d7977d9b7b0e5d386ca350de4786efb6d681fe435f8442707cc85ff575f44752a0992199d2b087192882304ee586c5db1be4201eef9f16b26d2ac", 0xdd, 0x20000000, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0x4, 0xc0e02) (rerun: 64) 00:22:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000003c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) accept4$x25(r4, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000000c0)) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f00000001c0)=""/154}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'team_slave_1\x00', 0x3, 0x200}) 00:22:17 executing program 0: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189241) 00:22:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000003c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) accept4$x25(r4, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000000c0)) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f00000001c0)=""/154}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'team_slave_1\x00', 0x3, 0x200}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000003c0)) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) (async) accept4$x25(r4, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {}]}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000000c0)) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) (async) ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000002c0)) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f00000001c0)=""/154}) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'team_slave_1\x00', 0x3, 0x200}) (async) 00:22:17 executing program 0: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x7fffffffffffffff, 0x68aa83) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xfe, 0x2, 0x0, 0x20, 0x0, 0x733, 0x40080, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x7, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0x6, 0x3, 0x4, 0xd42f, 0x2, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0xff, 0xf8, 0x9c, 0x0, 0x5d0d, 0x40122, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x7fff}, 0x81, 0x0, 0x9, 0x9, 0x0, 0xce1, 0x1ff, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r0, 0x2) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)) 00:22:17 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x189241) 00:22:17 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x7fffffffffffffff, 0x68aa83) (async) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xfe, 0x2, 0x0, 0x20, 0x0, 0x733, 0x40080, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x7, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0x6, 0x3, 0x4, 0xd42f, 0x2, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0xff, 0xf8, 0x9c, 0x0, 0x5d0d, 0x40122, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x7fff}, 0x81, 0x0, 0x9, 0x9, 0x0, 0xce1, 0x1ff, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r0, 0x2) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)) 00:22:17 executing program 0: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000003c0)) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) (async) accept4$x25(r4, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000000c0)) (async) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f00000001c0)=""/154}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'team_slave_1\x00', 0x3, 0x200}) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) 00:22:17 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x7fffffffffffffff, 0x68aa83) (async) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xfe, 0x2, 0x0, 0x20, 0x0, 0x733, 0x40080, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x400, 0x7, @perf_config_ext={0x8, 0x2}, 0x0, 0x2, 0x6, 0x3, 0x4, 0xd42f, 0x2, 0x0, 0x7fff, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0xff, 0xf8, 0x9c, 0x0, 0x5d0d, 0x40122, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x7fff}, 0x81, 0x0, 0x9, 0x9, 0x0, 0xce1, 0x1ff, 0x0, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x8, r0, 0x2) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)) 00:22:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) 00:22:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xe2f, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1}) 00:22:17 executing program 0: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="37e293e8815f31a2482252e3426d6f2f10a2be29bbe468c77dca8e76ebcf6d0ee24f84cf4af8eaa01567e8f28b3a596f14f716dea04f2df119134e0d8b47d0e1cbd8d8d191a31fae462331dd98c69041e28afecb014b28056103c796d4f9f1256180d85152685e02ea051da769e5be7044ef0ae54a08f4fa26a63df5d1bcdbe41b9749aa6d429cd3352006c8") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) 00:22:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xe2f, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000000), 0xe2f, 0x101200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1}) (async) 00:22:17 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x3e92c0) 00:22:17 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) 00:22:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 0: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x10) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="37e293e8815f31a2482252e3426d6f2f10a2be29bbe468c77dca8e76ebcf6d0ee24f84cf4af8eaa01567e8f28b3a596f14f716dea04f2df119134e0d8b47d0e1cbd8d8d191a31fae462331dd98c69041e28afecb014b28056103c796d4f9f1256180d85152685e02ea051da769e5be7044ef0ae54a08f4fa26a63df5d1bcdbe41b9749aa6d429cd3352006c8") (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xe2f, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, r1}) 00:22:17 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x3e92c0) 00:22:17 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:17 executing program 0: ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="37e293e8815f31a2482252e3426d6f2f10a2be29bbe468c77dca8e76ebcf6d0ee24f84cf4af8eaa01567e8f28b3a596f14f716dea04f2df119134e0d8b47d0e1cbd8d8d191a31fae462331dd98c69041e28afecb014b28056103c796d4f9f1256180d85152685e02ea051da769e5be7044ef0ae54a08f4fa26a63df5d1bcdbe41b9749aa6d429cd3352006c8") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x4) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x10) (async) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="37e293e8815f31a2482252e3426d6f2f10a2be29bbe468c77dca8e76ebcf6d0ee24f84cf4af8eaa01567e8f28b3a596f14f716dea04f2df119134e0d8b47d0e1cbd8d8d191a31fae462331dd98c69041e28afecb014b28056103c796d4f9f1256180d85152685e02ea051da769e5be7044ef0ae54a08f4fa26a63df5d1bcdbe41b9749aa6d429cd3352006c8") (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:17 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x602) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) 00:22:17 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x3e92c0) 00:22:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:17 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x2aa, 0x1a3802) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={0x0, 0x2}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0xfffffffffffffff9, 0xe8, 0x5, 0x3, 0x4342, 0x9}, &(0x7f0000000080)={0x3, 0x6, 0x5, 0x0, 0x0, 0x5, 0x167, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x2, 0x9b4, 0x31, 0x8001, 0x8, 0x1, 0x80000000}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0x4]}, 0x8}) 00:22:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_pts(r0, 0x42100) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 00:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r3}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x602) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) 00:22:18 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x2aa, 0x1a3802) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={0x0, 0x2}) (async) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async) pselect6(0x40, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0xfffffffffffffff9, 0xe8, 0x5, 0x3, 0x4342, 0x9}, &(0x7f0000000080)={0x3, 0x6, 0x5, 0x0, 0x0, 0x5, 0x167, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x2, 0x9b4, 0x31, 0x8001, 0x8, 0x1, 0x80000000}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0x4]}, 0x8}) 00:22:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_pts(r0, 0x42100) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 00:22:18 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x602) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x602) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000040)) (async) 00:22:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_pts(r0, 0x42100) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCNXCL(r2, 0x540d) 00:22:18 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x2aa, 0x1a3802) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={0x0, 0x2}) (rerun: 32) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) (async, rerun: 64) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0xfffffffffffffff9, 0xe8, 0x5, 0x3, 0x4342, 0x9}, &(0x7f0000000080)={0x3, 0x6, 0x5, 0x0, 0x0, 0x5, 0x167, 0x1}, &(0x7f00000000c0)={0x8000000000000000, 0x2, 0x9b4, 0x31, 0x8001, 0x8, 0x1, 0x80000000}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0x4]}, 0x8}) 00:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)) (async) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 4: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x202000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 00:22:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) 00:22:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x511400) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 4: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x202000) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (rerun: 32) 00:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)) 00:22:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) (async) 00:22:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) 00:22:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x511400) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x511400) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) (async) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 4: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x202000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x202000) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (async) 00:22:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x5) 00:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/246) 00:22:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x511400) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) 00:22:18 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x121280) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x5a1001) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x783e, 0x1, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) 00:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/246) 00:22:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xe48, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r3}) 00:22:18 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x121280) 00:22:18 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:18 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x5a1001) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x783e, 0x1, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) syz_open_pts(0xffffffffffffffff, 0x5a1001) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x783e, 0x1, 0x8}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/246) 00:22:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xe48, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) syz_open_dev$dri(&(0x7f0000000000), 0xe48, 0x2) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r3}) (async) 00:22:19 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x121280) syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x121280) (async) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 00:22:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 00:22:19 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x5a1001) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x783e, 0x1, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) syz_open_pts(0xffffffffffffffff, 0x5a1001) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x783e, 0x1, 0x8}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:19 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xe48, 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000080)={r3}) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x3, 0x0, 0x0, @msi={0x1, 0x1ff00, 0x7, 0x10000}}]}) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 00:22:19 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x53, 0x303280) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:22:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'vlan1\x00', 0x7, 0x4}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x3, 0x0, 0x0, @msi={0x1, 0x1ff00, 0x7, 0x10000}}]}) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'vlan1\x00', 0x7, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x53, 0x303280) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0x3, 0x0, 0x0, @msi={0x1, 0x1ff00, 0x7, 0x10000}}]}) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0x53, 0x303280) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:22:19 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000000)={'vlan1\x00', 0x7, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) eventfd2(0xffffffff, 0x800) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000000)={'macvlan1\x00', 0x0, 0x3f}) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x9, 0x2, 0x0, 0x0, 0x400, 0x10, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xf58a}, 0x0, 0x4, 0x3, 0x7, 0x5, 0xffffffff, 0x7ff, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:19 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) eventfd2(0xffffffff, 0x800) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) (async, rerun: 32) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000000)={'macvlan1\x00', 0x0, 0x3f}) (rerun: 32) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x9, 0x2, 0x0, 0x0, 0x400, 0x10, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xf58a}, 0x0, 0x4, 0x3, 0x7, 0x5, 0xffffffff, 0x7ff, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:19 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) (async) 00:22:19 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:19 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x9, 0x2, 0x0, 0x0, 0x400, 0x10, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xf58a}, 0x0, 0x4, 0x3, 0x7, 0x5, 0xffffffff, 0x7ff, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x5, 0x9, 0x2, 0x0, 0x0, 0x400, 0x10, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xf58a}, 0x0, 0x4, 0x3, 0x7, 0x5, 0xffffffff, 0x7ff, 0x0, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xb) (async) 00:22:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) eventfd2(0xffffffff, 0x800) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000000)={'macvlan1\x00', 0x0, 0x3f}) 00:22:19 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:20 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x406242) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x20}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x400000) ioctl$KDSKBLED(r1, 0x4b65, 0xca4) syz_open_pts(r0, 0xc0084) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 3: syz_open_dev$dri(&(0x7f0000000080), 0x53, 0x303280) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x45}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={0x0, 0x2}) 00:22:20 executing program 1: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/15) syz_open_dev$dri(&(0x7f0000000000), 0xa619, 0x0) 00:22:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) 00:22:20 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x406242) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x20}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_pts(0xffffffffffffffff, 0x406242) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x20}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x400000) ioctl$KDSKBLED(r1, 0x4b65, 0xca4) syz_open_pts(r0, 0xc0084) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_pts(r0, 0x400000) (async) ioctl$KDSKBLED(r1, 0x4b65, 0xca4) (async) syz_open_pts(r0, 0xc0084) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:20 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x406242) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x20}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_pts(0xffffffffffffffff, 0x406242) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x20}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:20 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 1: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/15) (async) syz_open_dev$dri(&(0x7f0000000000), 0xa619, 0x0) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:20 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 1: ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000040)=""/15) syz_open_dev$dri(&(0x7f0000000000), 0xa619, 0x0) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x400000) ioctl$KDSKBLED(r1, 0x4b65, 0xca4) (async) syz_open_pts(r0, 0xc0084) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x6803, 0x0) 00:22:20 executing program 4: mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) bind$rose(r0, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000240)=0x400, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/82}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000001c0)={r3, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000300)={r5, 0x2}) 00:22:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x2) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:20 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x531b83) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x230000) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x401, 0x4) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:20 executing program 4: mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) bind$rose(r0, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000240)=0x400, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/82}) (async) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000001c0)={r3, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000300)={r5, 0x2}) 00:22:20 executing program 0: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"fe3b84bd1530a6ee5125ce60a68414094bd022d29c2bb2477520f034aced26cf", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) r3 = eventfd2(0x7ff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r5, 0x1}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0a017fa10200b748326191a581dfffffff0000000023000900", r0}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x7d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x2fc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}, {{0x8, 0x1, r3}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x531b83) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x230000) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) (async) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x401, 0x4) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x2) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x2) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0xffff, 0x531b83) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x230000) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}]}) (rerun: 32) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x401, 0x4) 00:22:20 executing program 4: mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) bind$rose(r0, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000240)=0x400, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/82}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000001c0)={r3, 0x1}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000300)={r5, 0x2}) 00:22:20 executing program 3: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:22:20 executing program 0: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"fe3b84bd1530a6ee5125ce60a68414094bd022d29c2bb2477520f034aced26cf", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) (async) r3 = eventfd2(0x7ff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r5, 0x1}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0a017fa10200b748326191a581dfffffff0000000023000900", r0}) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x14000000000000, 0x0) 00:22:20 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:22:20 executing program 3: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"fe3b84bd1530a6ee5125ce60a68414094bd022d29c2bb2477520f034aced26cf", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) r3 = eventfd2(0x7ff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r5, 0x1}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0a017fa10200b748326191a581dfffffff0000000023000900", r0}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 0: ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"fe3b84bd1530a6ee5125ce60a68414094bd022d29c2bb2477520f034aced26cf", 0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) r3 = eventfd2(0x7ff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) r5 = eventfd2(0x7ff, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x4, r5, 0x1}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0a017fa10200b748326191a581dfffffff0000000023000900", r0}) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) 00:22:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="573b29b79490908782e97340414d6dd8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x13, 0x3, &(0x7f0000000040)=0x1}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:20 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) 00:22:20 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x14000000000000, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x14000000000000, 0x0) (async) 00:22:20 executing program 3: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:22:20 executing program 2: ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x100006, "89c714f36a5b5d5a97790000000000000f00000800"}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x2000fffc, "3769d35d7e9302951ea2a507fbebb46c6c215600000000000000000000081600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3587699e6571361a6341042d7a4288e2eacc43654280f91412da99e25ee51ef4", r3}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x6803, 0x0) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 00:22:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="573b29b79490908782e97340414d6dd8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x1) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x13, 0x3, &(0x7f0000000040)=0x1}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:20 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x14000000000000, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x14000000000000, 0x0) (async) 00:22:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f00000003c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) accept4$x25(r4, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x80800) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000000c0)) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01064c2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f00000001c0)=""/154}) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'team_slave_1\x00', 0x3, 0x200}) 00:22:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="573b29b79490908782e97340414d6dd8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x13, 0x3, &(0x7f0000000040)=0x1}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="573b29b79490908782e97340414d6dd8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040810}, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x13, 0x3, &(0x7f0000000040)=0x1}) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000100) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x3a0, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xbd, 0x1, 0x9, 0x9}, {0x0, 0x5, 0x7f, 0x4}]}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x4, 0x5}, {0x0, 0x8, 0x3f, 0x1d9111a}, {0xd544, 0x3, 0x5, 0x5}, {0x100, 0x8, 0x0, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000140)={0x9, 0x1, 0x100, 0x2, 0x20, 0x10, 0xe, "90bbdc129688a7e182ec79000efd9014fd81e35c", "53c44f080fb77c332a756b76590e55929741aa3b"}) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x5, 0xffffffff, 0xc1}) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000002c0)={0xff, 0x20}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000080)={0x6, 0x2, 0x2000, 0x1, 0x5, 0x0, 0x1f, "8715106fd1c26012d0e5a4fbcf6b313651a77882", "38f11e6d2a337c83bf1878235dacb62447415745"}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:20 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 00:22:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 00:22:20 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x80000) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) 00:22:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 00:22:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:20 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x141800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0x5, 0x9, 0x0, 0x8}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000001) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000000c0)) 00:22:20 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x80000) 00:22:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) 00:22:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)={0x578, r2, 0x400, 0x70bd2a, 0x7, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r3}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x611}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x24008041}, 0x48000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x400, 0x7, 0x0, 0x0, @adapter={0x5, 0xe5, 0x80, 0x2aa, 0x81}}, {0x9, 0x3, 0x0, 0x0, @msi={0xfffffffa, 0xc2, 0x400, 0x8}}, {0xfffffffb, 0x2, 0x0, 0x0, @sint={0x52b, 0x5c5}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x401, 0x1}}, {0x1, 0x4, 0x0, 0x0, @adapter={0x7fffffff, 0x7ff, 0x0, 0x2, 0x101}}]}) 00:22:21 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x80000) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000014) 00:22:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x7c6a7bd0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x6, 0x2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000040)=@dgm={0x25, 0xe22a}, 0x18) 00:22:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x6, 0x9, 0x8, 0x0, 0x0, 0x10000, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3ff, 0x6}, 0x3482, 0x7, 0x2, 0x1, 0x91, 0x3ff, 0xf001, 0x0, 0x7fff, 0x0, 0x100000001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$KDENABIO(r3, 0x4b36) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x1, @perf_config_ext={0xfff, 0x965}, 0x11000, 0x0, 0x3, 0x4, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x0, 0x8f6}, 0xffffffffffffffff, 0xc, r2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)={0x578, r2, 0x400, 0x70bd2a, 0x7, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r3}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x611}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x24008041}, 0x48000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x4}) (async, rerun: 64) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x400, 0x7, 0x0, 0x0, @adapter={0x5, 0xe5, 0x80, 0x2aa, 0x81}}, {0x9, 0x3, 0x0, 0x0, @msi={0xfffffffa, 0xc2, 0x400, 0x8}}, {0xfffffffb, 0x2, 0x0, 0x0, @sint={0x52b, 0x5c5}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x401, 0x1}}, {0x1, 0x4, 0x0, 0x0, @adapter={0x7fffffff, 0x7ff, 0x0, 0x2, 0x101}}]}) (rerun: 64) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x7c6a7bd0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x6, 0x2}) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x7}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000040)=@dgm={0x25, 0xe22a}, 0x18) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000014) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000014) (async) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x20000381, &(0x7f0000000140)}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/68}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:21 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 00:22:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)={0x578, r2, 0x400, 0x70bd2a, 0x7, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r3}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x611}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x24008041}, 0x48000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x400, 0x7, 0x0, 0x0, @adapter={0x5, 0xe5, 0x80, 0x2aa, 0x81}}, {0x9, 0x3, 0x0, 0x0, @msi={0xfffffffa, 0xc2, 0x400, 0x8}}, {0xfffffffb, 0x2, 0x0, 0x0, @sint={0x52b, 0x5c5}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x401, 0x1}}, {0x1, 0x4, 0x0, 0x0, @adapter={0x7fffffff, 0x7ff, 0x0, 0x2, 0x101}}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000240)={0x578, r2, 0x400, 0x70bd2a, 0x7, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r3}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x611}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x24008041}, 0x48000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000040)={0x5, 0x0, [{0x400, 0x7, 0x0, 0x0, @adapter={0x5, 0xe5, 0x80, 0x2aa, 0x81}}, {0x9, 0x3, 0x0, 0x0, @msi={0xfffffffa, 0xc2, 0x400, 0x8}}, {0xfffffffb, 0x2, 0x0, 0x0, @sint={0x52b, 0x5c5}}, {0x9, 0x3, 0x0, 0x0, @irqchip={0x401, 0x1}}, {0x1, 0x4, 0x0, 0x0, @adapter={0x7fffffff, 0x7ff, 0x0, 0x2, 0x101}}]}) (async) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000014) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x10000014) (async) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x20000381, &(0x7f0000000140)}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/68}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x7c6a7bd0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x6, 0x2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x7}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x101200) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r2, &(0x7f0000000040)=@dgm={0x25, 0xe22a}, 0x18) 00:22:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_pts(r0, 0x401) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0040070000000800000000024c7f0070006700003529907800000000e000000244149643ac1414bb00000000e000000200010000442c42210a010100000000060000000000000071ac1e0001000000006401010200000eaee2000001000000034408334000000fff441481d0b4410000000500000401000000080000"]}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x7e, 0x101000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:22:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041844) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/250) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x352f97d76330acd6}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x20000381, &(0x7f0000000140)}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/68}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x20000381, &(0x7f0000000140)}) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000080)=""/68}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) 00:22:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_pts(r0, 0x401) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0040070000000800000000024c7f0070006700003529907800000000e000000244149643ac1414bb00000000e000000200010000442c42210a010100000000060000000000000071ac1e0001000000006401010200000eaee2000001000000034408334000000fff441481d0b4410000000500000401000000080000"]}) (async) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x7e, 0x101000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:21 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000008b424b57a516c74a2a55f8207fb3aff7", @ANYRES16=r0, @ANYBLOB="02002cbd7000fbdbdf25030000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) 00:22:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0040070000000800000000024c7f0070006700003529907800000000e000000244149643ac1414bb00000000e000000200010000442c42210a010100000000060000000000000071ac1e0001000000006401010200000eaee2000001000000034408334000000fff441481d0b4410000000500000401000000080000"]}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x7e, 0x101000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0040070000000800000000024c7f0070006700003529907800000000e000000244149643ac1414bb00000000e000000200010000442c42210a010100000000060000000000000071ac1e0001000000006401010200000eaee2000001000000034408334000000fff441481d0b4410000000500000401000000080000"]}) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x7e, 0x101000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000200)) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 00:22:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x90080) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/149) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4ea880) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000001c0)) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_pts(r0, 0x401) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_pts(r0, 0x401) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) (async) 00:22:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) r2 = eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1, r2}) 00:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041844) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/250) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x352f97d76330acd6}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60040, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041844) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) (async) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/250) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x352f97d76330acd6}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) (async) 00:22:21 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000008b424b57a516c74a2a55f8207fb3aff7", @ANYRES16=r0, @ANYBLOB="02002cbd7000fbdbdf25030000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe00000000000, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) 00:22:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60040, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041844) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/250) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x352f97d76330acd6}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) 00:22:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) eventfd2(0x2, 0x80800) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 00:22:21 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000008b424b57a516c74a2a55f8207fb3aff7", @ANYRES16=r0, @ANYBLOB="02002cbd7000fbdbdf25030000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000008b424b57a516c74a2a55f8207fb3aff7", @ANYRES16=r0, @ANYBLOB="02002cbd7000fbdbdf25030000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x4000) (async) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe00000000000, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x2) (async) syz_open_dev$dri(&(0x7f0000000100), 0xe00000000000, 0x200000) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) (async) 00:22:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0xdf3a, 0x2, 0x5}, 0x2, 0xfffffffffffffe00}) 00:22:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) eventfd2(0x2, 0x80800) 00:22:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000080)={0xc9, 0x0, 0xc}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x15}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000340)={r3, 0x3, &(0x7f0000000240)=[0x10001, 0xfffffffc, 0xfffffff7], &(0x7f0000000280)=[0x7, 0x81, 0x200, 0xfffff800, 0x5, 0x7, 0xdee7], 0x77, 0x5, 0x4, &(0x7f00000002c0)=[0x5, 0x76, 0x4, 0x0, 0x401], &(0x7f0000000300)=[0x7, 0x8, 0x0, 0x0, 0x1, 0x2, 0x7]}) 00:22:21 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) eventfd2(0x2, 0x80800) 00:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60040, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041844) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = eventfd2(0x7ff, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000000c0)) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000380)=""/250) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x352f97d76330acd6}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) 00:22:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0xdf3a, 0x2, 0x5}, 0x2, 0xfffffffffffffe00}) 00:22:21 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0xe00000000000, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x2) (async) syz_open_dev$dri(&(0x7f0000000100), 0xe00000000000, 0x200000) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000000c0)={r2}) (async) 00:22:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = eventfd2(0x7ff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000080)={0xc9, 0x0, 0xc}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x15}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000340)={r3, 0x3, &(0x7f0000000240)=[0x10001, 0xfffffffc, 0xfffffff7], &(0x7f0000000280)=[0x7, 0x81, 0x200, 0xfffff800, 0x5, 0x7, 0xdee7], 0x77, 0x5, 0x4, &(0x7f00000002c0)=[0x5, 0x76, 0x4, 0x0, 0x401], &(0x7f0000000300)=[0x7, 0x8, 0x0, 0x0, 0x1, 0x2, 0x7]}) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x111200) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x28}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) 00:22:21 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000000c0)) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x2, 0xdf3a, 0x2, 0x5}, 0x2, 0xfffffffffffffe00}) 00:22:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000040)={'wlan1\x00', 0xfffffffffffffff9, 0x6f9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = eventfd2(0x7ff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000080)={0xc9, 0x0, 0xc}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x15}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000340)={r3, 0x3, &(0x7f0000000240)=[0x10001, 0xfffffffc, 0xfffffff7], &(0x7f0000000280)=[0x7, 0x81, 0x200, 0xfffff800, 0x5, 0x7, 0xdee7], 0x77, 0x5, 0x4, &(0x7f00000002c0)=[0x5, 0x76, 0x4, 0x0, 0x401], &(0x7f0000000300)=[0x7, 0x8, 0x0, 0x0, 0x1, 0x2, 0x7]}) 00:22:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, 0x0, 0x80) 00:22:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x111200) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x28}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x111200) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x28}) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) (async) 00:22:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:21 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 4: r0 = eventfd2(0x7ff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x4000) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x800) 00:22:22 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) (async, rerun: 64) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000040)={'wlan1\x00', 0xfffffffffffffff9, 0x6f9}) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x111200) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x28}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x111200) (async) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x28}) (async) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) (async) 00:22:22 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) (async) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000040)={'wlan1\x00', 0xfffffffffffffff9, 0x6f9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000040)={'wlan1\x00', 0xfffffffffffffff9, 0x6f9}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 4: r0 = eventfd2(0x7ff, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x4000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x800) 00:22:22 executing program 3: r0 = eventfd2(0x7ff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x4000) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x800) 00:22:22 executing program 1: getgroups(0x4, &(0x7f0000000040)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01]) r3 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, r0, 0x4bb1a3ed3d9f5ba, 0x8e}, 0xdb9a, 0x29d, 0x2f1, 0x5, 0x0, r3, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x101200) getgroups(0x2, &(0x7f0000000100)=[r2, r2]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, r1, 0x0, r4, 0x52, 0x7fff}, 0xff, 0x5, 0xc5, 0x31, r3, r3, 0x1f}) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) (async) 00:22:22 executing program 4: r0 = eventfd2(0x7ff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x4000) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x800) eventfd2(0x7ff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000040)=0x4000) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x800) (async) 00:22:22 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x5, 0x0, 0x7], 0xac8144d17b76d7f6, 0x2, 0x4, &(0x7f0000000180)=[0x5, 0x4], &(0x7f00000001c0)=[0x4, 0x2d9, 0x7]}) clock_gettime(0x2, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:22 executing program 1: getgroups(0x4, &(0x7f0000000040)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01]) r3 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, r0, 0x4bb1a3ed3d9f5ba, 0x8e}, 0xdb9a, 0x29d, 0x2f1, 0x5, 0x0, r3, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x101200) getgroups(0x2, &(0x7f0000000100)=[r2, r2]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, r1, 0x0, r4, 0x52, 0x7fff}, 0xff, 0x5, 0xc5, 0x31, r3, r3, 0x1f}) getgroups(0x4, &(0x7f0000000040)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01]) (async) getpgrp(0x0) (async) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, r0, 0x4bb1a3ed3d9f5ba, 0x8e}, 0xdb9a, 0x29d, 0x2f1, 0x5, 0x0, r3, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x101200) (async) getgroups(0x2, &(0x7f0000000100)=[r2, r2]) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, r1, 0x0, r4, 0x52, 0x7fff}, 0xff, 0x5, 0xc5, 0x31, r3, r3, 0x1f}) (async) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x5, 0x0, 0x7], 0xac8144d17b76d7f6, 0x2, 0x4, &(0x7f0000000180)=[0x5, 0x4], &(0x7f00000001c0)=[0x4, 0x2d9, 0x7]}) clock_gettime(0x2, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x5, 0x0, 0x7], 0xac8144d17b76d7f6, 0x2, 0x4, &(0x7f0000000180)=[0x5, 0x4], &(0x7f00000001c0)=[0x4, 0x2d9, 0x7]}) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000080)=""/117) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x8003f) 00:22:22 executing program 4: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x3}) 00:22:22 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000080)=""/117) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) (async, rerun: 64) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x8003f) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:22 executing program 4: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = eventfd2(0x7ff, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x3}) 00:22:22 executing program 1: getgroups(0x4, &(0x7f0000000040)=[0x0, 0xee00, 0xffffffffffffffff, 0xee01]) (async) r3 = getpgrp(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x0, 0xee01, 0x0, 0xffffffffffffffff, r0, 0x4bb1a3ed3d9f5ba, 0x8e}, 0xdb9a, 0x29d, 0x2f1, 0x5, 0x0, r3, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x101200) (async) getgroups(0x2, &(0x7f0000000100)=[r2, r2]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xee01, r1, 0x0, r4, 0x52, 0x7fff}, 0xff, 0x5, 0xc5, 0x31, r3, r3, 0x1f}) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x5, 0x0, 0x7], 0xac8144d17b76d7f6, 0x2, 0x4, &(0x7f0000000180)=[0x5, 0x4], &(0x7f00000001c0)=[0x4, 0x2d9, 0x7]}) (async) clock_gettime(0x2, &(0x7f0000000000)) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000080)=""/117) (async, rerun: 64) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) (async, rerun: 64) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x8003f) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x2, 0x5, 0xffffffff, 0x8, 0xf1, 0x0, 0xb9a8], 0x46, 0x0, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=[0x8, 0x1]}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) 00:22:22 executing program 4: ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={0x0, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x3}) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x2, 0x5, 0xffffffff, 0x8, 0xf1, 0x0, 0xb9a8], 0x46, 0x0, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=[0x8, 0x1]}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:22 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0xa20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:22:22 executing program 0: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendto$rose(r1, &(0x7f0000000140)="a5a67015cc3b60dd16c3dcb5437f67e261eac0465fd5ce32f24d740b32f0e2e5427f93663052f54b3767488e0d4758d18944c62e154e76ad97771c4dbe5cd1af5b22c8a83947a737381f5cac2751a4c0aa048881cdbd9d345920ec4f7d579c95033171e4ea1cbde989261d213daed7fdd1a9de10b406ae0d75bfa7e1bc611b100b7480681279c4535a6b39d30b9f88777c8928f679ba85466874f4700174d3da62d3ad48357cd2152f5d0a42cc444d0d15e9be8633af70cbdc793375dcae3d75f4af2aa55f74f63be3223499935ac0abf507189979660e55e05fcee4c7bad282d6d65c81b79eb2ac2c153bf8441fad77a6d6a4772bbc9a5ceb5334b9508596f4bc553bd33f6cffa2e206dd6fd223b9ad1c287edd0a9d7c28231ea8914d4a35dbdcd507b4113d5f854420749567846e985de35bb839e4a65fb1e04673a3a97d00d343ec894bda6f6023ba640f0740df52a2623e93937ccab2f77383ae97c3a01e7ddffae2861245de2599341941a3b95bb71fb2fcc158d1cd5864c1f4de95ee5ce96e0145c2ebf400152a52604515b7f0870b0ea792ed2ea640e8e641d7ed8a758a53bfbfe78a91ecc3ed99ee72210b4e02f20923de8597ab4168a75d0c40212d3db11a7a12168f985a84b6eedff1d3dbf3aa69114f7e3c60ff5ebe0f4e6c1ec107121f1e8def628501204625a82d32a67b6431ba0089c933d82b2ce5fdef8fd2bf8fde06a8a248032314aec2ae4dff24c34f85c25be8bc848d79eafb6df5876533fa0051124d1f1844e396131d8c4ae524975f2f5cfb4a3b10610873c140ea15ad2138f0a0edd004354ac281f8289f91d5fe06d345c00ec290d656ebe55d0d84f812770bcef45ae176d429c62efea601083d265ab85545382b9aa566092389fbdb4b86e34eb6a30835a0f2ce3b366678a0af9d179439998b77327710bc16c513124fb347ee392567c59c950d937cad357a12d48d7c85beea0caf3c17460fb70e8073d6f3409b6e21d25e89e50ce43df3d71cc2ce81c123045801667350fa01df5073127b8b14d297cb3831c9aed6e39b4b300898d81335cbf9f691489a7b07947929ac6636d29ef890e26df92a4bfda4bc7e1612b6186e247d578a8b71ebc3f3d4edf4e4375124a0a6c2127d552ea17c6c4b9479b821a2ff7713c85ecdf00f21bb811816cd0fa777514c594c926fb890ec519864ac3a49bc58690313078f1c5be610d2463f4463f0c96e46290e9f0a2aad77f081a84b1d7e001f66761163da82d710f2379817da8958a0300deb77bce6df3603bfc7f51554e97c149578b93739bc8d39e9f10399bc45dc417f519c68677551e347c4b9ec1ddb484b2cd1339a2a1474f55ba0c263e48440c97ebaff6a6f2e336f984b1169c6859453687afa402762d96184ba75c1382faa61ab8807eb88ea5e1aa569baba127fb17a09b7384b6dee0aeff0236afff9b893e40469a5ca0a87824d8aebce7edf6137407a394c793b56d7f8292945b1c8a93345697c45c6b69e3dff446374b223fe65d160ea73efa98f8c6a21691ba6a420be39708bff968a85ed3b18a0974280a27e32563b21427720ca574007f53e6dd1072cb16106b3dfab6cd32d2efcc9f16ab36ab41f96043e25aec902cfc7646161973283035b49fe19363f4e32e352eaea6013f14dd68d69071727a3ad98fa4b9fabfe0cbe174a0d38c3607ea900c52a939cc727dc5e21617aec5cb23c1f9b63f2040f792a7735a3683bceadb0e5fa8f7e2aa7d2a244fb46bab416be4eef199e6778638e9fe173e1d7fff1f6be5301386aa6bb1ec24e1afed89ea509df8e217faf14bf0d85656dc680c3986c76e2550ba9f5aa2b1321b44a7d5e768d2659ef503eea1d4d5f773f515718a679ea4c4a09ca10a795647d241729b1b88b58350c7d5b302f7f37cd0f3ad9972443359ee69f9ab206d3ec93940fb3325371eb3f90d26210775ca239c6fef636dd0d587519bbc45c929d9d24fa88cd9f500b7e529d70b37d31bfe2c013718ab927822471c7db7529f50073127c057f324d0d5eda5aa43743ada560066779baa07bd4def75552b5a2bf059bda73311d0a09a0c30df18f99dac5d6c6e789cfd86a6e05fe599d9b82587b20dd04f90cb45b7267c58a6f532faf37934a5e2bda7dbe74deb36344031a7b0ddb48d61a2f6e10e8e3f957104714ac260cba2bb6904fbbe66ac3cbacfdc7fb4090412090823a761e382ed9c6d94c7273652b7e90e27decf6c19e8f2075e491529848a09ea12ab99d60efac8479b42cbb309d4f050f754456214512488b2fd639e6b8823bfd45c98848ae34989f337fb67078b69d1c9100bc3e3f691ff10aa38ab1a81b741dd6ee6006530a3dc3ef0ac60ee264da98c5cde3b47f31769cd584de1b33d16aa2fdf5db909dca16e89aae9a8100099d02f2bb4beda4a15afc22699ae9c7a27d874412e083c91d652759e154200c4fba1e9df038389d8cfe5b42038ee46dca25ae7da26d3dcd62bbff32b4dc7e7b27031342f3aaa54a187559b343a0856ad8c733f2a4622177aeafe3ae1988ccf393e353f2cf8e92e3bf82a4e3dcd3026bdb8c307cac6e22895e2e9e02d6746b0776c4f9bd0924ce1e29694503f44515aa26c44b9794ab44b1b82d88ed4720f179bb8176a01caf5bb4f0e4ef20704a7e7eb84ddead1b4e35b06692f7a0eee4bf4c2548bcc1dd35fe2a03404294deaaca922d011b7a078ee3982fb95ddb28f0e928e86ccc367c684a539d1308d3969f2a8c077b04497e583cea8baed2cc040415e9420c443a2239102f846ab09aa082871495195134452c362d3473bd0c99c53c228ea173be222039f8e3d92a83ec7ff14406d788beeefcb78b3afcb2d874c371a5803cb067a42491af953e312927b54f91f82c83459001087fa4bcac9d61e8008bd15182d36e784019cd0064866e1e24a666c4015efc6f52a0d44e1c7ea9b399e9f4aa659bebb26c7c26fab1f77df75270018278542f70e9588d7c98f43b889073d50142090b725fa8f5bb4803fb2368c894ebef8689ffa8b3c537f99c467c04a934489d9a948511015c645af2e17e25dfdca88332df1564d8f1dc8cb40743d649220f7f0870c92c72b8a49eee2ec03989c7899786d3dd57f6d816c8348fc73d7a9216f149a0a09d4f3217dea806ebbc982440510dc26ae744c8249d2f5111fb3eb2b1aa52f0836c9f4c257e61974a6e5797ab77621e28734336a7c83449fb62561f9f9d56a1a37be801d7d237b68ff643102239a54235c25cc57dd8dfc3a8b5592efa1e3e907da5a9daa0de15384ab0a209599594b3f1425e7ef45a46da8e2b73618462f296340ddf9f30911f0d8e20640fa2280708287fce38252c66d3fc72797414c56cfed5ba01cee630db95c0f2683b08f3e76b2dea0d57d96a618cc716fbace7debe151ce36835691bd56f48e7e03665c54908b60e7030fa6731674c869ba3d5658d56ae348e4137e081fa1dedfd0e6da613b3b47be5a04192e60f2039f40a3d2ab3352f9148dbc737387e0d45f5c870c40c97d65004e12ab7cc8cc538e2e1e1012e43c095ea850ab87bda1ca3283fcd2bb2e0d41b9c59a901a651807356c463e2f4cb697c10573e7a5fd474876ad124e81bafde8d0797d3a4d73ccb79394f545c5bde536546c6751879624bbd4b727f2e636bc6aad91d98ad78da746d3f447d18b7b4ece92637a87846c5ccd3324be94351ee4ebf48dc510905e27e33a0a0bf0acc2c9ad7140d694e541b238d6ba5f75a556d07555ebe7a8491c4954cc4babddb6160ac46b70ebc5fd880b06e7cc0ae46da2e67bcb8b651e7c4890832dc8b9c00b0fb7432346ae1f2e528babd881e1c2995fd4007c10bda2b1b098b91c2fe5077b286135d70a0e9448d0977e9cddffac3b4b3dee25680d5637db583b7793e650a5891a9d7ad693c1d984bb1a5148b6413e144a89886c711bfc0bfb065c638bed69c7c0d46d441f8982f678b0a3ae05be9b5d12360542720720a2611ee1980c26d89bc4d2dc01e757baac3f9649e79a0621ec6c6982d6a64a5698b5d8970fc1dd11fe7d866f7ff9cf944c249cc04eabce037e0272f1fcdffdcc1422822f3d1e940e5f46a36c11fae88c095d9c143c3da654d02eef69c92e54912fdd17dbc65c436ebd312b12fff9d8fbcdc7538561e4f528e52a20bc4ac69023a67ac24cf0122a0dd0f3b465be84871f553aa6d417fb3a409d97b436a599747c5e19b33319de488286ab842d5a83bb6c0dcfcf3cccaf137e3df7020b4490b4ad1541f7395b5bdb9d9d0964618c09caad3c69d63eede03af130fa01a07a8d06d84e5d24d49eaf0f16a8f7837dabda793b9ddacad7334ded28950f7f2e615d3dea750a07f15780a0e1fe5636b3c1c5e58f1186b07b68a45ce055f0c520eead6410870fbdb457f7bcfa5df5bb01d3823df7f862e85c93e28d0b2f30374c0a000434bc5369f9068cdb0aba05c38875e475fb036c992f417ba04efc38271cd95c385c58c0e121198203644a06834bc12aa5fab5dbb1cf03c9428a1b17eeccec7ac156a3149b47cd33607067b3cc8426d24b0c8063ade70b944738f2bcf8323adf14e5473864b0e018980d0a3b18f50d4a8eb62e96e06d928f73af52fbf17004f2ccd7b5628c0ae89a653979026272f71a8e3cb81c29c3344fc98e7408c4efd6aa86034dcf879ef8bdfb4ab8841d584e99ab5963fa25a6c651386efaa963a42b4e9c29c456e6facc4ab91589cae6893cf5a60e71f396e5f0f3cbec1fdc8b9ec1180dc0e74d0e5451c949d60af36babb4b076e8dba160f66aa935d134e78e2772ff7e39f30ebf4bd8814c44dbf3ad8b5b83930aad6cf7080ec518281ce01b060a7d15285c224e213b68543c03cf0429042106e48bef0ac8cb1fa3ffc0a39959f21b714ea08e62b190d0db310791875ec6bc0f1d8b3fd4d9f38b46de72eab5c954249e6f2f0292eaf59f92968f96290a3d136b1e42e34ca0ee867d782be9a4e21361dbae934662b6c9e5ee20d08e1ef169ddee9a9f08f7edefddb34a53a9bebd39873e24b77a6929d56e4d9a72387e83746dc9db4de4939f8a22fe88d26cbac2f1c3060973172d3f751ed3cf1a7ed6ce27d6aaa9e98393b3a9dfb8e70c8bd63b29e1a2cb50792cf231dc9158f5744e07a88bc53a2abd8bec448cba8ac01c93e628cb88c5460075ff9579bfdec8c8552a01ec2b1c14cde5f299c5a9e1544b120ee8896e1814a55e5e98afa7168e43a3dccbe00c26af0c9db6d58858ba2cd8eff2d668419df4499352c0881a01e58bb56cec300379a198daf6942dec0a713eed816edae0bb60e538eb66ce95f0e446732badda1fa1cbb831d45695ee9ecea6b2f256757fb3ef24045632f1eac78eaf35760cc96c817a451566701c600948cf5afb6c3b3491af3a50b521404e2b0e202dd58f8493ce98656164be2ca740576a7aa95299430103b29573b8222ff8c3eb61c81d708934906384cfcef8be36cb1bfeebb0f4be600c759e7c5e0f1931e97f0edd45a82e6ad78a3c61320b5b1561ba6424b22e9f02f9a25c74aa3fd7730eed64e27fc424fcbf6ba74c40ddd8ba883c6c70789e15ff630bb8a23d42db23bc3ad45f049e97e00bab9b5f52549bc6f309e264e4d9b0e363ad60ef802f6e63ad9884a4a35d512d3f55300dfbf6595ee963b3385c5a79f68850e4a387d072b7fe1eca3914f1e58e1867fd37a08ef6b2d0ff5c7d98c2f27bd419e96d4cbad1f26dd2cfb7236d5a0b92e9fcdf75d6e1bb7b180937818e081d0fecf6b6475b4d67aad01e21a77b58bfd174144440682ec", 0x1000, 0x0, &(0x7f0000001140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@remote, @bcast, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x40, 0x100000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDSKBLED(r2, 0x4b65, 0x8) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:22 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0xa20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0xa20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:22:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x2, 0x5, 0xffffffff, 0x8, 0xf1, 0x0, 0xb9a8], 0x46, 0x0, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=[0x8, 0x1]}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x2, 0x5, 0xffffffff, 0x8, 0xf1, 0x0, 0xb9a8], 0x46, 0x0, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=[0x8, 0x1]}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) (async) 00:22:22 executing program 0: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendto$rose(r1, &(0x7f0000000140)="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", 0x1000, 0x0, &(0x7f0000001140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@remote, @bcast, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x40, 0x100000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDSKBLED(r2, 0x4b65, 0x8) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) (async) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) (async) sendto$rose(r1, &(0x7f0000000140)="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", 0x1000, 0x0, &(0x7f0000001140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@remote, @bcast, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x40, 0x100000) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x8) (async) 00:22:22 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0xa20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0xa20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 00:22:22 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 00:22:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x92000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffffffffffff) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:22 executing program 0: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendto$rose(r1, &(0x7f0000000140)="a5a67015cc3b60dd16c3dcb5437f67e261eac0465fd5ce32f24d740b32f0e2e5427f93663052f54b3767488e0d4758d18944c62e154e76ad97771c4dbe5cd1af5b22c8a83947a737381f5cac2751a4c0aa048881cdbd9d345920ec4f7d579c95033171e4ea1cbde989261d213daed7fdd1a9de10b406ae0d75bfa7e1bc611b100b7480681279c4535a6b39d30b9f88777c8928f679ba85466874f4700174d3da62d3ad48357cd2152f5d0a42cc444d0d15e9be8633af70cbdc793375dcae3d75f4af2aa55f74f63be3223499935ac0abf507189979660e55e05fcee4c7bad282d6d65c81b79eb2ac2c153bf8441fad77a6d6a4772bbc9a5ceb5334b9508596f4bc553bd33f6cffa2e206dd6fd223b9ad1c287edd0a9d7c28231ea8914d4a35dbdcd507b4113d5f854420749567846e985de35bb839e4a65fb1e04673a3a97d00d343ec894bda6f6023ba640f0740df52a2623e93937ccab2f77383ae97c3a01e7ddffae2861245de2599341941a3b95bb71fb2fcc158d1cd5864c1f4de95ee5ce96e0145c2ebf400152a52604515b7f0870b0ea792ed2ea640e8e641d7ed8a758a53bfbfe78a91ecc3ed99ee72210b4e02f20923de8597ab4168a75d0c40212d3db11a7a12168f985a84b6eedff1d3dbf3aa69114f7e3c60ff5ebe0f4e6c1ec107121f1e8def628501204625a82d32a67b6431ba0089c933d82b2ce5fdef8fd2bf8fde06a8a248032314aec2ae4dff24c34f85c25be8bc848d79eafb6df5876533fa0051124d1f1844e396131d8c4ae524975f2f5cfb4a3b10610873c140ea15ad2138f0a0edd004354ac281f8289f91d5fe06d345c00ec290d656ebe55d0d84f812770bcef45ae176d429c62efea601083d265ab85545382b9aa566092389fbdb4b86e34eb6a30835a0f2ce3b366678a0af9d179439998b77327710bc16c513124fb347ee392567c59c950d937cad357a12d48d7c85beea0caf3c17460fb70e8073d6f3409b6e21d25e89e50ce43df3d71cc2ce81c123045801667350fa01df5073127b8b14d297cb3831c9aed6e39b4b300898d81335cbf9f691489a7b07947929ac6636d29ef890e26df92a4bfda4bc7e1612b6186e247d578a8b71ebc3f3d4edf4e4375124a0a6c2127d552ea17c6c4b9479b821a2ff7713c85ecdf00f21bb811816cd0fa777514c594c926fb890ec519864ac3a49bc58690313078f1c5be610d2463f4463f0c96e46290e9f0a2aad77f081a84b1d7e001f66761163da82d710f2379817da8958a0300deb77bce6df3603bfc7f51554e97c149578b93739bc8d39e9f10399bc45dc417f519c68677551e347c4b9ec1ddb484b2cd1339a2a1474f55ba0c263e48440c97ebaff6a6f2e336f984b1169c6859453687afa402762d96184ba75c1382faa61ab8807eb88ea5e1aa569baba127fb17a09b7384b6dee0aeff0236afff9b893e40469a5ca0a87824d8aebce7edf6137407a394c793b56d7f8292945b1c8a93345697c45c6b69e3dff446374b223fe65d160ea73efa98f8c6a21691ba6a420be39708bff968a85ed3b18a0974280a27e32563b21427720ca574007f53e6dd1072cb16106b3dfab6cd32d2efcc9f16ab36ab41f96043e25aec902cfc7646161973283035b49fe19363f4e32e352eaea6013f14dd68d69071727a3ad98fa4b9fabfe0cbe174a0d38c3607ea900c52a939cc727dc5e21617aec5cb23c1f9b63f2040f792a7735a3683bceadb0e5fa8f7e2aa7d2a244fb46bab416be4eef199e6778638e9fe173e1d7fff1f6be5301386aa6bb1ec24e1afed89ea509df8e217faf14bf0d85656dc680c3986c76e2550ba9f5aa2b1321b44a7d5e768d2659ef503eea1d4d5f773f515718a679ea4c4a09ca10a795647d241729b1b88b58350c7d5b302f7f37cd0f3ad9972443359ee69f9ab206d3ec93940fb3325371eb3f90d26210775ca239c6fef636dd0d587519bbc45c929d9d24fa88cd9f500b7e529d70b37d31bfe2c013718ab927822471c7db7529f50073127c057f324d0d5eda5aa43743ada560066779baa07bd4def75552b5a2bf059bda73311d0a09a0c30df18f99dac5d6c6e789cfd86a6e05fe599d9b82587b20dd04f90cb45b7267c58a6f532faf37934a5e2bda7dbe74deb36344031a7b0ddb48d61a2f6e10e8e3f957104714ac260cba2bb6904fbbe66ac3cbacfdc7fb4090412090823a761e382ed9c6d94c7273652b7e90e27decf6c19e8f2075e491529848a09ea12ab99d60efac8479b42cbb309d4f050f754456214512488b2fd639e6b8823bfd45c98848ae34989f337fb67078b69d1c9100bc3e3f691ff10aa38ab1a81b741dd6ee6006530a3dc3ef0ac60ee264da98c5cde3b47f31769cd584de1b33d16aa2fdf5db909dca16e89aae9a8100099d02f2bb4beda4a15afc22699ae9c7a27d874412e083c91d652759e154200c4fba1e9df038389d8cfe5b42038ee46dca25ae7da26d3dcd62bbff32b4dc7e7b27031342f3aaa54a187559b343a0856ad8c733f2a4622177aeafe3ae1988ccf393e353f2cf8e92e3bf82a4e3dcd3026bdb8c307cac6e22895e2e9e02d6746b0776c4f9bd0924ce1e29694503f44515aa26c44b9794ab44b1b82d88ed4720f179bb8176a01caf5bb4f0e4ef20704a7e7eb84ddead1b4e35b06692f7a0eee4bf4c2548bcc1dd35fe2a03404294deaaca922d011b7a078ee3982fb95ddb28f0e928e86ccc367c684a539d1308d3969f2a8c077b04497e583cea8baed2cc040415e9420c443a2239102f846ab09aa082871495195134452c362d3473bd0c99c53c228ea173be222039f8e3d92a83ec7ff14406d788beeefcb78b3afcb2d874c371a5803cb067a42491af953e312927b54f91f82c83459001087fa4bcac9d61e8008bd15182d36e784019cd0064866e1e24a666c4015efc6f52a0d44e1c7ea9b399e9f4aa659bebb26c7c26fab1f77df75270018278542f70e9588d7c98f43b889073d50142090b725fa8f5bb4803fb2368c894ebef8689ffa8b3c537f99c467c04a934489d9a948511015c645af2e17e25dfdca88332df1564d8f1dc8cb40743d649220f7f0870c92c72b8a49eee2ec03989c7899786d3dd57f6d816c8348fc73d7a9216f149a0a09d4f3217dea806ebbc982440510dc26ae744c8249d2f5111fb3eb2b1aa52f0836c9f4c257e61974a6e5797ab77621e28734336a7c83449fb62561f9f9d56a1a37be801d7d237b68ff643102239a54235c25cc57dd8dfc3a8b5592efa1e3e907da5a9daa0de15384ab0a209599594b3f1425e7ef45a46da8e2b73618462f296340ddf9f30911f0d8e20640fa2280708287fce38252c66d3fc72797414c56cfed5ba01cee630db95c0f2683b08f3e76b2dea0d57d96a618cc716fbace7debe151ce36835691bd56f48e7e03665c54908b60e7030fa6731674c869ba3d5658d56ae348e4137e081fa1dedfd0e6da613b3b47be5a04192e60f2039f40a3d2ab3352f9148dbc737387e0d45f5c870c40c97d65004e12ab7cc8cc538e2e1e1012e43c095ea850ab87bda1ca3283fcd2bb2e0d41b9c59a901a651807356c463e2f4cb697c10573e7a5fd474876ad124e81bafde8d0797d3a4d73ccb79394f545c5bde536546c6751879624bbd4b727f2e636bc6aad91d98ad78da746d3f447d18b7b4ece92637a87846c5ccd3324be94351ee4ebf48dc510905e27e33a0a0bf0acc2c9ad7140d694e541b238d6ba5f75a556d07555ebe7a8491c4954cc4babddb6160ac46b70ebc5fd880b06e7cc0ae46da2e67bcb8b651e7c4890832dc8b9c00b0fb7432346ae1f2e528babd881e1c2995fd4007c10bda2b1b098b91c2fe5077b286135d70a0e9448d0977e9cddffac3b4b3dee25680d5637db583b7793e650a5891a9d7ad693c1d984bb1a5148b6413e144a89886c711bfc0bfb065c638bed69c7c0d46d441f8982f678b0a3ae05be9b5d12360542720720a2611ee1980c26d89bc4d2dc01e757baac3f9649e79a0621ec6c6982d6a64a5698b5d8970fc1dd11fe7d866f7ff9cf944c249cc04eabce037e0272f1fcdffdcc1422822f3d1e940e5f46a36c11fae88c095d9c143c3da654d02eef69c92e54912fdd17dbc65c436ebd312b12fff9d8fbcdc7538561e4f528e52a20bc4ac69023a67ac24cf0122a0dd0f3b465be84871f553aa6d417fb3a409d97b436a599747c5e19b33319de488286ab842d5a83bb6c0dcfcf3cccaf137e3df7020b4490b4ad1541f7395b5bdb9d9d0964618c09caad3c69d63eede03af130fa01a07a8d06d84e5d24d49eaf0f16a8f7837dabda793b9ddacad7334ded28950f7f2e615d3dea750a07f15780a0e1fe5636b3c1c5e58f1186b07b68a45ce055f0c520eead6410870fbdb457f7bcfa5df5bb01d3823df7f862e85c93e28d0b2f30374c0a000434bc5369f9068cdb0aba05c38875e475fb036c992f417ba04efc38271cd95c385c58c0e121198203644a06834bc12aa5fab5dbb1cf03c9428a1b17eeccec7ac156a3149b47cd33607067b3cc8426d24b0c8063ade70b944738f2bcf8323adf14e5473864b0e018980d0a3b18f50d4a8eb62e96e06d928f73af52fbf17004f2ccd7b5628c0ae89a653979026272f71a8e3cb81c29c3344fc98e7408c4efd6aa86034dcf879ef8bdfb4ab8841d584e99ab5963fa25a6c651386efaa963a42b4e9c29c456e6facc4ab91589cae6893cf5a60e71f396e5f0f3cbec1fdc8b9ec1180dc0e74d0e5451c949d60af36babb4b076e8dba160f66aa935d134e78e2772ff7e39f30ebf4bd8814c44dbf3ad8b5b83930aad6cf7080ec518281ce01b060a7d15285c224e213b68543c03cf0429042106e48bef0ac8cb1fa3ffc0a39959f21b714ea08e62b190d0db310791875ec6bc0f1d8b3fd4d9f38b46de72eab5c954249e6f2f0292eaf59f92968f96290a3d136b1e42e34ca0ee867d782be9a4e21361dbae934662b6c9e5ee20d08e1ef169ddee9a9f08f7edefddb34a53a9bebd39873e24b77a6929d56e4d9a72387e83746dc9db4de4939f8a22fe88d26cbac2f1c3060973172d3f751ed3cf1a7ed6ce27d6aaa9e98393b3a9dfb8e70c8bd63b29e1a2cb50792cf231dc9158f5744e07a88bc53a2abd8bec448cba8ac01c93e628cb88c5460075ff9579bfdec8c8552a01ec2b1c14cde5f299c5a9e1544b120ee8896e1814a55e5e98afa7168e43a3dccbe00c26af0c9db6d58858ba2cd8eff2d668419df4499352c0881a01e58bb56cec300379a198daf6942dec0a713eed816edae0bb60e538eb66ce95f0e446732badda1fa1cbb831d45695ee9ecea6b2f256757fb3ef24045632f1eac78eaf35760cc96c817a451566701c600948cf5afb6c3b3491af3a50b521404e2b0e202dd58f8493ce98656164be2ca740576a7aa95299430103b29573b8222ff8c3eb61c81d708934906384cfcef8be36cb1bfeebb0f4be600c759e7c5e0f1931e97f0edd45a82e6ad78a3c61320b5b1561ba6424b22e9f02f9a25c74aa3fd7730eed64e27fc424fcbf6ba74c40ddd8ba883c6c70789e15ff630bb8a23d42db23bc3ad45f049e97e00bab9b5f52549bc6f309e264e4d9b0e363ad60ef802f6e63ad9884a4a35d512d3f55300dfbf6595ee963b3385c5a79f68850e4a387d072b7fe1eca3914f1e58e1867fd37a08ef6b2d0ff5c7d98c2f27bd419e96d4cbad1f26dd2cfb7236d5a0b92e9fcdf75d6e1bb7b180937818e081d0fecf6b6475b4d67aad01e21a77b58bfd174144440682ec", 0x1000, 0x0, &(0x7f0000001140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@remote, @bcast, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x40, 0x100000) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$KDSKBLED(r2, 0x4b65, 0x8) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 00:22:22 executing program 2: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000080)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), 0x4) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendto$rose(r1, &(0x7f0000000140)="a5a67015cc3b60dd16c3dcb5437f67e261eac0465fd5ce32f24d740b32f0e2e5427f93663052f54b3767488e0d4758d18944c62e154e76ad97771c4dbe5cd1af5b22c8a83947a737381f5cac2751a4c0aa048881cdbd9d345920ec4f7d579c95033171e4ea1cbde989261d213daed7fdd1a9de10b406ae0d75bfa7e1bc611b100b7480681279c4535a6b39d30b9f88777c8928f679ba85466874f4700174d3da62d3ad48357cd2152f5d0a42cc444d0d15e9be8633af70cbdc793375dcae3d75f4af2aa55f74f63be3223499935ac0abf507189979660e55e05fcee4c7bad282d6d65c81b79eb2ac2c153bf8441fad77a6d6a4772bbc9a5ceb5334b9508596f4bc553bd33f6cffa2e206dd6fd223b9ad1c287edd0a9d7c28231ea8914d4a35dbdcd507b4113d5f854420749567846e985de35bb839e4a65fb1e04673a3a97d00d343ec894bda6f6023ba640f0740df52a2623e93937ccab2f77383ae97c3a01e7ddffae2861245de2599341941a3b95bb71fb2fcc158d1cd5864c1f4de95ee5ce96e0145c2ebf400152a52604515b7f0870b0ea792ed2ea640e8e641d7ed8a758a53bfbfe78a91ecc3ed99ee72210b4e02f20923de8597ab4168a75d0c40212d3db11a7a12168f985a84b6eedff1d3dbf3aa69114f7e3c60ff5ebe0f4e6c1ec107121f1e8def628501204625a82d32a67b6431ba0089c933d82b2ce5fdef8fd2bf8fde06a8a248032314aec2ae4dff24c34f85c25be8bc848d79eafb6df5876533fa0051124d1f1844e396131d8c4ae524975f2f5cfb4a3b10610873c140ea15ad2138f0a0edd004354ac281f8289f91d5fe06d345c00ec290d656ebe55d0d84f812770bcef45ae176d429c62efea601083d265ab85545382b9aa566092389fbdb4b86e34eb6a30835a0f2ce3b366678a0af9d179439998b77327710bc16c513124fb347ee392567c59c950d937cad357a12d48d7c85beea0caf3c17460fb70e8073d6f3409b6e21d25e89e50ce43df3d71cc2ce81c123045801667350fa01df5073127b8b14d297cb3831c9aed6e39b4b300898d81335cbf9f691489a7b07947929ac6636d29ef890e26df92a4bfda4bc7e1612b6186e247d578a8b71ebc3f3d4edf4e4375124a0a6c2127d552ea17c6c4b9479b821a2ff7713c85ecdf00f21bb811816cd0fa777514c594c926fb890ec519864ac3a49bc58690313078f1c5be610d2463f4463f0c96e46290e9f0a2aad77f081a84b1d7e001f66761163da82d710f2379817da8958a0300deb77bce6df3603bfc7f51554e97c149578b93739bc8d39e9f10399bc45dc417f519c68677551e347c4b9ec1ddb484b2cd1339a2a1474f55ba0c263e48440c97ebaff6a6f2e336f984b1169c6859453687afa402762d96184ba75c1382faa61ab8807eb88ea5e1aa569baba127fb17a09b7384b6dee0aeff0236afff9b893e40469a5ca0a87824d8aebce7edf6137407a394c793b56d7f8292945b1c8a93345697c45c6b69e3dff446374b223fe65d160ea73efa98f8c6a21691ba6a420be39708bff968a85ed3b18a0974280a27e32563b21427720ca574007f53e6dd1072cb16106b3dfab6cd32d2efcc9f16ab36ab41f96043e25aec902cfc7646161973283035b49fe19363f4e32e352eaea6013f14dd68d69071727a3ad98fa4b9fabfe0cbe174a0d38c3607ea900c52a939cc727dc5e21617aec5cb23c1f9b63f2040f792a7735a3683bceadb0e5fa8f7e2aa7d2a244fb46bab416be4eef199e6778638e9fe173e1d7fff1f6be5301386aa6bb1ec24e1afed89ea509df8e217faf14bf0d85656dc680c3986c76e2550ba9f5aa2b1321b44a7d5e768d2659ef503eea1d4d5f773f515718a679ea4c4a09ca10a795647d241729b1b88b58350c7d5b302f7f37cd0f3ad9972443359ee69f9ab206d3ec93940fb3325371eb3f90d26210775ca239c6fef636dd0d587519bbc45c929d9d24fa88cd9f500b7e529d70b37d31bfe2c013718ab927822471c7db7529f50073127c057f324d0d5eda5aa43743ada560066779baa07bd4def75552b5a2bf059bda73311d0a09a0c30df18f99dac5d6c6e789cfd86a6e05fe599d9b82587b20dd04f90cb45b7267c58a6f532faf37934a5e2bda7dbe74deb36344031a7b0ddb48d61a2f6e10e8e3f957104714ac260cba2bb6904fbbe66ac3cbacfdc7fb4090412090823a761e382ed9c6d94c7273652b7e90e27decf6c19e8f2075e491529848a09ea12ab99d60efac8479b42cbb309d4f050f754456214512488b2fd639e6b8823bfd45c98848ae34989f337fb67078b69d1c9100bc3e3f691ff10aa38ab1a81b741dd6ee6006530a3dc3ef0ac60ee264da98c5cde3b47f31769cd584de1b33d16aa2fdf5db909dca16e89aae9a8100099d02f2bb4beda4a15afc22699ae9c7a27d874412e083c91d652759e154200c4fba1e9df038389d8cfe5b42038ee46dca25ae7da26d3dcd62bbff32b4dc7e7b27031342f3aaa54a187559b343a0856ad8c733f2a4622177aeafe3ae1988ccf393e353f2cf8e92e3bf82a4e3dcd3026bdb8c307cac6e22895e2e9e02d6746b0776c4f9bd0924ce1e29694503f44515aa26c44b9794ab44b1b82d88ed4720f179bb8176a01caf5bb4f0e4ef20704a7e7eb84ddead1b4e35b06692f7a0eee4bf4c2548bcc1dd35fe2a03404294deaaca922d011b7a078ee3982fb95ddb28f0e928e86ccc367c684a539d1308d3969f2a8c077b04497e583cea8baed2cc040415e9420c443a2239102f846ab09aa082871495195134452c362d3473bd0c99c53c228ea173be222039f8e3d92a83ec7ff14406d788beeefcb78b3afcb2d874c371a5803cb067a42491af953e312927b54f91f82c83459001087fa4bcac9d61e8008bd15182d36e784019cd0064866e1e24a666c4015efc6f52a0d44e1c7ea9b399e9f4aa659bebb26c7c26fab1f77df75270018278542f70e9588d7c98f43b889073d50142090b725fa8f5bb4803fb2368c894ebef8689ffa8b3c537f99c467c04a934489d9a948511015c645af2e17e25dfdca88332df1564d8f1dc8cb40743d649220f7f0870c92c72b8a49eee2ec03989c7899786d3dd57f6d816c8348fc73d7a9216f149a0a09d4f3217dea806ebbc982440510dc26ae744c8249d2f5111fb3eb2b1aa52f0836c9f4c257e61974a6e5797ab77621e28734336a7c83449fb62561f9f9d56a1a37be801d7d237b68ff643102239a54235c25cc57dd8dfc3a8b5592efa1e3e907da5a9daa0de15384ab0a209599594b3f1425e7ef45a46da8e2b73618462f296340ddf9f30911f0d8e20640fa2280708287fce38252c66d3fc72797414c56cfed5ba01cee630db95c0f2683b08f3e76b2dea0d57d96a618cc716fbace7debe151ce36835691bd56f48e7e03665c54908b60e7030fa6731674c869ba3d5658d56ae348e4137e081fa1dedfd0e6da613b3b47be5a04192e60f2039f40a3d2ab3352f9148dbc737387e0d45f5c870c40c97d65004e12ab7cc8cc538e2e1e1012e43c095ea850ab87bda1ca3283fcd2bb2e0d41b9c59a901a651807356c463e2f4cb697c10573e7a5fd474876ad124e81bafde8d0797d3a4d73ccb79394f545c5bde536546c6751879624bbd4b727f2e636bc6aad91d98ad78da746d3f447d18b7b4ece92637a87846c5ccd3324be94351ee4ebf48dc510905e27e33a0a0bf0acc2c9ad7140d694e541b238d6ba5f75a556d07555ebe7a8491c4954cc4babddb6160ac46b70ebc5fd880b06e7cc0ae46da2e67bcb8b651e7c4890832dc8b9c00b0fb7432346ae1f2e528babd881e1c2995fd4007c10bda2b1b098b91c2fe5077b286135d70a0e9448d0977e9cddffac3b4b3dee25680d5637db583b7793e650a5891a9d7ad693c1d984bb1a5148b6413e144a89886c711bfc0bfb065c638bed69c7c0d46d441f8982f678b0a3ae05be9b5d12360542720720a2611ee1980c26d89bc4d2dc01e757baac3f9649e79a0621ec6c6982d6a64a5698b5d8970fc1dd11fe7d866f7ff9cf944c249cc04eabce037e0272f1fcdffdcc1422822f3d1e940e5f46a36c11fae88c095d9c143c3da654d02eef69c92e54912fdd17dbc65c436ebd312b12fff9d8fbcdc7538561e4f528e52a20bc4ac69023a67ac24cf0122a0dd0f3b465be84871f553aa6d417fb3a409d97b436a599747c5e19b33319de488286ab842d5a83bb6c0dcfcf3cccaf137e3df7020b4490b4ad1541f7395b5bdb9d9d0964618c09caad3c69d63eede03af130fa01a07a8d06d84e5d24d49eaf0f16a8f7837dabda793b9ddacad7334ded28950f7f2e615d3dea750a07f15780a0e1fe5636b3c1c5e58f1186b07b68a45ce055f0c520eead6410870fbdb457f7bcfa5df5bb01d3823df7f862e85c93e28d0b2f30374c0a000434bc5369f9068cdb0aba05c38875e475fb036c992f417ba04efc38271cd95c385c58c0e121198203644a06834bc12aa5fab5dbb1cf03c9428a1b17eeccec7ac156a3149b47cd33607067b3cc8426d24b0c8063ade70b944738f2bcf8323adf14e5473864b0e018980d0a3b18f50d4a8eb62e96e06d928f73af52fbf17004f2ccd7b5628c0ae89a653979026272f71a8e3cb81c29c3344fc98e7408c4efd6aa86034dcf879ef8bdfb4ab8841d584e99ab5963fa25a6c651386efaa963a42b4e9c29c456e6facc4ab91589cae6893cf5a60e71f396e5f0f3cbec1fdc8b9ec1180dc0e74d0e5451c949d60af36babb4b076e8dba160f66aa935d134e78e2772ff7e39f30ebf4bd8814c44dbf3ad8b5b83930aad6cf7080ec518281ce01b060a7d15285c224e213b68543c03cf0429042106e48bef0ac8cb1fa3ffc0a39959f21b714ea08e62b190d0db310791875ec6bc0f1d8b3fd4d9f38b46de72eab5c954249e6f2f0292eaf59f92968f96290a3d136b1e42e34ca0ee867d782be9a4e21361dbae934662b6c9e5ee20d08e1ef169ddee9a9f08f7edefddb34a53a9bebd39873e24b77a6929d56e4d9a72387e83746dc9db4de4939f8a22fe88d26cbac2f1c3060973172d3f751ed3cf1a7ed6ce27d6aaa9e98393b3a9dfb8e70c8bd63b29e1a2cb50792cf231dc9158f5744e07a88bc53a2abd8bec448cba8ac01c93e628cb88c5460075ff9579bfdec8c8552a01ec2b1c14cde5f299c5a9e1544b120ee8896e1814a55e5e98afa7168e43a3dccbe00c26af0c9db6d58858ba2cd8eff2d668419df4499352c0881a01e58bb56cec300379a198daf6942dec0a713eed816edae0bb60e538eb66ce95f0e446732badda1fa1cbb831d45695ee9ecea6b2f256757fb3ef24045632f1eac78eaf35760cc96c817a451566701c600948cf5afb6c3b3491af3a50b521404e2b0e202dd58f8493ce98656164be2ca740576a7aa95299430103b29573b8222ff8c3eb61c81d708934906384cfcef8be36cb1bfeebb0f4be600c759e7c5e0f1931e97f0edd45a82e6ad78a3c61320b5b1561ba6424b22e9f02f9a25c74aa3fd7730eed64e27fc424fcbf6ba74c40ddd8ba883c6c70789e15ff630bb8a23d42db23bc3ad45f049e97e00bab9b5f52549bc6f309e264e4d9b0e363ad60ef802f6e63ad9884a4a35d512d3f55300dfbf6595ee963b3385c5a79f68850e4a387d072b7fe1eca3914f1e58e1867fd37a08ef6b2d0ff5c7d98c2f27bd419e96d4cbad1f26dd2cfb7236d5a0b92e9fcdf75d6e1bb7b180937818e081d0fecf6b6475b4d67aad01e21a77b58bfd174144440682ec", 0x1000, 0x0, &(0x7f0000001140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @dev, @remote, 0x0, [@remote, @bcast, @rose, @netrom, @bcast, @rose]}, &(0x7f0000000040)=0x40, 0x100000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDSKBLED(r2, 0x4b65, 0x8) 00:22:22 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 00:22:22 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x92000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:22 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x210f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:22 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:22 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x92000) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) 00:22:22 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x210f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="684b73fdb994b77bf653765302b0086b75613b6f5c50e597fb1e71385fba80b68981ef5f8a48501dda8c2cd701c31583efa7b29f191aff3fa1374cee647ec8f288cbc6ad45b90d57c5caf36b2d75c4fac658ae42d11b1b92d9d600b82373fbec619aea57624d1699dda0ef4348817f578d8ae0acdef5660d55700a30ebaf2ed21b74ad79187a", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) syz_open_pts(r2, 0x20041) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0xff}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xa436dab930375401}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 00:22:23 executing program 5: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x210f) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="684b73fdb994b77bf653765302b0086b75613b6f5c50e597fb1e71385fba80b68981ef5f8a48501dda8c2cd701c31583efa7b29f191aff3fa1374cee647ec8f288cbc6ad45b90d57c5caf36b2d75c4fac658ae42d11b1b92d9d600b82373fbec619aea57624d1699dda0ef4348817f578d8ae0acdef5660d55700a30ebaf2ed21b74ad79187a", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) (async) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async, rerun: 32) syz_open_pts(r2, 0x20041) (rerun: 32) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0xff}) (async, rerun: 32) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xa436dab930375401}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x4, 0x538, 0x800, 0x2, 0x5, 0x26, 0x1, "b8ee230f576f028b19db88c19762cb62134430c2", "f70850ea335554a74fc5b9fac4d9414b6bea924c"}) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:22:23 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="684b73fdb994b77bf653765302b0086b75613b6f5c50e597fb1e71385fba80b68981ef5f8a48501dda8c2cd701c31583efa7b29f191aff3fa1374cee647ec8f288cbc6ad45b90d57c5caf36b2d75c4fac658ae42d11b1b92d9d600b82373fbec619aea57624d1699dda0ef4348817f578d8ae0acdef5660d55700a30ebaf2ed21b74ad79187a", @ANYRES16=r1, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_open_pts(r2, 0x20041) 00:22:23 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x462340, 0x0) ioctl$KDENABIO(r1, 0x4b36) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0xff}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xa436dab930375401}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x2, 0xff}) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={0x0, 0xa436dab930375401}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x4, 0x538, 0x800, 0x2, 0x5, 0x26, 0x1, "b8ee230f576f028b19db88c19762cb62134430c2", "f70850ea335554a74fc5b9fac4d9414b6bea924c"}) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x462340, 0x0) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x462340, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x4, 0x538, 0x800, 0x2, 0x5, 0x26, 0x1, "b8ee230f576f028b19db88c19762cb62134430c2", "f70850ea335554a74fc5b9fac4d9414b6bea924c"}) 00:22:23 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x400000008, 0x381200) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200000) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x50}) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x400000008, 0x381200) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x200) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200000) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x50}) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd28, 0x7fff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200000, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x6, 0x81, 0x1ff}]}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0xec}}, 0x80) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r6, &(0x7f00000001c0)=@dgm={0x25, 0x100, 0x2}, 0x18) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:23 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x462340, 0x0) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x462340, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000180)) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x400000008, 0x381200) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x200000) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000040)={0x0, 0x50}) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x5) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd28, 0x7fff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200000, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c800) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x6, 0x81, 0x1ff}]}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0xec}}, 0x80) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r6, &(0x7f00000001c0)=@dgm={0x25, 0x100, 0x2}, 0x18) (async) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x14Y\x10\xc6a\x9d\x04\xfeI\xf6\xdb\xa9\x82\x9d\xab[Q=7\x02\xbb\xce\xaf/\xa5\xa8\xc7\x14J\xca\xb0J\x0f\xe1s\x89\x98\t\xb5\xcb\x15\x88\x95\x1d6\xa4\xc7~\x17,\x84;\f\xce\x8c\xea}\vg\xdf\xac\xa4\xf6\x06\xe3{\xa3h\x95\xe0\x1dD\xf9\xc4Y >dE\xb9\xfc\xaf\xb6\x83\x87+\x0f8\xe2\xc9\xa7\'\x86_s\xb9\x7f#\x1a\xfdv\xd3-\xa7[n\xd4\x16\\.\x8c5\xd0L\xb3\x1cH\xf4\xda\xfaq!L=\x98\xff\xe8\x99s\xfb\xec\xf8;\x14\x8a\xb1\xfc\xc0\x8d\x01v\xac\xbd\x02#\xd1\xee\x9a\xc0\xbfFd\xeb\xab\xa5X!\xd6\x8d\xab\xaf,\xd2h\xfd\xc3ly\x04qh\xe7\xa0\xb8\x1c\xed\x11\xe0\xb6\x98Q\r\xd3*\xdf\xc5_\xed\xd2\x05\xd1\xf0\x00>\xd7'}, @NLBL_MGMT_A_IPV4ADDR={0xffffffffffffffe5, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x3}) 00:22:23 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd28, 0x7fff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200000, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4c800) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x6, 0x81, 0x1ff}]}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0xec}}, 0x80) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r6, &(0x7f00000001c0)=@dgm={0x25, 0x100, 0x2}, 0x18) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x3}) 00:22:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x14Y\x10\xc6a\x9d\x04\xfeI\xf6\xdb\xa9\x82\x9d\xab[Q=7\x02\xbb\xce\xaf/\xa5\xa8\xc7\x14J\xca\xb0J\x0f\xe1s\x89\x98\t\xb5\xcb\x15\x88\x95\x1d6\xa4\xc7~\x17,\x84;\f\xce\x8c\xea}\vg\xdf\xac\xa4\xf6\x06\xe3{\xa3h\x95\xe0\x1dD\xf9\xc4Y >dE\xb9\xfc\xaf\xb6\x83\x87+\x0f8\xe2\xc9\xa7\'\x86_s\xb9\x7f#\x1a\xfdv\xd3-\xa7[n\xd4\x16\\.\x8c5\xd0L\xb3\x1cH\xf4\xda\xfaq!L=\x98\xff\xe8\x99s\xfb\xec\xf8;\x14\x8a\xb1\xfc\xc0\x8d\x01v\xac\xbd\x02#\xd1\xee\x9a\xc0\xbfFd\xeb\xab\xa5X!\xd6\x8d\xab\xaf,\xd2h\xfd\xc3ly\x04qh\xe7\xa0\xb8\x1c\xed\x11\xe0\xb6\x98Q\r\xd3*\xdf\xc5_\xed\xd2\x05\xd1\xf0\x00>\xd7'}, @NLBL_MGMT_A_IPV4ADDR={0xffffffffffffffe5, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) 00:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1, 0x3}) 00:22:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x14Y\x10\xc6a\x9d\x04\xfeI\xf6\xdb\xa9\x82\x9d\xab[Q=7\x02\xbb\xce\xaf/\xa5\xa8\xc7\x14J\xca\xb0J\x0f\xe1s\x89\x98\t\xb5\xcb\x15\x88\x95\x1d6\xa4\xc7~\x17,\x84;\f\xce\x8c\xea}\vg\xdf\xac\xa4\xf6\x06\xe3{\xa3h\x95\xe0\x1dD\xf9\xc4Y >dE\xb9\xfc\xaf\xb6\x83\x87+\x0f8\xe2\xc9\xa7\'\x86_s\xb9\x7f#\x1a\xfdv\xd3-\xa7[n\xd4\x16\\.\x8c5\xd0L\xb3\x1cH\xf4\xda\xfaq!L=\x98\xff\xe8\x99s\xfb\xec\xf8;\x14\x8a\xb1\xfc\xc0\x8d\x01v\xac\xbd\x02#\xd1\xee\x9a\xc0\xbfFd\xeb\xab\xa5X!\xd6\x8d\xab\xaf,\xd2h\xfd\xc3ly\x04qh\xe7\xa0\xb8\x1c\xed\x11\xe0\xb6\x98Q\r\xd3*\xdf\xc5_\xed\xd2\x05\xd1\xf0\x00>\xd7'}, @NLBL_MGMT_A_IPV4ADDR={0xffffffffffffffe5, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) 00:22:23 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:23 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:23 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="b9a20900000f32660f29ec652e2e420fc7b5312e0000c4e2a59710264a0fc76b00c4011115e3410f01cf260f01cb0f080f01c5", 0x33}], 0x1, 0x54, &(0x7f0000000080), 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) socket$nl_generic(0x10, 0x3, 0x10) 00:22:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x14Y\x10\xc6a\x9d\x04\xfeI\xf6\xdb\xa9\x82\x9d\xab[Q=7\x02\xbb\xce\xaf/\xa5\xa8\xc7\x14J\xca\xb0J\x0f\xe1s\x89\x98\t\xb5\xcb\x15\x88\x95\x1d6\xa4\xc7~\x17,\x84;\f\xce\x8c\xea}\vg\xdf\xac\xa4\xf6\x06\xe3{\xa3h\x95\xe0\x1dD\xf9\xc4Y >dE\xb9\xfc\xaf\xb6\x83\x87+\x0f8\xe2\xc9\xa7\'\x86_s\xb9\x7f#\x1a\xfdv\xd3-\xa7[n\xd4\x16\\.\x8c5\xd0L\xb3\x1cH\xf4\xda\xfaq!L=\x98\xff\xe8\x99s\xfb\xec\xf8;\x14\x8a\xb1\xfc\xc0\x8d\x01v\xac\xbd\x02#\xd1\xee\x9a\xc0\xbfFd\xeb\xab\xa5X!\xd6\x8d\xab\xaf,\xd2h\xfd\xc3ly\x04qh\xe7\xa0\xb8\x1c\xed\x11\xe0\xb6\x98Q\r\xd3*\xdf\xc5_\xed\xd2\x05\xd1\xf0\x00>\xd7'}, @NLBL_MGMT_A_IPV4ADDR={0xffffffffffffffe5, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201000c0}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x14Y\x10\xc6a\x9d\x04\xfeI\xf6\xdb\xa9\x82\x9d\xab[Q=7\x02\xbb\xce\xaf/\xa5\xa8\xc7\x14J\xca\xb0J\x0f\xe1s\x89\x98\t\xb5\xcb\x15\x88\x95\x1d6\xa4\xc7~\x17,\x84;\f\xce\x8c\xea}\vg\xdf\xac\xa4\xf6\x06\xe3{\xa3h\x95\xe0\x1dD\xf9\xc4Y >dE\xb9\xfc\xaf\xb6\x83\x87+\x0f8\xe2\xc9\xa7\'\x86_s\xb9\x7f#\x1a\xfdv\xd3-\xa7[n\xd4\x16\\.\x8c5\xd0L\xb3\x1cH\xf4\xda\xfaq!L=\x98\xff\xe8\x99s\xfb\xec\xf8;\x14\x8a\xb1\xfc\xc0\x8d\x01v\xac\xbd\x02#\xd1\xee\x9a\xc0\xbfFd\xeb\xab\xa5X!\xd6\x8d\xab\xaf,\xd2h\xfd\xc3ly\x04qh\xe7\xa0\xb8\x1c\xed\x11\xe0\xb6\x98Q\r\xd3*\xdf\xc5_\xed\xd2\x05\xd1\xf0\x00>\xd7'}, @NLBL_MGMT_A_IPV4ADDR={0xffffffffffffffe5, 0x7, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r5) (async) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) (async) 00:22:24 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="b9a20900000f32660f29ec652e2e420fc7b5312e0000c4e2a59710264a0fc76b00c4011115e3410f01cf260f01cb0f080f01c5", 0x33}], 0x1, 0x54, &(0x7f0000000080), 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="b9a20900000f32660f29ec652e2e420fc7b5312e0000c4e2a59710264a0fc76b00c4011115e3410f01cf260f01cb0f080f01c5", 0x33}], 0x1, 0x54, &(0x7f0000000080), 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 00:22:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xd) 00:22:24 executing program 1: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000000)="b9a20900000f32660f29ec652e2e420fc7b5312e0000c4e2a59710264a0fc76b00c4011115e3410f01cf260f01cb0f080f01c5", 0x33}], 0x1, 0x54, &(0x7f0000000080), 0x0) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:24 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:24 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x80, 0x20, 0x0, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x2, 0x50f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x4, [{@private=0xa010100, 0x4}, {@multicast2, 0x302d}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffc0}]}, @generic={0x7, 0xd, "693dbff0d16e24b8ae63b0"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x20, 0x700, 0x1, 0x4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x19, 0x1, [{0x7, 0x4, "2dcb"}, {0x0, 0xf, "d22ff73105950eea223f676cdb"}]}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x8, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x14, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x7, 0x8, 0x52493c79, 0x48, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x2, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xf6, &(0x7f0000000440)=""/246, 0x41000, 0xb, '\x00', r3, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x57fb, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000880)=[0x1, r5, 0x1]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f40)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x940c}}}]}}, {{0x8}, {0x2f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x6, 0x73, 0xffff8000}, {0x0, 0xe9, 0x60, 0x7f}, {0x7, 0x8, 0xc8, 0x7}, {0x4, 0x9, 0xc8, 0xfff}, {0x4, 0xf6, 0x4, 0x5}, {0x800, 0x20, 0x5c, 0x7f}, {0x3ff, 0x7, 0x8, 0xffff8000}, {0x1, 0x6, 0x63, 0x5}, {0x3, 0x1, 0x1, 0xfffffffc}, {0x2, 0x40, 0xe8, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0x1f, 0x6, 0x5}, {0xae8, 0x7f, 0x4, 0x5}, {0x8001, 0x62, 0x40, 0x210}, {0x6, 0x7f, 0x4d, 0x6}, {0x1, 0x6, 0x7f, 0x81}, {0x9, 0xf0, 0x3}, {0x7, 0x50, 0x7, 0x1}, {0x6, 0xdf, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x6e, 0x2c72000}, {0x3f, 0x6, 0x0, 0x1ff}, {0x2, 0x1, 0x2, 0x3}, {0x8, 0x2, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x8001}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x4b, 0x9}, {0x8, 0x7, 0x53, 0x80000001}]}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x4, 0x4}, {0x80, 0x0, 0x9, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x86000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x218}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x45}, 0x48819) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000000dc0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000e00)=0x1c, 0x80000) setsockopt$rose(r14, 0x104, 0x5, &(0x7f0000000e40)=0x26ca, 0x4) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:24 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x6}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/254, &(0x7f0000000240)=0xfe) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x73, 0x7, 0x0, 0x80}) 00:22:24 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) 00:22:24 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x80, 0x20, 0x0, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x2, 0x50f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x4, [{@private=0xa010100, 0x4}, {@multicast2, 0x302d}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffc0}]}, @generic={0x7, 0xd, "693dbff0d16e24b8ae63b0"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x20, 0x700, 0x1, 0x4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x19, 0x1, [{0x7, 0x4, "2dcb"}, {0x0, 0xf, "d22ff73105950eea223f676cdb"}]}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x8, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x14, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x7, 0x8, 0x52493c79, 0x48, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x2, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xf6, &(0x7f0000000440)=""/246, 0x41000, 0xb, '\x00', r3, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x57fb, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000880)=[0x1, r5, 0x1]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f40)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x940c}}}]}}, {{0x8}, {0x2f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x6, 0x73, 0xffff8000}, {0x0, 0xe9, 0x60, 0x7f}, {0x7, 0x8, 0xc8, 0x7}, {0x4, 0x9, 0xc8, 0xfff}, {0x4, 0xf6, 0x4, 0x5}, {0x800, 0x20, 0x5c, 0x7f}, {0x3ff, 0x7, 0x8, 0xffff8000}, {0x1, 0x6, 0x63, 0x5}, {0x3, 0x1, 0x1, 0xfffffffc}, {0x2, 0x40, 0xe8, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0x1f, 0x6, 0x5}, {0xae8, 0x7f, 0x4, 0x5}, {0x8001, 0x62, 0x40, 0x210}, {0x6, 0x7f, 0x4d, 0x6}, {0x1, 0x6, 0x7f, 0x81}, {0x9, 0xf0, 0x3}, {0x7, 0x50, 0x7, 0x1}, {0x6, 0xdf, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x6e, 0x2c72000}, {0x3f, 0x6, 0x0, 0x1ff}, {0x2, 0x1, 0x2, 0x3}, {0x8, 0x2, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x8001}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x4b, 0x9}, {0x8, 0x7, 0x53, 0x80000001}]}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x4, 0x4}, {0x80, 0x0, 0x9, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x86000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x218}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x45}, 0x48819) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000000dc0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000e00)=0x1c, 0x80000) setsockopt$rose(r14, 0x104, 0x5, &(0x7f0000000e40)=0x26ca, 0x4) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x80, 0x20, 0x0, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x2, 0x50f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x4, [{@private=0xa010100, 0x4}, {@multicast2, 0x302d}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffc0}]}, @generic={0x7, 0xd, "693dbff0d16e24b8ae63b0"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x20, 0x700, 0x1, 0x4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x19, 0x1, [{0x7, 0x4, "2dcb"}, {0x0, 0xf, "d22ff73105950eea223f676cdb"}]}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}, @ra={0x94, 0x4}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x8, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x14, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x7, 0x8, 0x52493c79, 0x48, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x2, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xf6, &(0x7f0000000440)=""/246, 0x41000, 0xb, '\x00', r3, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x57fb, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000880)=[0x1, r5, 0x1]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f40)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x940c}}}]}}, {{0x8}, {0x2f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x6, 0x73, 0xffff8000}, {0x0, 0xe9, 0x60, 0x7f}, {0x7, 0x8, 0xc8, 0x7}, {0x4, 0x9, 0xc8, 0xfff}, {0x4, 0xf6, 0x4, 0x5}, {0x800, 0x20, 0x5c, 0x7f}, {0x3ff, 0x7, 0x8, 0xffff8000}, {0x1, 0x6, 0x63, 0x5}, {0x3, 0x1, 0x1, 0xfffffffc}, {0x2, 0x40, 0xe8, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0x1f, 0x6, 0x5}, {0xae8, 0x7f, 0x4, 0x5}, {0x8001, 0x62, 0x40, 0x210}, {0x6, 0x7f, 0x4d, 0x6}, {0x1, 0x6, 0x7f, 0x81}, {0x9, 0xf0, 0x3}, {0x7, 0x50, 0x7, 0x1}, {0x6, 0xdf, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x6e, 0x2c72000}, {0x3f, 0x6, 0x0, 0x1ff}, {0x2, 0x1, 0x2, 0x3}, {0x8, 0x2, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x8001}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x4b, 0x9}, {0x8, 0x7, 0x53, 0x80000001}]}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x4, 0x4}, {0x80, 0x0, 0x9, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x86000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x218}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x45}, 0x48819) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000dc0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000e00)=0x1c, 0x80000) (async) setsockopt$rose(r14, 0x104, 0x5, &(0x7f0000000e40)=0x26ca, 0x4) (async) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 00:22:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x6}) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/254, &(0x7f0000000240)=0xfe) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x0, 0x2}) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x73, 0x7, 0x0, 0x80}) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x6}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/254, &(0x7f0000000240)=0xfe) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x73, 0x7, 0x0, 0x80}) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 00:22:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x80, 0x20, 0x0, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x2, 0x50f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x4, [{@private=0xa010100, 0x4}, {@multicast2, 0x302d}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffc0}]}, @generic={0x7, 0xd, "693dbff0d16e24b8ae63b0"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x20, 0x700, 0x1, 0x4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x19, 0x1, [{0x7, 0x4, "2dcb"}, {0x0, 0xf, "d22ff73105950eea223f676cdb"}]}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}, @ra={0x94, 0x4}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x8, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x14, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff}, 0x80) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x7, 0x8, 0x52493c79, 0x48, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x2, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xf6, &(0x7f0000000440)=""/246, 0x41000, 0xb, '\x00', r3, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x57fb, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000880)=[0x1, r5, 0x1]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f40)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x940c}}}]}}, {{0x8}, {0x2f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x6, 0x73, 0xffff8000}, {0x0, 0xe9, 0x60, 0x7f}, {0x7, 0x8, 0xc8, 0x7}, {0x4, 0x9, 0xc8, 0xfff}, {0x4, 0xf6, 0x4, 0x5}, {0x800, 0x20, 0x5c, 0x7f}, {0x3ff, 0x7, 0x8, 0xffff8000}, {0x1, 0x6, 0x63, 0x5}, {0x3, 0x1, 0x1, 0xfffffffc}, {0x2, 0x40, 0xe8, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0x1f, 0x6, 0x5}, {0xae8, 0x7f, 0x4, 0x5}, {0x8001, 0x62, 0x40, 0x210}, {0x6, 0x7f, 0x4d, 0x6}, {0x1, 0x6, 0x7f, 0x81}, {0x9, 0xf0, 0x3}, {0x7, 0x50, 0x7, 0x1}, {0x6, 0xdf, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x6e, 0x2c72000}, {0x3f, 0x6, 0x0, 0x1ff}, {0x2, 0x1, 0x2, 0x3}, {0x8, 0x2, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x8001}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x4b, 0x9}, {0x8, 0x7, 0x53, 0x80000001}]}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x4, 0x4}, {0x80, 0x0, 0x9, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x86000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x218}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x45}, 0x48819) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000000dc0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000e00)=0x1c, 0x80000) setsockopt$rose(r14, 0x104, 0x5, &(0x7f0000000e40)=0x26ca, 0x4) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000140)) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x6}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/254, &(0x7f0000000240)=0xfe) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x0, 0x2}) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x73, 0x7, 0x0, 0x80}) 00:22:24 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000000c0)={0x6}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000140)=""/254, &(0x7f0000000240)=0xfe) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x4, 0x1, 0x1, 0x0, 0x2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000080)={0x7, 0x73, 0x7, 0x0, 0x80}) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x0, 0x20, 0xff, 0x2, 0x96f1}) 00:22:24 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffd) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:24 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x0, 0x20, 0xff, 0x2, 0x96f1}) 00:22:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x80, 0x20, 0x0, {{0x9, 0x4, 0x1, 0x4, 0x24, 0x64, 0x0, 0xff, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xf, 0xcd, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x2, 0x50f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x66, 0x1, 0x4, [{@private=0xa010100, 0x4}, {@multicast2, 0x302d}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0xffffffc0}]}, @generic={0x7, 0xd, "693dbff0d16e24b8ae63b0"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x20, 0x700, 0x1, 0x4, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@cipso={0x86, 0x19, 0x1, [{0x7, 0x4, "2dcb"}, {0x0, 0xf, "d22ff73105950eea223f676cdb"}]}, @timestamp_prespec={0x44, 0x14, 0x12, 0x3, 0x3, [{@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}]}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x1, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x8, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x78, &(0x7f0000000680)=""/120, 0x41100, 0x14, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x3, 0x6}, 0x10, 0xffffffffffffffff}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x7, 0x8, 0x52493c79, 0x48, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x2, &(0x7f0000000140)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0xf6, &(0x7f0000000440)=""/246, 0x41000, 0xb, '\x00', r3, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xa, 0x57fb, 0x6}, 0x10, 0x0, r4, 0x0, &(0x7f0000000880)=[0x1, r5, 0x1]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000d40)={&(0x7f0000000f40)={0xc24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x940c}}}]}}, {{0x8}, {0x2f8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x6, 0x73, 0xffff8000}, {0x0, 0xe9, 0x60, 0x7f}, {0x7, 0x8, 0xc8, 0x7}, {0x4, 0x9, 0xc8, 0xfff}, {0x4, 0xf6, 0x4, 0x5}, {0x800, 0x20, 0x5c, 0x7f}, {0x3ff, 0x7, 0x8, 0xffff8000}, {0x1, 0x6, 0x63, 0x5}, {0x3, 0x1, 0x1, 0xfffffffc}, {0x2, 0x40, 0xe8, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0x1f, 0x6, 0x5}, {0xae8, 0x7f, 0x4, 0x5}, {0x8001, 0x62, 0x40, 0x210}, {0x6, 0x7f, 0x4d, 0x6}, {0x1, 0x6, 0x7f, 0x81}, {0x9, 0xf0, 0x3}, {0x7, 0x50, 0x7, 0x1}, {0x6, 0xdf, 0x0, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x6, 0x6e, 0x2c72000}, {0x3f, 0x6, 0x0, 0x1ff}, {0x2, 0x1, 0x2, 0x3}, {0x8, 0x2, 0x5, 0x8}, {0x2, 0x0, 0x1, 0x8001}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x5, 0x4b, 0x9}, {0x8, 0x7, 0x53, 0x80000001}]}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x4, 0x4}, {0x80, 0x0, 0x9, 0x1000}]}}}]}}, {{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x86000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x218}}]}, 0xc24}, 0x1, 0x0, 0x0, 0x45}, 0x48819) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000000dc0)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f0000000e00)=0x1c, 0x80000) setsockopt$rose(r14, 0x104, 0x5, &(0x7f0000000e40)=0x26ca, 0x4) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffd) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffd) (async) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:24 executing program 5: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async, rerun: 32) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x0, 0x20, 0xff, 0x2, 0x96f1}) (rerun: 32) 00:22:24 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x284242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:25 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) 00:22:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffd) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x284242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x284242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x406880, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x7, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0x1, 0xf04, 0x7, 0x91bd}}, {0x27c, 0x3, 0x0, 0x0, @sint={0x5, 0x94d}}, {0x5, 0x3, 0x0, 0x0, @msi={0x4, 0x6, 0x6, 0x6}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x8, 0x6, 0x3, 0x80, 0xea}}, {0x332, 0x4, 0x0, 0x0, @msi={0x100, 0x7, 0x9, 0x7ff}}, {0x7, 0x4, 0x0, 0x0, @sint={0xfffff801, 0xff}}, {0x7, 0x4, 0x0, 0x0, @sint={0x6, 0xffffff5f}}]}) 00:22:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_pts(r0, 0x14602) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd2(0xd, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x17}) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x406880, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x7, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0x1, 0xf04, 0x7, 0x91bd}}, {0x27c, 0x3, 0x0, 0x0, @sint={0x5, 0x94d}}, {0x5, 0x3, 0x0, 0x0, @msi={0x4, 0x6, 0x6, 0x6}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x8, 0x6, 0x3, 0x80, 0xea}}, {0x332, 0x4, 0x0, 0x0, @msi={0x100, 0x7, 0x9, 0x7ff}}, {0x7, 0x4, 0x0, 0x0, @sint={0xfffff801, 0xff}}, {0x7, 0x4, 0x0, 0x0, @sint={0x6, 0xffffff5f}}]}) 00:22:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd2(0xd, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) eventfd2(0xd, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) (async) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) (async) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x406880, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x7, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0x1, 0xf04, 0x7, 0x91bd}}, {0x27c, 0x3, 0x0, 0x0, @sint={0x5, 0x94d}}, {0x5, 0x3, 0x0, 0x0, @msi={0x4, 0x6, 0x6, 0x6}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x8, 0x6, 0x3, 0x80, 0xea}}, {0x332, 0x4, 0x0, 0x0, @msi={0x100, 0x7, 0x9, 0x7ff}}, {0x7, 0x4, 0x0, 0x0, @sint={0xfffff801, 0xff}}, {0x7, 0x4, 0x0, 0x0, @sint={0x6, 0xffffff5f}}]}) 00:22:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd2(0xd, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) 00:22:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd2(0xd, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) eventfd2(0xd, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) (async) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) (async) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) syz_open_pts(r2, 0x80001) ioctl$KDSKBLED(r1, 0x4b65, 0x101) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000000c) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 00:22:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000040)={0x1a, 0x7f}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd2(0xd, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = eventfd2(0x7ff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000100)={0x1, r5, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0xfffffffd, r4, 0x1}) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000000080)) 00:22:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_open_pts(r2, 0x80001) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x101) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000000c) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:25 executing program 4: socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x80000001, 0x1}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x401, 0x8000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=""/227}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x7}) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x26d) 00:22:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$KDENABIO(r0, 0x4b36) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) syz_open_pts(r2, 0x80001) ioctl$KDSKBLED(r1, 0x4b65, 0x101) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000000c) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_open_pts(r2, 0x80001) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x101) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000000c) (async) 00:22:25 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async, rerun: 64) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 64) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x26d) 00:22:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x26d) 00:22:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) 00:22:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPTPEER(r3, 0x5441, 0x26d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x26d) (async) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 00:22:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) (async) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000)) ioctl$TIOCNXCL(r1, 0x540d) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x1000, 0xfa, &(0x7f0000000300)=""/250}, {0x100000, 0x0, &(0x7f00000000c0)}, {0x0, 0xc0, &(0x7f0000000400)=""/192}]}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100"/14], 0x14}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x214, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x1}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x4a}, {0x7c}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x840) 00:22:26 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x7, 0xfc, 0x4, 0x0, 0x3, 0x4000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x492, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8000, 0x8, 0x6, 0x6, 0x635d, 0x4800, 0xb07a, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r7 = eventfd2(0x995, 0x80000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x2, r7}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x2, r2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x7, 0xfc, 0x4, 0x0, 0x3, 0x4000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x492, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8000, 0x8, 0x6, 0x6, 0x635d, 0x4800, 0xb07a, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r7 = eventfd2(0x995, 0x80000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x2, r7}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x2, r2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x7, 0xfc, 0x4, 0x0, 0x3, 0x4000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x492, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8000, 0x8, 0x6, 0x6, 0x635d, 0x4800, 0xb07a, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) (async) syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) (async) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) eventfd2(0x995, 0x80000) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x2, r7}) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r4}) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x2, r2}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:26 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) 00:22:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = eventfd2(0x7ff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x7, 0xfc, 0x4, 0x0, 0x3, 0x4000, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x492, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8000, 0x8, 0x6, 0x6, 0x635d, 0x4800, 0xb07a, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) (async) syz_genetlink_get_family_id$team(&(0x7f0000000180), r6) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) (async) r7 = eventfd2(0x995, 0x80000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x2, r7}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r4}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x2, r2}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) 00:22:26 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:26 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02830000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000ffdbdf25055ef3580a00000008000006000b0006000000019aaab6604991c42f25cd57177033791764b0daeee4cf0715983e0516a39d8279dede1881b286bf7e9b67a2ce9a75a5bab0ce1a8895d9afd391f1ac9a83414e376c3ca200"/108], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x12065010}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) 00:22:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:26 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:22:26 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000400)) (async) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:26 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:26 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:22:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) r1 = syz_open_pts(r0, 0x2) ioctl$KDENABIO(r1, 0x4b36) 00:22:26 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:26 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:26 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x157000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:27 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (rerun: 32) 00:22:27 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x157000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x157000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x608000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syz_open_pts(r0, 0x250200) 00:22:27 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:27 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x157000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x157000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:27 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x608000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syz_open_pts(r0, 0x250200) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x608000, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) syz_open_pts(r0, 0x250200) (async) 00:22:27 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfe, 0x181202) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={0x0, 0x4000000000000036, &(0x7f0000000140)=[0x5, 0x101, 0x3, 0x100, 0xffffffff, 0x0, 0x20, 0xfcf7, 0x7], &(0x7f0000000180)=[0x6, 0x80, 0x2, 0x1, 0x3, 0x4, 0x8, 0x0, 0x4], 0x1, 0x9, 0x1c, &(0x7f00000001c0)=[0x1, 0x7d5f, 0x7, 0x63, 0x6, 0x10000, 0x4, 0x100, 0x8], &(0x7f0000000280)=[0x9, 0x7, 0x9, 0x8]}) 00:22:27 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x608000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) syz_open_pts(r0, 0x250200) 00:22:27 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfe, 0x181202) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={0x0, 0x4000000000000036, &(0x7f0000000140)=[0x5, 0x101, 0x3, 0x100, 0xffffffff, 0x0, 0x20, 0xfcf7, 0x7], &(0x7f0000000180)=[0x6, 0x80, 0x2, 0x1, 0x3, 0x4, 0x8, 0x0, 0x4], 0x1, 0x9, 0x1c, &(0x7f00000001c0)=[0x1, 0x7d5f, 0x7, 0x63, 0x6, 0x10000, 0x4, 0x100, 0x8], &(0x7f0000000280)=[0x9, 0x7, 0x9, 0x8]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x5}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0xfe, 0x181202) (async) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={0x0, 0x4000000000000036, &(0x7f0000000140)=[0x5, 0x101, 0x3, 0x100, 0xffffffff, 0x0, 0x20, 0xfcf7, 0x7], &(0x7f0000000180)=[0x6, 0x80, 0x2, 0x1, 0x3, 0x4, 0x8, 0x0, 0x4], 0x1, 0x9, 0x1c, &(0x7f00000001c0)=[0x1, 0x7d5f, 0x7, 0x63, 0x6, 0x10000, 0x4, 0x100, 0x8], &(0x7f0000000280)=[0x9, 0x7, 0x9, 0x8]}) (async) 00:22:27 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:22:27 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:27 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x5}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7}) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfe, 0x181202) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={0x0, 0x4000000000000036, &(0x7f0000000140)=[0x5, 0x101, 0x3, 0x100, 0xffffffff, 0x0, 0x20, 0xfcf7, 0x7], &(0x7f0000000180)=[0x6, 0x80, 0x2, 0x1, 0x3, 0x4, 0x8, 0x0, 0x4], 0x1, 0x9, 0x1c, &(0x7f00000001c0)=[0x1, 0x7d5f, 0x7, 0x63, 0x6, 0x10000, 0x4, 0x100, 0x8], &(0x7f0000000280)=[0x9, 0x7, 0x9, 0x8]}) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:22:27 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:27 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 00:22:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2014) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) 00:22:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x5}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfe, 0x181202) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000240)={0x0, 0x4000000000000036, &(0x7f0000000140)=[0x5, 0x101, 0x3, 0x100, 0xffffffff, 0x0, 0x20, 0xfcf7, 0x7], &(0x7f0000000180)=[0x6, 0x80, 0x2, 0x1, 0x3, 0x4, 0x8, 0x0, 0x4], 0x1, 0x9, 0x1c, &(0x7f00000001c0)=[0x1, 0x7d5f, 0x7, 0x63, 0x6, 0x10000, 0x4, 0x100, 0x8], &(0x7f0000000280)=[0x9, 0x7, 0x9, 0x8]}) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000180)={0x7f, 0x4}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) syz_open_pts(r4, 0x35c509e12f805000) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000140)=0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="c357928c72313992b289f3bea1adeba08944d59208c9aea5e71520f88452e716b67298f4c5af44f5aaffeb3420552a8c33eff43f900c938efae71a5c6eb3e7471bbd1bd8bfaa8f88cfda8b16e2df15b3ed9995699cef241d9b92ecfce0480270a1e77073cf629ef2e16e95254d60cd06148e26d44ec4f1fce4cc9e") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000180)={0x7f, 0x4}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x8) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) syz_open_pts(r4, 0x35c509e12f805000) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000140)=0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="c357928c72313992b289f3bea1adeba08944d59208c9aea5e71520f88452e716b67298f4c5af44f5aaffeb3420552a8c33eff43f900c938efae71a5c6eb3e7471bbd1bd8bfaa8f88cfda8b16e2df15b3ed9995699cef241d9b92ecfce0480270a1e77073cf629ef2e16e95254d60cd06148e26d44ec4f1fce4cc9e") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)) (async) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000180)={0x7f, 0x4}) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x8) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) syz_open_pts(r4, 0x35c509e12f805000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) (async) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000140)=0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) (async) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="c357928c72313992b289f3bea1adeba08944d59208c9aea5e71520f88452e716b67298f4c5af44f5aaffeb3420552a8c33eff43f900c938efae71a5c6eb3e7471bbd1bd8bfaa8f88cfda8b16e2df15b3ed9995699cef241d9b92ecfce0480270a1e77073cf629ef2e16e95254d60cd06148e26d44ec4f1fce4cc9e") (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) (async) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) (async) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) r2 = eventfd2(0x7ff, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000000040)={0xc1, 0x0, 0x2}) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x608000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) syz_open_pts(r0, 0x250200) 00:22:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000200)) (async) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000180)={0x7f, 0x4}) (async, rerun: 64) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x8) (rerun: 64) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) syz_open_pts(r4, 0x35c509e12f805000) (async) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7f) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000140)=0x1) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000000)="c357928c72313992b289f3bea1adeba08944d59208c9aea5e71520f88452e716b67298f4c5af44f5aaffeb3420552a8c33eff43f900c938efae71a5c6eb3e7471bbd1bd8bfaa8f88cfda8b16e2df15b3ed9995699cef241d9b92ecfce0480270a1e77073cf629ef2e16e95254d60cd06148e26d44ec4f1fce4cc9e") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async, rerun: 32) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) (async, rerun: 64) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) (rerun: 64) 00:22:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x9, 0x2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x1}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x9, 0x2}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) (async) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x1}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x9, 0x2}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:28 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x4000, 0x0, 0x1, 0x9, 0x6}) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x2e5, &(0x7f0000000040)="9fba121af21f29d3971464fc6d013191cd37e75a96349faaccb7a15efde01b5ede49ef7b10ee25e0", &(0x7f0000000080)="bd7d4b5edde90a9c62c2f32b4fa8ba990133f7178b14df82ab4caee08a80fb53cf55faa8e44f2a3d9a8b88de7d9c85639e9c6a2e5aa48880a20c98fb24c6082fe1f81e25d50095ac3a7fb9f1cb114bd9721480199b0e412c682b66e1fc18e4a6ce5645c58ecd912fad1e1b8b6fb874e48ae0c0a909273d8b60b02411ecad4b217e14372b7d46a89aa2435ebce96ca6701ea7e3251c5f39a5255c61850a6c20118656", 0x28, 0xa2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) (async) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = eventfd2(0x7ff, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x4000, 0x0, 0x1, 0x9, 0x6}) (async) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x2e5, &(0x7f0000000040)="9fba121af21f29d3971464fc6d013191cd37e75a96349faaccb7a15efde01b5ede49ef7b10ee25e0", &(0x7f0000000080)="bd7d4b5edde90a9c62c2f32b4fa8ba990133f7178b14df82ab4caee08a80fb53cf55faa8e44f2a3d9a8b88de7d9c85639e9c6a2e5aa48880a20c98fb24c6082fe1f81e25d50095ac3a7fb9f1cb114bd9721480199b0e412c682b66e1fc18e4a6ce5645c58ecd912fad1e1b8b6fb874e48ae0c0a909273d8b60b02411ecad4b217e14372b7d46a89aa2435ebce96ca6701ea7e3251c5f39a5255c61850a6c20118656", 0x28, 0xa2}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x1, r1, 0x1}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000180)={0x4000, 0x0, 0x1, 0x9, 0x6}) (async) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x2e5, &(0x7f0000000040)="9fba121af21f29d3971464fc6d013191cd37e75a96349faaccb7a15efde01b5ede49ef7b10ee25e0", &(0x7f0000000080)="bd7d4b5edde90a9c62c2f32b4fa8ba990133f7178b14df82ab4caee08a80fb53cf55faa8e44f2a3d9a8b88de7d9c85639e9c6a2e5aa48880a20c98fb24c6082fe1f81e25d50095ac3a7fb9f1cb114bd9721480199b0e412c682b66e1fc18e4a6ce5645c58ecd912fad1e1b8b6fb874e48ae0c0a909273d8b60b02411ecad4b217e14372b7d46a89aa2435ebce96ca6701ea7e3251c5f39a5255c61850a6c20118656", 0x28, 0xa2}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000001000000bd00feffefffffff9500000000000000fbf890ce321f12cf9798c8510735496382531dc061557d4bd38e0d1f930c6d07c27463dc5d36874743ab692d1a77af70341fd3f1dddff3ae52e2ca2b5633581e144590c9cb76baa221c5a4a69666f47882c7cbf4e5edc2f108a3f6cf7c52374116e290ac93052b7dcca80aa2122f208781bbde39f729c2e87efb51"], &(0x7f00000003c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x938}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x14, 0x9, 0x3a00, 0x100, 0xffffffffffffffff, 0xf2b1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x5, 0x200, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xe43d, 0x4, 0xc09, 0x1018, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="180000007f0000000f6710001000000085100000fcffff070000000000000000000000000000007103fb31389cb11c3443300ff15ba200b0ccbfa8917cbcdef66be02b0638d3f684b481f94f0a18d9e456036f6d50bf876ab72e3155d86d1227e78007f80e0e27971c353cd5f23e5af8c266a0c9f6b841e89dcb2c34fb049cd407934648aa8c95464cfba045114929ee3843d97fd77459865bbeec95446d29cada22c7a3923e08f0f226f7208cbcf2fdf574bf2ed23231372c798f32774572b65c3077d447e615c60f9b3ad6ae0c96e25d5bd1b6999dba2b2e8a5042b2f4b7e417157d92"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xee, &(0x7f0000000200)=""/238, 0x41000, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0xfffffffb, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r5, 0x1, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f00000007c0)={0x6, 0x7c}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000780)={0x17, 0x4, 0x7, 0x9, 0x6}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:22:28 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x0) 00:22:28 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000001000000bd00feffefffffff9500000000000000fbf890ce321f12cf9798c8510735496382531dc061557d4bd38e0d1f930c6d07c27463dc5d36874743ab692d1a77af70341fd3f1dddff3ae52e2ca2b5633581e144590c9cb76baa221c5a4a69666f47882c7cbf4e5edc2f108a3f6cf7c52374116e290ac93052b7dcca80aa2122f208781bbde39f729c2e87efb51"], &(0x7f00000003c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x938}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x14, 0x9, 0x3a00, 0x100, 0xffffffffffffffff, 0xf2b1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x5, 0x200, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xe43d, 0x4, 0xc09, 0x1018, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="180000007f0000000f6710001000000085100000fcffff070000000000000000000000000000007103fb31389cb11c3443300ff15ba200b0ccbfa8917cbcdef66be02b0638d3f684b481f94f0a18d9e456036f6d50bf876ab72e3155d86d1227e78007f80e0e27971c353cd5f23e5af8c266a0c9f6b841e89dcb2c34fb049cd407934648aa8c95464cfba045114929ee3843d97fd77459865bbeec95446d29cada22c7a3923e08f0f226f7208cbcf2fdf574bf2ed23231372c798f32774572b65c3077d447e615c60f9b3ad6ae0c96e25d5bd1b6999dba2b2e8a5042b2f4b7e417157d92"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xee, &(0x7f0000000200)=""/238, 0x41000, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0xfffffffb, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r5, 0x1, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f00000007c0)={0x6, 0x7c}) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000780)={0x17, 0x4, 0x7, 0x9, 0x6}) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:28 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x6) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000001000000bd00feffefffffff9500000000000000fbf890ce321f12cf9798c8510735496382531dc061557d4bd38e0d1f930c6d07c27463dc5d36874743ab692d1a77af70341fd3f1dddff3ae52e2ca2b5633581e144590c9cb76baa221c5a4a69666f47882c7cbf4e5edc2f108a3f6cf7c52374116e290ac93052b7dcca80aa2122f208781bbde39f729c2e87efb51"], &(0x7f00000003c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x938}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x14, 0x9, 0x3a00, 0x100, 0xffffffffffffffff, 0xf2b1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x5, 0x200, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xe43d, 0x4, 0xc09, 0x1018, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="180000007f0000000f6710001000000085100000fcffff070000000000000000000000000000007103fb31389cb11c3443300ff15ba200b0ccbfa8917cbcdef66be02b0638d3f684b481f94f0a18d9e456036f6d50bf876ab72e3155d86d1227e78007f80e0e27971c353cd5f23e5af8c266a0c9f6b841e89dcb2c34fb049cd407934648aa8c95464cfba045114929ee3843d97fd77459865bbeec95446d29cada22c7a3923e08f0f226f7208cbcf2fdf574bf2ed23231372c798f32774572b65c3077d447e615c60f9b3ad6ae0c96e25d5bd1b6999dba2b2e8a5042b2f4b7e417157d92"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xee, &(0x7f0000000200)=""/238, 0x41000, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0xfffffffb, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r5, 0x1, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f00000007c0)={0x6, 0x7c}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000780)={0x17, 0x4, 0x7, 0x9, 0x6}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000001000000bd00feffefffffff9500000000000000fbf890ce321f12cf9798c8510735496382531dc061557d4bd38e0d1f930c6d07c27463dc5d36874743ab692d1a77af70341fd3f1dddff3ae52e2ca2b5633581e144590c9cb76baa221c5a4a69666f47882c7cbf4e5edc2f108a3f6cf7c52374116e290ac93052b7dcca80aa2122f208781bbde39f729c2e87efb51"], &(0x7f00000003c0)='GPL\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x0, 0x938}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1]}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x14, 0x9, 0x3a00, 0x100, 0xffffffffffffffff, 0xf2b1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x5, 0x200, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x7}, 0x48) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xe43d, 0x4, 0xc09, 0x1018, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x7, &(0x7f0000000800)=ANY=[@ANYBLOB="180000007f0000000f6710001000000085100000fcffff070000000000000000000000000000007103fb31389cb11c3443300ff15ba200b0ccbfa8917cbcdef66be02b0638d3f684b481f94f0a18d9e456036f6d50bf876ab72e3155d86d1227e78007f80e0e27971c353cd5f23e5af8c266a0c9f6b841e89dcb2c34fb049cd407934648aa8c95464cfba045114929ee3843d97fd77459865bbeec95446d29cada22c7a3923e08f0f226f7208cbcf2fdf574bf2ed23231372c798f32774572b65c3077d447e615c60f9b3ad6ae0c96e25d5bd1b6999dba2b2e8a5042b2f4b7e417157d92"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xee, &(0x7f0000000200)=""/238, 0x41000, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x5, 0xfffffffb, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r5, 0x1, 0xffffffffffffffff, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) (rerun: 64) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f00000007c0)={0x6, 0x7c}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f0000000400)) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000780)={0x17, 0x4, 0x7, 0x9, 0x6}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x2) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) 00:22:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) 00:22:28 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @any, 0x3}, 0xa) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'wg1\x00', 0x9, 0x401}) socketpair(0xb, 0x0, 0x9b74, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x8, 0x1ff, 0x1, 0xe7c8, 0x2, "bc737a3157285291"}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000300)={0x177d, 0x4, 0x8001, 0x4, 0x9}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x6}, 0xa) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r0, 0x2) 00:22:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_pts(r0, 0x2) 00:22:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @any, 0x3}, 0xa) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'wg1\x00', 0x9, 0x401}) (async) socketpair(0xb, 0x0, 0x9b74, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async, rerun: 64) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x8, 0x1ff, 0x1, 0xe7c8, 0x2, "bc737a3157285291"}) (async, rerun: 64) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000300)={0x177d, 0x4, 0x8001, 0x4, 0x9}) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x6}, 0xa) 00:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:29 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x19) 00:22:29 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:29 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @any, 0x3}, 0xa) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x100000) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000140)={'wg1\x00', 0x9, 0x401}) socketpair(0xb, 0x0, 0x9b74, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x8, 0x1ff, 0x1, 0xe7c8, 0x2, "bc737a3157285291"}) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000300)={0x177d, 0x4, 0x8001, 0x4, 0x9}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x6}, 0xa) 00:22:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) syz_open_pts(r0, 0x2) 00:22:29 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) 00:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200000) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x4}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) 00:22:29 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x100000001, 0x643) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={0x0, 0x2}) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(0xffffffffffffffff, 0x2) 00:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x8000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200000) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x4}) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x2, 0x5, 0x81, 0x0, 0x3, 0x1, 0x96, 0xc4, 0x6, 0x17, 0x5, 0x3, 0x8}, {0x8, 0x7f, 0x7, 0x7, 0x3f, 0x4, 0x0, 0x4, 0x20, 0xfa, 0x5, 0x4, 0x40}, {0x0, 0x9, 0x4, 0x7f, 0x95, 0x5, 0x2, 0x9, 0xa0, 0x81, 0x4, 0x5, 0x200}], 0x20}) r3 = eventfd2(0x7ff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x1}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) syz_open_pts(r0, 0x0) 00:22:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x8000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200000) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x4}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x8000) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x200000) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x4}) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7, 0x700, 0x40, 0x8001, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x68, 0x0, 0x26, 0x4, 0x0, @local, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x374, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x4004841}, 0x40814) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x2}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x2, 0x5, 0x81, 0x0, 0x3, 0x1, 0x96, 0xc4, 0x6, 0x17, 0x5, 0x3, 0x8}, {0x8, 0x7f, 0x7, 0x7, 0x3f, 0x4, 0x0, 0x4, 0x20, 0xfa, 0x5, 0x4, 0x40}, {0x0, 0x9, 0x4, 0x7f, 0x95, 0x5, 0x2, 0x9, 0xa0, 0x81, 0x4, 0x5, 0x200}], 0x20}) r3 = eventfd2(0x7ff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x1}) 00:22:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x2}) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000040)={[{0x2, 0x5, 0x81, 0x0, 0x3, 0x1, 0x96, 0xc4, 0x6, 0x17, 0x5, 0x3, 0x8}, {0x8, 0x7f, 0x7, 0x7, 0x3f, 0x4, 0x0, 0x4, 0x20, 0xfa, 0x5, 0x4, 0x40}, {0x0, 0x9, 0x4, 0x7f, 0x95, 0x5, 0x2, 0x9, 0xa0, 0x81, 0x4, 0x5, 0x200}], 0x20}) r3 = eventfd2(0x7ff, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x1}) 00:22:29 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) 00:22:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x5) 00:22:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:29 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2d2}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:30 executing program 0: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) shmget$private(0x0, 0x5000, 0x4, &(0x7f0000ffb000/0x5000)=nil) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x9, 0x0, 0x1c520d4f, 0x400}) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74af29d572ab035737e5c1756e6c3000"/26, @ANYRES32=0x0, @ANYBLOB="0008780000000008fffffffc4e490038006500001f2f9078ffffffff0a010100830ff52bf417e0ca1267f43af95f520010cfc32381c28096f2295fe61ff41c9404010000"]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) 00:22:30 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000800)={0x0, 0x0, 0x1}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 0: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) shmget$private(0x0, 0x5000, 0x4, &(0x7f0000ffb000/0x5000)=nil) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x9, 0x0, 0x1c520d4f, 0x400}) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74af29d572ab035737e5c1756e6c3000"/26, @ANYRES32=0x0, @ANYBLOB="0008780000000008fffffffc4e490038006500001f2f9078ffffffff0a010100830ff52bf417e0ca1267f43af95f520010cfc32381c28096f2295fe61ff41c9404010000"]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2d2}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2d2}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:30 executing program 0: shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) shmget$private(0x0, 0x5000, 0x4, &(0x7f0000ffb000/0x5000)=nil) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x9, 0x0, 0x1c520d4f, 0x400}) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74af29d572ab035737e5c1756e6c3000"/26, @ANYRES32=0x0, @ANYBLOB="0008780000000008fffffffc4e490038006500001f2f9078ffffffff0a010100830ff52bf417e0ca1267f43af95f520010cfc32381c28096f2295fe61ff41c9404010000"]}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) (async) shmget$private(0x0, 0x5000, 0x4, &(0x7f0000ffb000/0x5000)=nil) (async) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x9, 0x0, 0x1c520d4f, 0x400}) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="74af29d572ab035737e5c1756e6c3000"/26, @ANYRES32=0x0, @ANYBLOB="0008780000000008fffffffc4e490038006500001f2f9078ffffffff0a010100830ff52bf417e0ca1267f43af95f520010cfc32381c28096f2295fe61ff41c9404010000"]}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='\x00\b\x00', @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, 0x0) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2d2}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x7ff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(r4, 0x3b70, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x1) (async) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x2d2}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x7, 0x3, 0x8000, 0x101, 0x19, "911184e4391697b6"}) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$KDSKBLED(r1, 0x4b65, 0x258) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="d0af8e5fc6989821813281716df72c190612051a9ea034cfe270dcddeadace3031a2138b") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000140)=""/4096}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001140)={0x0, 0x7f}) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x7, 0x3, 0x8000, 0x101, 0x19, "911184e4391697b6"}) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffe) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$KDSKBLED(r1, 0x4b65, 0x258) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="d0af8e5fc6989821813281716df72c190612051a9ea034cfe270dcddeadace3031a2138b") (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000140)=""/4096}) (async) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001140)={0x0, 0x7f}) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x72fcd5d0b0f8c029}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x270, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x80, 0xc1, 0x5}, {0x1000, 0xff, 0xf7, 0x5a809538}, {0x14, 0x0, 0x9, 0x8}, {0x92, 0x6, 0x81, 0x1}, {0x1, 0x4, 0x6, 0x8}, {0x9bad, 0x81, 0x7, 0xb8f3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x72fcd5d0b0f8c029}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x270, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x80, 0xc1, 0x5}, {0x1000, 0xff, 0xf7, 0x5a809538}, {0x14, 0x0, 0x9, 0x8}, {0x92, 0x6, 0x81, 0x1}, {0x1, 0x4, 0x6, 0x8}, {0x9bad, 0x81, 0x7, 0xb8f3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x7, 0x3, 0x8000, 0x101, 0x19, "911184e4391697b6"}) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) ioctl$KDSKBLED(r1, 0x4b65, 0x258) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$TIOCNXCL(r3, 0x540d) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="d0af8e5fc6989821813281716df72c190612051a9ea034cfe270dcddeadace3031a2138b") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000140)=""/4096}) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001140)={0x0, 0x7f}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x7, 0x3, 0x8000, 0x101, 0x19, "911184e4391697b6"}) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffe) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x18) (async) ioctl$KDSKBLED(r1, 0x4b65, 0x258) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) (async) ioctl$TIOCNXCL(r3, 0x540d) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000000)="d0af8e5fc6989821813281716df72c190612051a9ea034cfe270dcddeadace3031a2138b") (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={0x0, &(0x7f0000000140)=""/4096}) (async) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000001140)={0x0, 0x7f}) (async) 00:22:30 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x800017) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6bb99d7091b329213dcd523ff0c5577"}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) 00:22:30 executing program 4: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x600) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x1a) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x7f}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x72fcd5d0b0f8c029}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x270, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x248, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x80, 0xc1, 0x5}, {0x1000, 0xff, 0xf7, 0x5a809538}, {0x14, 0x0, 0x9, 0x8}, {0x92, 0x6, 0x81, 0x1}, {0x1, 0x4, 0x6, 0x8}, {0x9bad, 0x81, 0x7, 0xb8f3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:30 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000040)={0x4, 0x9, 0x3, 0x5, 0xffffff00}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd2(0x7ff, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r4, 0x1}) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = eventfd2(0x7ff, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000100)={0x1, r7, 0x1}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f0000000240)={0xc1, 0x0, 0x3}) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000100)=""/244) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f0000000100)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r9, 0x4018aebd, &(0x7f00000002c0)={0x2, r7, 0x1}) 00:22:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x11) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x1a) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x40, 0xb80, &(0x7f0000000040)="64a3a6bf0f2f47340a38820a95a23f5833710ac301e4fb6d93f3110e8199013bea6c93abef703db12d301c8c2f858e16b946d32348f2906bfe60bfdd8ba4765af390504f31d85e3ab1be60cf781440e0357433a7979ffea850795d", &(0x7f00000000c0)="57def52a513ca1be41ef34d60e113b4aab92fccce2fb1e8c631c196711ba96c3d1af2dfff2f7f7d1f269cf7cfe8c7c0c32672c91491d1fa06102fa24039d86a14dd307d9da70038d840fae2148754fb0bbe85a18e84a74cf793b64992ae8b4da692f52241ec3dc47a771d668be44e2c75fcdb2dd72e63b1ee88225b82a8080", 0x5b, 0x7f}) 00:22:30 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 4: socketpair(0x15, 0x6, 0xcc, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0108000300000200"/18, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000018007a8014000200b6bb99d7091b329213dcd523ff0c5577"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000df2553003b3508fd1f922ef3393926a7d7f07023bd2bdf60956a5298d618cd1d4e65a8c1e34b5c295b6d4d4a2ed9b09c0710254fb60ed5b2b1d78d38d102c1a68c5634345d331ef7ec56ed3f7420bb0f4c49c1467f6b2c5b9e02b5c1640422e088ed35456afdce45998fd4b864625c4558755085f9d266182f38193a2dc7"], 0x20}}, 0x4000000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000800)={0x7, 0xffff, 0x1}) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x4, 0x114000}) 00:22:30 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x1) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x40, 0xb80, &(0x7f0000000040)="64a3a6bf0f2f47340a38820a95a23f5833710ac301e4fb6d93f3110e8199013bea6c93abef703db12d301c8c2f858e16b946d32348f2906bfe60bfdd8ba4765af390504f31d85e3ab1be60cf781440e0357433a7979ffea850795d", &(0x7f00000000c0)="57def52a513ca1be41ef34d60e113b4aab92fccce2fb1e8c631c196711ba96c3d1af2dfff2f7f7d1f269cf7cfe8c7c0c32672c91491d1fa06102fa24039d86a14dd307d9da70038d840fae2148754fb0bbe85a18e84a74cf793b64992ae8b4da692f52241ec3dc47a771d668be44e2c75fcdb2dd72e63b1ee88225b82a8080", 0x5b, 0x7f}) 00:22:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x8000) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/100}) r2 = eventfd2(0xa00000, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000180)={0x1, 0x0, 0x80000000, 0x6164, 0x1}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x100000, 0x3000, 0x10, 0x7, 0x4}) 00:22:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 1: socketpair(0x15, 0x6, 0xcc, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0108000300000200"/18, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000018007a8014000200b6bb99d7091b329213dcd523ff0c5577"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000df2553003b3508fd1f922ef3393926a7d7f07023bd2bdf60956a5298d618cd1d4e65a8c1e34b5c295b6d4d4a2ed9b09c0710254fb60ed5b2b1d78d38d102c1a68c5634345d331ef7ec56ed3f7420bb0f4c49c1467f6b2c5b9e02b5c1640422e088ed35456afdce45998fd4b864625c4558755085f9d266182f38193a2dc7"], 0x20}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x8bd, 0x200, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x7, [{@broadcast, 0x5466}, {@loopback, 0x6}, {@broadcast, 0xffffffff}]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x9, "cf9b9a4a6c3181"}, {0x6, 0x6, "3a768b3d"}, {0x6, 0x3, "b3"}, {0x5, 0x3, '\v'}]}, @rr={0x7, 0x1f, 0x74, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffc00}]}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="200008000100086d6ae294eba55900000000", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ffff00e10200000008007f09010001000300050800080000400009f1e34c00000900810f060000000700091186ea062f8c8b01060300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040031f3000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e800028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000400800508000000fc00010002000000090003f01f00000000040609080000000400d60601000000030003095c000000"], 0x2b4}, 0x1, 0x0, 0x0, 0x44048044}, 0x81) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x40040) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="cb3d7a857ad094b65506b2c82b2f17201e26b82169bb864fb9e059159c7b5be95a5b1a17c6bb614b2874dcb8ea23212c09232eeaa319c1c195686de3fc1174b80cb576eaa7341c8a01f5a2231d804d0083a6569988696814e955fe08d24d62254b97a70875957f14c7a3d423894e980abe40dc03500b873bf37f499d97a7fc33f29b4c93dd33bb55f61a7cc673ff33602a35a506b2d7b0d9c64782e696a6b1a749e5c70bb05f66377d6e67ffbf4b3a5404fc60f7fa45e85e75d04e3f886c023b9cb497f78e9ee9830f95342a9631bd1e9397f335cffeae382f82e6647b005485dfbc5cf049") getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getgroups(0x7, &(0x7f0000000540)=[r5, 0xee00, 0x0, 0xee01, r6, r7, 0xffffffffffffffff]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000800)={0x7, 0xffff, 0x1}) 00:22:30 executing program 0: socketpair(0x15, 0x6, 0xcc, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0108000300000200"/18, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000018007a8014000200b6bb99d7091b329213dcd523ff0c5577"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000df2553003b3508fd1f922ef3393926a7d7f07023bd2bdf60956a5298d618cd1d4e65a8c1e34b5c295b6d4d4a2ed9b09c0710254fb60ed5b2b1d78d38d102c1a68c5634345d331ef7ec56ed3f7420bb0f4c49c1467f6b2c5b9e02b5c1640422e088ed35456afdce45998fd4b864625c4558755085f9d266182f38193a2dc7"], 0x20}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x8bd, 0x200, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x7, [{@broadcast, 0x5466}, {@loopback, 0x6}, {@broadcast, 0xffffffff}]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x9, "cf9b9a4a6c3181"}, {0x6, 0x6, "3a768b3d"}, {0x6, 0x3, "b3"}, {0x5, 0x3, '\v'}]}, @rr={0x7, 0x1f, 0x74, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffc00}]}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="200008000100086d6ae294eba55900000000", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ffff00e10200000008007f09010001000300050800080000400009f1e34c00000900810f060000000700091186ea062f8c8b01060300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040031f3000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e800028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000400800508000000fc00010002000000090003f01f00000000040609080000000400d60601000000030003095c000000"], 0x2b4}, 0x1, 0x0, 0x0, 0x44048044}, 0x81) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x40040) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="cb3d7a857ad094b65506b2c82b2f17201e26b82169bb864fb9e059159c7b5be95a5b1a17c6bb614b2874dcb8ea23212c09232eeaa319c1c195686de3fc1174b80cb576eaa7341c8a01f5a2231d804d0083a6569988696814e955fe08d24d62254b97a70875957f14c7a3d423894e980abe40dc03500b873bf37f499d97a7fc33f29b4c93dd33bb55f61a7cc673ff33602a35a506b2d7b0d9c64782e696a6b1a749e5c70bb05f66377d6e67ffbf4b3a5404fc60f7fa45e85e75d04e3f886c023b9cb497f78e9ee9830f95342a9631bd1e9397f335cffeae382f82e6647b005485dfbc5cf049") getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getgroups(0x7, &(0x7f0000000540)=[r5, 0xee00, 0x0, 0xee01, r6, r7, 0xffffffffffffffff]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000800)={0x7, 0xffff, 0x1}) 00:22:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async, rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x40, 0xb80, &(0x7f0000000040)="64a3a6bf0f2f47340a38820a95a23f5833710ac301e4fb6d93f3110e8199013bea6c93abef703db12d301c8c2f858e16b946d32348f2906bfe60bfdd8ba4765af390504f31d85e3ab1be60cf781440e0357433a7979ffea850795d", &(0x7f00000000c0)="57def52a513ca1be41ef34d60e113b4aab92fccce2fb1e8c631c196711ba96c3d1af2dfff2f7f7d1f269cf7cfe8c7c0c32672c91491d1fa06102fa24039d86a14dd307d9da70038d840fae2148754fb0bbe85a18e84a74cf793b64992ae8b4da692f52241ec3dc47a771d668be44e2c75fcdb2dd72e63b1ee88225b82a8080", 0x5b, 0x7f}) (rerun: 32) 00:22:30 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0xb, 0x101200) syz_open_pts(0xffffffffffffffff, 0x420280) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:22:31 executing program 0: socketpair(0x15, 0x6, 0xcc, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000010c0)={&(0x7f0000000f40), 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0108000300000200"/18, @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000018007a8014000200b6bb99d7091b329213dcd523ff0c5577"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000df2553003b3508fd1f922ef3393926a7d7f07023bd2bdf60956a5298d618cd1d4e65a8c1e34b5c295b6d4d4a2ed9b09c0710254fb60ed5b2b1d78d38d102c1a68c5634345d331ef7ec56ed3f7420bb0f4c49c1467f6b2c5b9e02b5c1640422e088ed35456afdce45998fd4b864625c4558755085f9d266182f38193a2dc7"], 0x20}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x8bd, 0x200, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x7, [{@broadcast, 0x5466}, {@loopback, 0x6}, {@broadcast, 0xffffffff}]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x9, "cf9b9a4a6c3181"}, {0x6, 0x6, "3a768b3d"}, {0x6, 0x3, "b3"}, {0x5, 0x3, '\v'}]}, @rr={0x7, 0x1f, 0x74, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x9f, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffc00}]}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b4020000", @ANYRES16=0x0, @ANYBLOB="200008000100086d6ae294eba55900000000", @ANYRES32=0x0, @ANYBLOB="6001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400ffff00e10200000008007f09010001000300050800080000400009f1e34c00000900810f060000000700091186ea062f8c8b01060300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040031f3000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="e800028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000400800508000000fc00010002000000090003f01f00000000040609080000000400d60601000000030003095c000000"], 0x2b4}, 0x1, 0x0, 0x0, 0x44048044}, 0x81) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x5) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '@\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x40040) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="cb3d7a857ad094b65506b2c82b2f17201e26b82169bb864fb9e059159c7b5be95a5b1a17c6bb614b2874dcb8ea23212c09232eeaa319c1c195686de3fc1174b80cb576eaa7341c8a01f5a2231d804d0083a6569988696814e955fe08d24d62254b97a70875957f14c7a3d423894e980abe40dc03500b873bf37f499d97a7fc33f29b4c93dd33bb55f61a7cc673ff33602a35a506b2d7b0d9c64782e696a6b1a749e5c70bb05f66377d6e67ffbf4b3a5404fc60f7fa45e85e75d04e3f886c023b9cb497f78e9ee9830f95342a9631bd1e9397f335cffeae382f82e6647b005485dfbc5cf049") getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) getgroups(0x7, &(0x7f0000000540)=[r5, 0xee00, 0x0, 0xee01, r6, r7, 0xffffffffffffffff]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000800)={0x7, 0xffff, 0x1}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xc0000100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r9, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x50) 00:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x1f, 0x81, 0x0, 0xffffffff, 0x4400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0xf5}, 0x400, 0x5, 0x9, 0x9, 0x5, 0x2, 0x4, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) [ 944.931232] mkiss: ax0: crc mode is auto. 00:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x1f, 0x81, 0x0, 0xffffffff, 0x4400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0xf5}, 0x400, 0x5, 0x9, 0x9, 0x5, 0x2, 0x4, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x1f, 0x81, 0x0, 0xffffffff, 0x4400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0xf5}, 0x400, 0x5, 0x9, 0x9, 0x5, 0x2, 0x4, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0x7f, 0x1f, 0x81, 0x0, 0xffffffff, 0x4400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0xf5}, 0x400, 0x5, 0x9, 0x9, 0x5, 0x2, 0x4, 0x0, 0x8001, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 945.189260] mkiss: ax0: crc mode is auto. 00:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:31 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) [ 945.419031] mkiss: ax0: crc mode is auto. 00:22:31 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0xff92, 0x1, 0xfff}) 00:22:31 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 00:22:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, @bcast, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 00:22:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:22:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, @bcast, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) 00:22:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 00:22:31 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, 0x0) 00:22:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, @bcast, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, @bcast, @bpq0, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) (async) 00:22:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:22:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x0, 0x1, 0xfff}) 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:32 executing program 5: r0 = eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x5, 0x0, 0x401}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:32 executing program 5: r0 = eventfd2(0x7ff, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) (async) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x5, 0x0, 0x401}) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:32 executing program 5: r0 = eventfd2(0x7ff, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r0, 0x1}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x5, 0x0, 0x401}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 946.063945] mkiss: ax0: crc mode is auto. 00:22:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x0, 0x1, 0xfff}) 00:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) 00:22:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 946.253045] mkiss: ax0: crc mode is auto. 00:22:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 946.289190] mkiss: ax1: crc mode is auto. 00:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) 00:22:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 946.415009] mkiss: ax0: crc mode is auto. 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x0, 0x1, 0xfff}) 00:22:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) (async) 00:22:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 5: bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x9}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6d14}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000240)={'syzkaller1\x00', 0x7, 0x9}) r3 = eventfd2(0x7ff, 0x80800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x5}) 00:22:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92, 0x0, 0xfff}) 00:22:32 executing program 5: bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x9}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6d14}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000240)={'syzkaller1\x00', 0x7, 0x9}) r3 = eventfd2(0x7ff, 0x80800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x5}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x9}, 0xa) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6d14}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) (async) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000240)={'syzkaller1\x00', 0x7, 0x9}) (async) eventfd2(0x7ff, 0x80800) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x5}) (async) [ 946.666922] mkiss: ax0: crc mode is auto. 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92}) 00:22:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 946.808615] mkiss: ax1: crc mode is auto. 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xff92}) [ 946.835144] mkiss: ax0: crc mode is auto. 00:22:33 executing program 5: bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x9}, 0xa) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6d14}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000240)={'syzkaller1\x00', 0x7, 0x9}) r3 = eventfd2(0x7ff, 0x80800) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x5}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @any, 0x9}, 0xa) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x6d14}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80800) (async) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000240)={'syzkaller1\x00', 0x7, 0x9}) (async) eventfd2(0x7ff, 0x80800) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x1, r3, 0x1}) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)={0x5}) (async) 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) [ 946.916312] mkiss: ax0: crc mode is auto. 00:22:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) [ 946.992939] mkiss: ax0: crc mode is auto. 00:22:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 00:22:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) (async) [ 947.156926] mkiss: ax1: crc mode is auto. [ 947.167933] mkiss: ax0: crc mode is auto. 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 947.214045] mkiss: ax2: crc mode is auto. 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) [ 947.355807] mkiss: ax0: crc mode is auto. [ 947.373361] mkiss: ax1: crc mode is auto. [ 947.416350] mkiss: ax0: crc mode is auto. 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 947.631403] mkiss: ax0: crc mode is auto. 00:22:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x2, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x7, 0x7, "39e2b0ede4"}, @end, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x9, [{@remote}, {@multicast2, 0x6}]}, @rr={0x7, 0xb, 0x53, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x4, [0x4, 0x200]}, @rr={0x7, 0x2b, 0x73, [@rand_addr=0x64010102, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x7, "8bc50e8728"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x8000, 0x400, 0x1, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xcb, [@rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x63, [@multicast1, @loopback, @multicast1, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x2}, {0x7, 0x11, "e4257ca39a0500a800766d7d4d4691"}, {0x5, 0x9, "81d873dc5058f6"}, {0x6, 0xb, "2a174d44242bff40af"}]}, @ssrr={0x89, 0x7, 0x3f, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x8, 0x6, 0x9, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x8, [0x3, 0x3, 0xfffeffff, 0x7]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\\\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="d400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040049000000080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e5f4ffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040000000581050000001f0002200104000006000594f8ffffffffff814009000000bb7f7f9744f6000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400550301a30600000080ffa57fd0ac000000080507cf000000247d20c03f00000008000205530e000003002040ff07000001007f0020000000f8ffff1f0500000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000ac000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000080001001fd4a5a268ebd73ac6ff21584c7c35987e10d408562a6f6680af604cedad3b1956edbebfb8bf803b7d86760588efe4f3e2eaec2ca9fd77d8bea717c8f3d4809f810978fb", @ANYRES32=0x0, @ANYBLOB="8c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f008e0609000000070007ffc85c0000400008000300000008000100", @ANYRES32=0x0, @ANYBLOB="fc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400400000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x95c}, 0x1, 0x0, 0x0, 0x24040800}, 0xc4) 00:22:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x2, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x7, 0x7, "39e2b0ede4"}, @end, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x9, [{@remote}, {@multicast2, 0x6}]}, @rr={0x7, 0xb, 0x53, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x4, [0x4, 0x200]}, @rr={0x7, 0x2b, 0x73, [@rand_addr=0x64010102, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x7, "8bc50e8728"}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x8000, 0x400, 0x1, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xcb, [@rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x63, [@multicast1, @loopback, @multicast1, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x2}, {0x7, 0x11, "e4257ca39a0500a800766d7d4d4691"}, {0x5, 0x9, "81d873dc5058f6"}, {0x6, 0xb, "2a174d44242bff40af"}]}, @ssrr={0x89, 0x7, 0x3f, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x8, 0x6, 0x9, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x8, [0x3, 0x3, 0xfffeffff, 0x7]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\\\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="d400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040049000000080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e5f4ffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc0102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040000000581050000001f0002200104000006000594f8ffffffffff814009000000bb7f7f9744f6000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400550301a30600000080ffa57fd0ac000000080507cf000000247d20c03f00000008000205530e000003002040ff07000001007f0020000000f8ffff1f0500000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000ac000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000080001001fd4a5a268ebd73ac6ff21584c7c35987e10d408562a6f6680af604cedad3b1956edbebfb8bf803b7d86760588efe4f3e2eaec2ca9fd77d8bea717c8f3d4809f810978fb", @ANYRES32=0x0, @ANYBLOB="8c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f008e0609000000070007ffc85c0000400008000300000008000100", @ANYRES32=0x0, @ANYBLOB="fc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400400000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x95c}, 0x1, 0x0, 0x0, 0x24040800}, 0xc4) 00:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x2, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x7, 0x7, "39e2b0ede4"}, @end, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x9, [{@remote}, {@multicast2, 0x6}]}, @rr={0x7, 0xb, 0x53, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x4, [0x4, 0x200]}, @rr={0x7, 0x2b, 0x73, [@rand_addr=0x64010102, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x7, "8bc50e8728"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x8000, 0x400, 0x1, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xcb, [@rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x63, [@multicast1, @loopback, @multicast1, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x2}, {0x7, 0x11, "e4257ca39a0500a800766d7d4d4691"}, {0x5, 0x9, "81d873dc5058f6"}, {0x6, 0xb, "2a174d44242bff40af"}]}, @ssrr={0x89, 0x7, 0x3f, [@multicast2]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x8, 0x6, 0x9, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x8, [0x3, 0x3, 0xfffeffff, 0x7]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\\\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="d400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040049000000080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e5f4ffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400550301a30600000080ffa57fd0ac000000080507cf000000247d20c03f00000008000205530e000003002040ff07000001007f0020000000f8ffff1f0500000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000ac000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000080001001fd4a5a268ebd73ac6ff21584c7c35987e10d408562a6f6680af604cedad3b1956edbebfb8bf803b7d86760588efe4f3e2eaec2ca9fd77d8bea717c8f3d4809f810978fb", @ANYRES32=0x0, @ANYBLOB="8c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f008e0609000000070007ffc85c0000400008000300000008000100", @ANYRES32=0x0, @ANYBLOB="fc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400400000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x95c}, 0x1, 0x0, 0x0, 0x24040800}, 0xc4) 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.162129] mkiss: ax0: crc mode is auto. 00:22:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x2, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x7, 0x7, "39e2b0ede4"}, @end, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x9, [{@remote}, {@multicast2, 0x6}]}, @rr={0x7, 0xb, 0x53, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x4, [0x4, 0x200]}, @rr={0x7, 0x2b, 0x73, [@rand_addr=0x64010102, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x7, "8bc50e8728"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x8000, 0x400, 0x1, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xcb, [@rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x63, [@multicast1, @loopback, @multicast1, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x2}, {0x7, 0x11, "e4257ca39a0500a800766d7d4d4691"}, {0x5, 0x9, "81d873dc5058f6"}, {0x6, 0xb, "2a174d44242bff40af"}]}, @ssrr={0x89, 0x7, 0x3f, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x8, 0x6, 0x9, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x8, [0x3, 0x3, 0xfffeffff, 0x7]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\\\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="d400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040049000000080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e5f4ffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400550301a30600000080ffa57fd0ac000000080507cf000000247d20c03f00000008000205530e000003002040ff07000001007f0020000000f8ffff1f0500000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000ac000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000080001001fd4a5a268ebd73ac6ff21584c7c35987e10d408562a6f6680af604cedad3b1956edbebfb8bf803b7d86760588efe4f3e2eaec2ca9fd77d8bea717c8f3d4809f810978fb", @ANYRES32=0x0, @ANYBLOB="8c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f008e0609000000070007ffc85c0000400008000300000008000100", @ANYRES32=0x0, @ANYBLOB="fc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400400000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x95c}, 0x1, 0x0, 0x0, 0x24040800}, 0xc4) [ 948.210205] mkiss: ax1: crc mode is auto. 00:22:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7, 0x700, 0x4, 0x2, {{0x1f, 0x4, 0x1, 0x1e, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x7, 0x7, "39e2b0ede4"}, @end, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x9, [{@remote}, {@multicast2, 0x6}]}, @rr={0x7, 0xb, 0x53, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x4, [0x4, 0x200]}, @rr={0x7, 0x2b, 0x73, [@rand_addr=0x64010102, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x83, 0x7, "8bc50e8728"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x20, 0x8000, 0x400, 0x1, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x20, 0x29, 0x0, @multicast1, @multicast1, {[@rr={0x7, 0x7, 0xcb, [@rand_addr=0x64010102]}, @rr={0x7, 0x23, 0x63, [@multicast1, @loopback, @multicast1, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x2d, 0x3, [{0x2, 0x2}, {0x7, 0x11, "e4257ca39a0500a800766d7d4d4691"}, {0x5, 0x9, "81d873dc5058f6"}, {0x6, 0xb, "2a174d44242bff40af"}]}, @ssrr={0x89, 0x7, 0x3f, [@multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x8, 0x6, 0x9, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x8, [0x3, 0x3, 0xfffeffff, 0x7]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='\\\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="d400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040049000000080007000000000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="2c0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e5f4ffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400550301a30600000080ffa57fd0ac000000080507cf000000247d20c03f00000008000205530e000003002040ff07000001007f0020000000f8ffff1f0500000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r7, @ANYBLOB="f000028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000ac000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000080001001fd4a5a268ebd73ac6ff21584c7c35987e10d408562a6f6680af604cedad3b1956edbebfb8bf803b7d86760588efe4f3e2eaec2ca9fd77d8bea717c8f3d4809f810978fb", @ANYRES32=0x0, @ANYBLOB="8c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004007f008e0609000000070007ffc85c0000400008000300000008000100", @ANYRES32=0x0, @ANYBLOB="fc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400400000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r9, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x95c}, 0x1, 0x0, 0x0, 0x24040800}, 0xc4) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.394297] mkiss: ax0: crc mode is auto. 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.430833] mkiss: ax2: crc mode is auto. [ 948.438452] mkiss: ax1: crc mode is auto. 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.611997] mkiss: ax0: crc mode is auto. [ 948.625444] mkiss: ax2: crc mode is auto. [ 948.632172] mkiss: ax1: crc mode is auto. [ 948.643446] mkiss: ax3: crc mode is auto. 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 948.714010] mkiss: ax0: crc mode is auto. 00:22:34 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.747393] mkiss: ax0: crc mode is auto. 00:22:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.860612] mkiss: ax0: crc mode is auto. 00:22:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) bind$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 948.886785] mkiss: ax1: crc mode is auto. 00:22:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:22:35 executing program 5: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.036291] mkiss: ax0: crc mode is auto. 00:22:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.204552] mkiss: ax0: crc mode is auto. 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.346962] mkiss: ax0: crc mode is auto. 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.530911] mkiss: ax0: crc mode is auto. 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.583708] mkiss: ax0: crc mode is auto. 00:22:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.723814] mkiss: ax0: crc mode is auto. 00:22:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:35 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 949.893012] mkiss: ax0: crc mode is auto. 00:22:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.924990] mkiss: ax1: crc mode is auto. [ 949.926699] mkiss: ax2: crc mode is auto. 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 949.985029] mkiss: ax0: crc mode is auto. 00:22:36 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 950.125960] mkiss: ax0: crc mode is auto. 00:22:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 950.156499] mkiss: ax1: crc mode is auto. 00:22:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 950.178432] mkiss: ax2: crc mode is auto. 00:22:36 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 950.310889] mkiss: ax0: crc mode is auto. [ 950.325500] mkiss: ax1: crc mode is auto. [ 950.349748] mkiss: ax2: crc mode is auto. [ 950.360207] mkiss: ax3: crc mode is auto. [ 950.363047] mkiss: ax4: crc mode is auto. [ 950.374703] mkiss: ax0: crc mode is auto. 00:22:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:36 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 950.519643] mkiss: ax0: crc mode is auto. [ 950.532219] mkiss: ax1: crc mode is auto. [ 950.542951] mkiss: ax2: crc mode is auto. [ 950.552282] mkiss: ax4: crc mode is auto. [ 950.556600] mkiss: ax3: crc mode is auto. 00:22:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 950.578408] mkiss: ax0: crc mode is auto. 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 950.664118] mkiss: ax0: crc mode is auto. 00:22:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 950.685368] mkiss: ax1: crc mode is auto. 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 950.770671] mkiss: ax0: crc mode is auto. [ 950.788964] mkiss: ax1: crc mode is auto. [ 950.802713] mkiss: ax2: crc mode is auto. 00:22:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 950.902014] mkiss: ax0: crc mode is auto. 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 950.942410] mkiss: ax0: crc mode is auto. [ 950.949330] mkiss: ax1: crc mode is auto. 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 950.996079] mkiss: ax1: crc mode is auto. 00:22:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 951.054018] mkiss: ax0: crc mode is auto. 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 951.090428] mkiss: ax1: crc mode is auto. 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) [ 951.138257] mkiss: ax0: crc mode is auto. 00:22:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 951.186390] mkiss: ax1: crc mode is auto. [ 951.232914] mkiss: ax0: crc mode is auto. [ 951.249998] mkiss: ax1: crc mode is auto. 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 951.274469] mkiss: ax2: crc mode is auto. 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) [ 951.343315] mkiss: ax0: crc mode is auto. [ 951.385649] mkiss: ax0: crc mode is auto. 00:22:37 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 951.456547] mkiss: ax0: crc mode is auto. 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) [ 951.534137] mkiss: ax0: crc mode is auto. [ 951.541153] mkiss: ax2: crc mode is auto. [ 951.545571] mkiss: ax1: crc mode is auto. [ 951.574969] mkiss: ax0: crc mode is auto. 00:22:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) [ 951.650873] mkiss: ax0: crc mode is auto. 00:22:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:37 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) 00:22:37 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 951.771791] mkiss: ax0: crc mode is auto. 00:22:37 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) [ 951.804012] mkiss: ax1: crc mode is auto. 00:22:37 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 951.826359] mkiss: ax0: crc mode is auto. 00:22:38 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 951.964418] mkiss: ax1: crc mode is auto. [ 951.965457] mkiss: ax0: crc mode is auto. [ 951.985196] mkiss: ax2: crc mode is auto. 00:22:38 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 952.115826] mkiss: ax0: crc mode is auto. 00:22:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) [ 952.140344] mkiss: ax1: crc mode is auto. 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) [ 952.211161] mkiss: ax0: crc mode is auto. 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 952.280401] mkiss: ax0: crc mode is auto. 00:22:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 952.339765] mkiss: ax0: crc mode is auto. 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 952.413241] mkiss: ax0: crc mode is auto. 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) [ 952.510021] mkiss: ax1: crc mode is auto. [ 952.517699] mkiss: ax0: crc mode is auto. [ 952.521592] mkiss: ax2: crc mode is auto. [ 952.547558] mkiss: ax0: crc mode is auto. 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 00:22:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) [ 952.653744] mkiss: ax0: crc mode is auto. 00:22:38 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 952.701023] mkiss: ax0: crc mode is auto. [ 952.710777] mkiss: ax1: crc mode is auto. [ 952.731580] mkiss: ax2: crc mode is auto. [ 952.774819] mkiss: ax0: crc mode is auto. 00:22:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 952.796475] mkiss: ax1: crc mode is auto. 00:22:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) [ 952.864178] mkiss: ax0: crc mode is auto. [ 952.903013] mkiss: ax1: crc mode is auto. 00:22:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) [ 952.931737] mkiss: ax2: crc mode is auto. [ 952.937331] mkiss: ax0: crc mode is auto. [ 952.957330] mkiss: ax1: crc mode is auto. 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 952.992777] mkiss: ax0: crc mode is auto. 00:22:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.076962] mkiss: ax0: crc mode is auto. [ 953.092116] mkiss: ax1: crc mode is auto. [ 953.094967] mkiss: ax2: crc mode is auto. 00:22:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.189767] mkiss: ax1: crc mode is auto. [ 953.208505] mkiss: ax0: crc mode is auto. [ 953.236297] mkiss: ax2: crc mode is auto. 00:22:39 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.285878] mkiss: ax0: crc mode is auto. [ 953.303189] mkiss: ax1: crc mode is auto. [ 953.318008] mkiss: ax2: crc mode is auto. 00:22:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.443452] mkiss: ax0: crc mode is auto. [ 953.456498] mkiss: ax1: crc mode is auto. [ 953.476015] mkiss: ax2: crc mode is auto. 00:22:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) [ 953.500078] mkiss: ax0: crc mode is auto. [ 953.503240] mkiss: ax1: crc mode is auto. 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.593782] mkiss: ax0: crc mode is auto. [ 953.597905] mkiss: ax1: crc mode is auto. 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:39 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:39 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) [ 953.699524] mkiss: ax0: crc mode is auto. 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.778924] mkiss: ax0: crc mode is auto. 00:22:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) [ 953.815843] mkiss: ax0: crc mode is auto. 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 953.875878] mkiss: ax0: crc mode is auto. [ 953.879623] mkiss: ax1: crc mode is auto. [ 953.905974] mkiss: ax1: crc mode is auto. 00:22:40 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) [ 953.952107] mkiss: ax0: crc mode is auto. 00:22:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) 00:22:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 954.105667] mkiss: ax0: crc mode is auto. 00:22:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) [ 954.126262] mkiss: ax2: crc mode is auto. [ 954.130752] mkiss: ax1: crc mode is auto. 00:22:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) [ 954.286671] mkiss: ax0: crc mode is auto. 00:22:40 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) [ 954.350402] mkiss: ax0: crc mode is auto. 00:22:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="2e660fc5d3e40f01c9baf80c66b802eeb78d66efbafc0ced0f23870f350ff6c59a55325f00baf80c66b8c841bc8166efbafc0c66edea838c0a01650fae69e6", 0x3f}], 0x1, 0xa, &(0x7f00000000c0)=[@dstype3], 0x1000000000000210) 00:22:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x25c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4017dd9ade614b33d21540e711d0e9517d0562b7eebff31b"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4c5027c1626ef56c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1b7a7782dca23349"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8c76b830f8ce70533be3a4342c56b0c8125752c45b18465a6c6ab2bd1ebb7eea"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3661ada1767e7bc1b832b2af3fb0cda3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93c2ca6340a29a49"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6f250b7c176a8c7ff0dd80693c940efd"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d9cee6dda33b6cea"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2a1cd028f0af0f92bebdd8880a03ae0b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2ead2efdc34d925c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="219566a91e6bb698aa81aef22b4e4766"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8518c6f889dcc9fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1bbc01f9b49b1da0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffd}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54d3ae7514d3420c4fe6861db011c6bca43ef71a2fca283f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "711fb29f7da863c3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "014811a30d528718"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1a8c6ce6d7daa3ac348ab58654a0a3732fa81b5ff69f4668"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3dd3749ffde164947f0b728d093ba578"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1550449712451179"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3ca1226f0c93f3e5910f110acf132d95"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a8c0e32047eabdec7486f22862d4024d75fd52adef80a623c8fcf2af8ba3ad13"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0d620eeefdc7f9289a879c1ce5056782ca9b926750b7e9ba3d5731f394bbbf45"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dca32dc9b69132dc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "83aea3428ddf151f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e99168f577bf9d1a"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x4000811}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="58088610503c6b330000", @ANYRES16=r1, @ANYBLOB="000401000000fddbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000800000"], 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) 00:22:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) [ 954.380176] mkiss: ax0: crc mode is auto. 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) [ 954.692084] mkiss: ax1: crc mode is auto. [ 954.701884] mkiss: ax0: crc mode is auto. 00:22:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) [ 954.737463] mkiss: ax2: crc mode is auto. 00:22:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:40 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) [ 954.820545] mkiss: ax0: crc mode is auto. 00:22:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r2, 0x540d) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:22:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:41 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) 00:22:41 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) 00:22:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:22:41 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:22:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x40, 0xff, 0x80, 0x9c, 0x81, 0x12, 0x27, "b9c9882ea6148cbe65fd73ab5d55a542ec02e142", "4ad16c9ef65cf5ecb5c5f4025cdb420b5081273c"}) 00:22:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x40, 0xff, 0x80, 0x9c, 0x81, 0x12, 0x27, "b9c9882ea6148cbe65fd73ab5d55a542ec02e142", "4ad16c9ef65cf5ecb5c5f4025cdb420b5081273c"}) 00:22:42 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) 00:22:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x40, 0xff, 0x80, 0x9c, 0x81, 0x12, 0x27, "b9c9882ea6148cbe65fd73ab5d55a542ec02e142", "4ad16c9ef65cf5ecb5c5f4025cdb420b5081273c"}) 00:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x40, 0xff, 0x80, 0x9c, 0x81, 0x12, 0x27, "b9c9882ea6148cbe65fd73ab5d55a542ec02e142", "4ad16c9ef65cf5ecb5c5f4025cdb420b5081273c"}) 00:22:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:42 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "60f04edefd1d48097a58acdba480367cb9fba0155008c308f2a58a34655fd139"}) 00:22:42 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) 00:22:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8982, 0x20, 0x286, 0xfff}) 00:22:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 00:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_pts(r0, 0x100) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x3, 0x6, 0x2}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x6, 0x3, 0xc6, 0xe9, 0x1, "9bff423d0a75927a"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:42 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) [ 956.651651] mkiss: ax0: crc mode is auto. 00:22:43 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:43 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x141000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000000)) 00:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:43 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) [ 957.171833] mkiss: ax0: crc mode is auto. 00:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) [ 957.210527] mkiss: ax1: crc mode is auto. 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x6}, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:43 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:43 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) 00:22:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 3: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:43 executing program 5: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x25, 0x4) 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) [ 957.385867] mkiss: ax1: crc mode is auto. [ 957.395170] mkiss: ax0: crc mode is auto. 00:22:43 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000576f6c5e12e53838502d2458b6e5dda17234e5d3426d8241bddf8bf78f8fb54cb983b14447326616193dc3e4dedafe6d0b93aae825dd9ef27a221ed8067af1db", @ANYRES16=r0, @ANYBLOB="000327bd7000fddbdf25730000000800ef004667ba47a011ee4c09000000080041bf1676a127"], 0x2c}, 0x1, 0x0, 0x0, 0x25d559b76a7075b4}, 0x4090) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x343b82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4}) 00:22:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:43 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) 00:22:43 executing program 5: ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x2}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xde) r2 = eventfd2(0x7ff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000000000000040000000000000000000000010400007f00000004000000000000000000000000e40c0000000000000000004a5e0000040000000000a9b04fe6325500065dd37b79700400000001000000000000000000000000000000000000000000983cec87ea428049f4b6a159b3aefb651fdd6fbea96442f48e"]) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000040)={0x80000001, 0xd3c0, 0x4, 0x2, 0x9}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x3ff) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="660f3a208951e9086f64660f38343c0f23d366b9330b000066b84475991666bae18ae4610f30f30f1b9e5d0901bc0300811ccfecbad104ed660f388166f7"}], 0x1, 0x18, &(0x7f0000000200)=[@flags={0x3, 0x10a000}], 0x3c) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0xa4a82) 00:22:43 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) [ 957.537658] mkiss: ax0: crc mode is auto. 00:22:43 executing program 2: syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101200) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={'dummy0\x00', 0x1, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x80042) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000003c0)={r2, 0x1, &(0x7f00000002c0)=[0x3], &(0x7f0000000300)=[0x3ff, 0x32, 0xd1e, 0x6, 0x1, 0x7f, 0x3, 0x3, 0x183b], 0x16, 0x1, 0x9, &(0x7f0000000340)=[0x3], &(0x7f0000000380)=[0x8]}) 00:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:43 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:43 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:44 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) [ 957.858899] mkiss: ax0: crc mode is auto. 00:22:44 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) [ 957.881767] mkiss: ax1: crc mode is auto. 00:22:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:44 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSETD(r0, 0x5423, 0x0) [ 958.033563] mkiss: ax0: crc mode is auto. 00:22:44 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:44 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:44 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:44 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:45 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:45 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0xa2a, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:45 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 00:22:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:45 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 00:22:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:46 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 00:22:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:46 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:46 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x200011) 00:22:46 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 5: socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 00:22:46 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)="02b53ee9f553111de31f89f16a1553faccb1af979e5b8f096647c5578adb891d38ec2de3b96a8bb4ad5f078b2b2f2baa2297648cc18b299ac5e65f3127bd47d0d7f469e88eeb4a31bbca0e5d40d35e", 0x0, 0x4f}) 00:22:46 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:47 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)=0xffffff2f) 00:22:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:47 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = eventfd2(0x7ff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000100)={0x1, r2, 0x1}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (fail_nth: 1) 00:22:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (fail_nth: 1) 00:22:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) 00:22:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 00:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 00:22:48 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_pts(r0, 0x20001) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) syz_open_pts(r0, 0x20001) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) (async) 00:22:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:48 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) 00:22:49 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) 00:22:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1, 0x4034, 0xffff, 0xde, 0x1a, "00010000ff0300ff"}) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x20000fffffffd) ioctl$KDSETLED(r5, 0x4b32, 0x9) ioctl$TIOCGPTPEER(r5, 0x5441, 0x60) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) ioctl$KDSKBLED(r5, 0x4b65, 0x401) 00:22:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) 00:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1, 0x4034, 0xffff, 0xde, 0x1a, "00010000ff0300ff"}) (async) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x20000fffffffd) ioctl$KDSETLED(r5, 0x4b32, 0x9) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x60) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) ioctl$KDSKBLED(r5, 0x4b65, 0x401) 00:22:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 00:22:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1, 0x4034, 0xffff, 0xde, 0x1a, "00010000ff0300ff"}) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x20000fffffffd) ioctl$KDSETLED(r5, 0x4b32, 0x9) ioctl$TIOCGPTPEER(r5, 0x5441, 0x60) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) ioctl$KDSKBLED(r5, 0x4b65, 0x401) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x1, 0x4034, 0xffff, 0xde, 0x1a, "00010000ff0300ff"}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) (async) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r4, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x20000fffffffd) (async) ioctl$KDSETLED(r5, 0x4b32, 0x9) (async) ioctl$TIOCGPTPEER(r5, 0x5441, 0x60) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) (async) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) (async) ioctl$KDSKBLED(r5, 0x4b65, 0x401) (async) 00:22:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 00:22:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x5}) 00:22:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x5}) 00:22:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 00:22:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x5}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x5}) (async) 00:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 00:22:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000000)={0x6, 0x5}) 00:22:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) 00:22:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x478) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4, 0xf0, 0x7, 0x40, 0x0, 0xf2d6, 0xc2000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x27080, 0x2, @perf_bp={&(0x7f0000000040)}, 0x107c, 0x7, 0x9, 0x3, 0x6, 0x5, 0xffff, 0x0, 0x146, 0x0, 0x4f65}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x8, 0x7f, 0x2, 0x1, 0x0, 0x9, 0xf58c0044e37d41d7, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x100000000, 0x3, 0xe2dda972cd84293, 0x4, 0x9, 0xffff, 0x0, 0xfff, 0x0, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)) 00:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) 00:22:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x478) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4, 0xf0, 0x7, 0x40, 0x0, 0xf2d6, 0xc2000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x27080, 0x2, @perf_bp={&(0x7f0000000040)}, 0x107c, 0x7, 0x9, 0x3, 0x6, 0x5, 0xffff, 0x0, 0x146, 0x0, 0x4f65}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x8, 0x7f, 0x2, 0x1, 0x0, 0x9, 0xf58c0044e37d41d7, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x100000000, 0x3, 0xe2dda972cd84293, 0x4, 0x9, 0xffff, 0x0, 0xfff, 0x0, 0x8}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (rerun: 32) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)) (rerun: 32) 00:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 00:22:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) 00:22:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 1) 00:22:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x478) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) (async) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x4, 0xf0, 0x7, 0x40, 0x0, 0xf2d6, 0xc2000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x27080, 0x2, @perf_bp={&(0x7f0000000040)}, 0x107c, 0x7, 0x9, 0x3, 0x6, 0x5, 0xffff, 0x0, 0x146, 0x0, 0x4f65}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x8, 0x7f, 0x2, 0x1, 0x0, 0x9, 0xf58c0044e37d41d7, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x100000000, 0x3, 0xe2dda972cd84293, 0x4, 0x9, 0xffff, 0x0, 0xfff, 0x0, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)) 00:22:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 1) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) [ 965.699560] FAULT_INJECTION: forcing a failure. [ 965.699560] name failslab, interval 1, probability 0, space 0, times 0 00:22:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) [ 965.742981] FAULT_INJECTION: forcing a failure. [ 965.742981] name failslab, interval 1, probability 0, space 0, times 0 [ 965.752876] CPU: 0 PID: 5583 Comm: syz-executor.1 Not tainted 4.14.275-syzkaller #0 [ 965.761976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.771334] Call Trace: [ 965.773925] dump_stack+0x1b2/0x281 [ 965.777557] should_fail.cold+0x10a/0x149 [ 965.781712] should_failslab+0xd6/0x130 [ 965.785690] kmem_cache_alloc_trace+0x29a/0x3d0 [ 965.790366] gsmld_open+0x9e/0x7b0 [ 965.793901] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 965.798121] tty_ldisc_open+0x6c/0xb0 [ 965.801907] tty_set_ldisc+0x287/0x5d0 [ 965.805778] tty_ioctl+0xa2a/0x1430 [ 965.809388] ? tty_fasync+0x2c0/0x2c0 [ 965.813173] ? proc_fail_nth_write+0x7b/0x180 [ 965.817654] ? trace_hardirqs_on+0x10/0x10 [ 965.821880] ? fsnotify+0x974/0x11b0 [ 965.825581] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 965.830500] ? debug_check_no_obj_freed+0x2c0/0x680 [ 965.835502] ? SyS_write+0x1b7/0x210 [ 965.839207] ? tty_fasync+0x2c0/0x2c0 [ 965.842994] do_vfs_ioctl+0x75a/0xff0 [ 965.846785] ? lock_acquire+0x170/0x3f0 [ 965.850759] ? ioctl_preallocate+0x1a0/0x1a0 [ 965.855164] ? __fget+0x265/0x3e0 [ 965.858608] ? do_vfs_ioctl+0xff0/0xff0 [ 965.862579] ? security_file_ioctl+0x83/0xb0 [ 965.866978] SyS_ioctl+0x7f/0xb0 [ 965.870347] ? do_vfs_ioctl+0xff0/0xff0 [ 965.874318] do_syscall_64+0x1d5/0x640 [ 965.878194] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 965.883373] RIP: 0033:0x7efcb10730e9 00:22:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) [ 965.887073] RSP: 002b:00007efcaf9e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.894768] RAX: ffffffffffffffda RBX: 00007efcb1185f60 RCX: 00007efcb10730e9 [ 965.902021] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 965.909276] RBP: 00007efcaf9e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 965.916528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.923781] R13: 00007ffc5883ecff R14: 00007efcaf9e8300 R15: 0000000000022000 [ 965.931049] CPU: 1 PID: 5585 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 965.938856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.948216] Call Trace: [ 965.950808] dump_stack+0x1b2/0x281 [ 965.954444] should_fail.cold+0x10a/0x149 [ 965.958592] should_failslab+0xd6/0x130 [ 965.962588] kmem_cache_alloc_trace+0x29a/0x3d0 [ 965.962604] gsmld_open+0x9e/0x7b0 [ 965.962614] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 965.962625] tty_ldisc_open+0x6c/0xb0 [ 965.962635] tty_set_ldisc+0x287/0x5d0 [ 965.962647] tty_ioctl+0xa2a/0x1430 [ 965.962657] ? tty_fasync+0x2c0/0x2c0 00:22:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) [ 965.962668] ? proc_fail_nth_write+0x7b/0x180 [ 965.962680] ? trace_hardirqs_on+0x10/0x10 [ 965.962695] ? fsnotify+0x974/0x11b0 [ 965.962713] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 965.962723] ? debug_check_no_obj_freed+0x2c0/0x680 [ 965.962734] ? SyS_write+0x1b7/0x210 [ 965.962745] ? tty_fasync+0x2c0/0x2c0 [ 965.962754] do_vfs_ioctl+0x75a/0xff0 [ 965.962764] ? lock_acquire+0x170/0x3f0 [ 966.027864] ? ioctl_preallocate+0x1a0/0x1a0 [ 966.027877] ? __fget+0x265/0x3e0 [ 966.035715] ? do_vfs_ioctl+0xff0/0xff0 [ 966.039691] ? security_file_ioctl+0x83/0xb0 00:22:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 966.044102] SyS_ioctl+0x7f/0xb0 [ 966.047472] ? do_vfs_ioctl+0xff0/0xff0 [ 966.051447] do_syscall_64+0x1d5/0x640 [ 966.055343] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 966.060535] RIP: 0033:0x7f05e3be50e9 [ 966.064238] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.071946] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 966.079218] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 966.086501] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 00:22:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 966.086507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.086513] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 00:22:52 executing program 0: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 2) 00:22:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 2) 00:22:52 executing program 0: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:52 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) 00:22:52 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) 00:22:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 966.386413] FAULT_INJECTION: forcing a failure. [ 966.386413] name failslab, interval 1, probability 0, space 0, times 0 [ 966.425927] FAULT_INJECTION: forcing a failure. 00:22:52 executing program 0: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 00:22:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) [ 966.425927] name failslab, interval 1, probability 0, space 0, times 0 00:22:52 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) [ 966.470468] CPU: 1 PID: 5654 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 966.478321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.487671] Call Trace: [ 966.490270] dump_stack+0x1b2/0x281 [ 966.493924] should_fail.cold+0x10a/0x149 [ 966.493938] should_failslab+0xd6/0x130 [ 966.502033] kmem_cache_alloc_trace+0x29a/0x3d0 [ 966.506718] gsmld_open+0xe5/0x7b0 [ 966.506729] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 966.506740] tty_ldisc_open+0x6c/0xb0 [ 966.506750] tty_set_ldisc+0x287/0x5d0 [ 966.506762] tty_ioctl+0xa2a/0x1430 [ 966.506772] ? tty_fasync+0x2c0/0x2c0 [ 966.506783] ? proc_fail_nth_write+0x7b/0x180 [ 966.506795] ? trace_hardirqs_on+0x10/0x10 [ 966.506809] ? fsnotify+0x974/0x11b0 [ 966.506818] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 966.506828] ? debug_check_no_obj_freed+0x2c0/0x680 [ 966.506838] ? SyS_write+0x1b7/0x210 [ 966.506850] ? tty_fasync+0x2c0/0x2c0 [ 966.506860] do_vfs_ioctl+0x75a/0xff0 [ 966.506871] ? lock_acquire+0x170/0x3f0 [ 966.506881] ? ioctl_preallocate+0x1a0/0x1a0 [ 966.506893] ? __fget+0x265/0x3e0 [ 966.506904] ? do_vfs_ioctl+0xff0/0xff0 [ 966.506915] ? security_file_ioctl+0x83/0xb0 [ 966.506925] SyS_ioctl+0x7f/0xb0 [ 966.506933] ? do_vfs_ioctl+0xff0/0xff0 [ 966.506944] do_syscall_64+0x1d5/0x640 [ 966.506959] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 966.506967] RIP: 0033:0x7f05e3be50e9 [ 966.506971] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.506981] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 966.506986] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 966.506991] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.506996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.507002] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 [ 966.527978] CPU: 1 PID: 5658 Comm: syz-executor.1 Not tainted 4.14.275-syzkaller #0 [ 966.665449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.665454] Call Trace: [ 966.665470] dump_stack+0x1b2/0x281 [ 966.665482] should_fail.cold+0x10a/0x149 [ 966.665495] should_failslab+0xd6/0x130 [ 966.689143] kmem_cache_alloc_trace+0x29a/0x3d0 [ 966.693821] gsmld_open+0xe5/0x7b0 [ 966.697365] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 966.701621] tty_ldisc_open+0x6c/0xb0 [ 966.701632] tty_set_ldisc+0x287/0x5d0 [ 966.709302] tty_ioctl+0xa2a/0x1430 [ 966.712934] ? tty_fasync+0x2c0/0x2c0 [ 966.716739] ? proc_fail_nth_write+0x7b/0x180 [ 966.721246] ? trace_hardirqs_on+0x10/0x10 [ 966.725487] ? fsnotify+0x974/0x11b0 [ 966.729217] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 966.734153] ? debug_check_no_obj_freed+0x2c0/0x680 [ 966.739165] ? SyS_write+0x1b7/0x210 [ 966.742881] ? tty_fasync+0x2c0/0x2c0 [ 966.746690] do_vfs_ioctl+0x75a/0xff0 [ 966.750495] ? lock_acquire+0x170/0x3f0 [ 966.754472] ? ioctl_preallocate+0x1a0/0x1a0 [ 966.758884] ? __fget+0x265/0x3e0 [ 966.762340] ? do_vfs_ioctl+0xff0/0xff0 [ 966.766314] ? security_file_ioctl+0x83/0xb0 [ 966.770725] SyS_ioctl+0x7f/0xb0 [ 966.774088] ? do_vfs_ioctl+0xff0/0xff0 [ 966.778067] do_syscall_64+0x1d5/0x640 [ 966.781958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 966.787138] RIP: 0033:0x7efcb10730e9 [ 966.790842] RSP: 002b:00007efcaf9e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.798547] RAX: ffffffffffffffda RBX: 00007efcb1185f60 RCX: 00007efcb10730e9 [ 966.805812] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 966.813080] RBP: 00007efcaf9e81d0 R08: 0000000000000000 R09: 0000000000000000 00:22:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r2 = socket$bt_rfcomm(0x1f, 0x0, 0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1ff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) [ 966.820347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.827616] R13: 00007ffc5883ecff R14: 00007efcaf9e8300 R15: 0000000000022000 00:22:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 3) 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 3) 00:22:53 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200011) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 00:22:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) r2 = socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1ff) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:53 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200011) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000040)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200011) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) [ 967.003751] FAULT_INJECTION: forcing a failure. [ 967.003751] name failslab, interval 1, probability 0, space 0, times 0 [ 967.003758] FAULT_INJECTION: forcing a failure. [ 967.003758] name failslab, interval 1, probability 0, space 0, times 0 [ 967.003773] CPU: 0 PID: 5723 Comm: syz-executor.1 Not tainted 4.14.275-syzkaller #0 [ 967.033948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.033951] Call Trace: [ 967.033971] dump_stack+0x1b2/0x281 [ 967.049524] should_fail.cold+0x10a/0x149 [ 967.053681] should_failslab+0xd6/0x130 [ 967.057666] kmem_cache_alloc_trace+0x29a/0x3d0 [ 967.062375] gsmld_open+0x151/0x7b0 [ 967.062386] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 967.070233] tty_ldisc_open+0x6c/0xb0 [ 967.074043] tty_set_ldisc+0x287/0x5d0 [ 967.077982] tty_ioctl+0xa2a/0x1430 [ 967.081613] ? tty_fasync+0x2c0/0x2c0 [ 967.085416] ? proc_fail_nth_write+0x7b/0x180 [ 967.089919] ? trace_hardirqs_on+0x10/0x10 [ 967.094158] ? fsnotify+0x974/0x11b0 [ 967.097871] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 967.102880] ? debug_check_no_obj_freed+0x2c0/0x680 [ 967.108015] ? SyS_write+0x1b7/0x210 [ 967.111719] ? tty_fasync+0x2c0/0x2c0 [ 967.115510] do_vfs_ioctl+0x75a/0xff0 [ 967.119305] ? lock_acquire+0x170/0x3f0 [ 967.123357] ? ioctl_preallocate+0x1a0/0x1a0 [ 967.127756] ? __fget+0x265/0x3e0 [ 967.131197] ? do_vfs_ioctl+0xff0/0xff0 [ 967.135158] ? security_file_ioctl+0x83/0xb0 [ 967.139578] SyS_ioctl+0x7f/0xb0 [ 967.142943] ? do_vfs_ioctl+0xff0/0xff0 [ 967.146906] do_syscall_64+0x1d5/0x640 [ 967.150788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 967.155984] RIP: 0033:0x7efcb10730e9 [ 967.159677] RSP: 002b:00007efcaf9e8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.167372] RAX: ffffffffffffffda RBX: 00007efcb1185f60 RCX: 00007efcb10730e9 [ 967.174624] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 967.181892] RBP: 00007efcaf9e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.189144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.196422] R13: 00007ffc5883ecff R14: 00007efcaf9e8300 R15: 0000000000022000 [ 967.203728] CPU: 1 PID: 5722 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 967.211528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.220884] Call Trace: [ 967.223489] dump_stack+0x1b2/0x281 [ 967.227125] should_fail.cold+0x10a/0x149 [ 967.231299] should_failslab+0xd6/0x130 [ 967.235285] kmem_cache_alloc_trace+0x29a/0x3d0 [ 967.239964] gsmld_open+0x151/0x7b0 [ 967.243600] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 967.247852] tty_ldisc_open+0x6c/0xb0 00:22:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x7ff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 967.247864] tty_set_ldisc+0x287/0x5d0 [ 967.247877] tty_ioctl+0xa2a/0x1430 [ 967.247887] ? tty_fasync+0x2c0/0x2c0 [ 967.247898] ? proc_fail_nth_write+0x7b/0x180 [ 967.247910] ? trace_hardirqs_on+0x10/0x10 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 967.247925] ? fsnotify+0x974/0x11b0 [ 967.247935] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 967.247944] ? debug_check_no_obj_freed+0x2c0/0x680 [ 967.247955] ? SyS_write+0x1b7/0x210 [ 967.247967] ? tty_fasync+0x2c0/0x2c0 [ 967.247977] do_vfs_ioctl+0x75a/0xff0 [ 967.247988] ? lock_acquire+0x170/0x3f0 [ 967.247997] ? ioctl_preallocate+0x1a0/0x1a0 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 967.248010] ? __fget+0x265/0x3e0 [ 967.248022] ? do_vfs_ioctl+0xff0/0xff0 [ 967.248034] ? security_file_ioctl+0x83/0xb0 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 967.248045] SyS_ioctl+0x7f/0xb0 [ 967.248053] ? do_vfs_ioctl+0xff0/0xff0 [ 967.248064] do_syscall_64+0x1d5/0x640 [ 967.248080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 967.248089] RIP: 0033:0x7f05e3be50e9 [ 967.248094] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.248105] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 967.248111] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 967.248116] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 967.248122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:22:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 4) 00:22:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 967.248127] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 [ 967.981208] FAULT_INJECTION: forcing a failure. [ 967.981208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 967.993034] CPU: 1 PID: 5835 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 968.000827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.010189] Call Trace: [ 968.012773] dump_stack+0x1b2/0x281 [ 968.016404] should_fail.cold+0x10a/0x149 [ 968.020549] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 968.025918] __alloc_pages_nodemask+0x22c/0x2720 [ 968.030673] ? depot_save_stack+0x10d/0x3f0 [ 968.035000] ? __lock_acquire+0x5fc/0x3f20 [ 968.039239] ? tty_ioctl+0xa2a/0x1430 [ 968.043036] ? do_vfs_ioctl+0x75a/0xff0 [ 968.047006] ? SyS_ioctl+0x7f/0xb0 [ 968.050545] ? do_syscall_64+0x1d5/0x640 [ 968.054616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 968.059457] ? __lock_acquire+0x5fc/0x3f20 [ 968.063702] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 968.068813] ? debug_check_no_obj_freed+0x2c0/0x680 [ 968.073844] ? trace_hardirqs_on+0x10/0x10 [ 968.078088] cache_grow_begin+0x91/0x700 [ 968.082146] ? fs_reclaim_release+0xd0/0x110 [ 968.086559] ? check_preemption_disabled+0x35/0x240 [ 968.091579] cache_alloc_refill+0x273/0x350 [ 968.095905] kmem_cache_alloc_trace+0x340/0x3d0 [ 968.100576] gsmld_open+0x151/0x7b0 [ 968.104198] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 968.108427] tty_ldisc_open+0x6c/0xb0 [ 968.112243] tty_set_ldisc+0x287/0x5d0 [ 968.116147] tty_ioctl+0xa2a/0x1430 [ 968.119770] ? tty_fasync+0x2c0/0x2c0 [ 968.123572] ? proc_fail_nth_write+0x7b/0x180 [ 968.128073] ? trace_hardirqs_on+0x10/0x10 [ 968.132326] ? fsnotify+0x974/0x11b0 [ 968.132337] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 968.132347] ? debug_check_no_obj_freed+0x2c0/0x680 [ 968.132357] ? SyS_write+0x1b7/0x210 [ 968.132369] ? tty_fasync+0x2c0/0x2c0 [ 968.132380] do_vfs_ioctl+0x75a/0xff0 [ 968.132392] ? lock_acquire+0x170/0x3f0 [ 968.132402] ? ioctl_preallocate+0x1a0/0x1a0 [ 968.132415] ? __fget+0x265/0x3e0 [ 968.132425] ? do_vfs_ioctl+0xff0/0xff0 [ 968.132445] ? security_file_ioctl+0x83/0xb0 [ 968.132456] SyS_ioctl+0x7f/0xb0 [ 968.132463] ? do_vfs_ioctl+0xff0/0xff0 [ 968.132474] do_syscall_64+0x1d5/0x640 [ 968.132489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 968.132498] RIP: 0033:0x7f05e3be50e9 [ 968.132503] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.132513] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 968.132519] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 968.132524] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 968.132529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:22:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r2 = socket$bt_rfcomm(0x1f, 0x0, 0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1ff) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r3, 0x4b3a, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x1ff) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) 00:22:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:55 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x200011) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 00:22:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x700, 0x401, 0x1, {{0x23, 0x4, 0x3, 0x3, 0x8c, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x59, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x8a, [@broadcast, @broadcast, @private=0xa010100, @multicast2]}, @lsrr={0x83, 0x7, 0x97, [@empty]}, @cipso={0x86, 0x4a, 0x1, [{0xdd57f0fd249e263a, 0x10, "7f451b31ba1d68b92f63f0667343"}, {0x0, 0x6, "49ebd00c"}, {0x7, 0x8, "c87f718b819f"}, {0x0, 0x10, "74f02a3409bd3ed143ba2e30b69f"}, {0x0, 0xf, "f97f8082b56fd3bff37906d3e0"}, {0x7, 0x3, "e9"}, {0x0, 0x4, "6814"}]}]}}}}}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 968.132534] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 00:22:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 5) 00:22:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$KDENABIO(r1, 0x4b36) 00:22:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x40003) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 00:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) [ 969.104947] FAULT_INJECTION: forcing a failure. [ 969.104947] name failslab, interval 1, probability 0, space 0, times 0 00:22:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$KDENABIO(r1, 0x4b36) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 00:22:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) [ 969.208169] CPU: 1 PID: 6100 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 969.215989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.225340] Call Trace: [ 969.227924] dump_stack+0x1b2/0x281 [ 969.231544] should_fail.cold+0x10a/0x149 [ 969.235679] should_failslab+0xd6/0x130 [ 969.239635] __kmalloc+0x2c1/0x400 [ 969.243158] ? __kfifo_alloc+0xdc/0x240 [ 969.247119] __kfifo_alloc+0xdc/0x240 [ 969.250903] gsm_dlci_alloc+0xd4/0x460 [ 969.254771] gsm_activate_mux+0x22e/0x2e0 [ 969.258904] gsmld_open+0x4ed/0x7b0 [ 969.262513] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 969.266730] tty_ldisc_open+0x6c/0xb0 [ 969.270512] tty_set_ldisc+0x287/0x5d0 [ 969.274387] tty_ioctl+0xa2a/0x1430 [ 969.277996] ? tty_fasync+0x2c0/0x2c0 [ 969.281778] ? proc_fail_nth_write+0x7b/0x180 [ 969.286259] ? trace_hardirqs_on+0x10/0x10 [ 969.290480] ? fsnotify+0x974/0x11b0 [ 969.294173] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 969.299173] ? SyS_write+0x1b7/0x210 [ 969.302890] ? tty_fasync+0x2c0/0x2c0 [ 969.306668] do_vfs_ioctl+0x75a/0xff0 [ 969.310452] ? lock_acquire+0x170/0x3f0 [ 969.314409] ? ioctl_preallocate+0x1a0/0x1a0 [ 969.318828] ? __fget+0x265/0x3e0 [ 969.322262] ? do_vfs_ioctl+0xff0/0xff0 [ 969.326220] ? security_file_ioctl+0x83/0xb0 [ 969.330614] SyS_ioctl+0x7f/0xb0 [ 969.333958] ? do_vfs_ioctl+0xff0/0xff0 [ 969.337915] do_syscall_64+0x1d5/0x640 [ 969.341790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 969.347078] RIP: 0033:0x7f05e3be50e9 [ 969.350769] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:22:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x40003) (async) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) [ 969.358460] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 969.365815] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 969.373074] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 969.380414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.387667] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 00:22:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x40003) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 00:22:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x700, 0x401, 0x1, {{0x23, 0x4, 0x3, 0x3, 0x8c, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x59, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x8a, [@broadcast, @broadcast, @private=0xa010100, @multicast2]}, @lsrr={0x83, 0x7, 0x97, [@empty]}, @cipso={0x86, 0x4a, 0x1, [{0xdd57f0fd249e263a, 0x10, "7f451b31ba1d68b92f63f0667343"}, {0x0, 0x6, "49ebd00c"}, {0x7, 0x8, "c87f718b819f"}, {0x0, 0x10, "74f02a3409bd3ed143ba2e30b69f"}, {0x0, 0xf, "f97f8082b56fd3bff37906d3e0"}, {0x7, 0x3, "e9"}, {0x0, 0x4, "6814"}]}]}}}}}) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x181002, 0x0) ioctl$KDENABIO(r1, 0x4b36) 00:22:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) 00:22:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="660fc7360f01d1b805000000b9000000000f01c1b949090000b8c7000000ba000000000f30f30f598041000000ff986bad0000b9800000c00f3235000400000f3066baa100b008ee260fc79b6c738d4f9a6b9a00004f00", 0x57}], 0x1, 0x30, &(0x7f00000000c0), 0x0) 00:22:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) (fail_nth: 6) 00:22:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) (async) 00:22:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) [ 970.011512] FAULT_INJECTION: forcing a failure. [ 970.011512] name failslab, interval 1, probability 0, space 0, times 0 [ 970.111842] CPU: 1 PID: 6319 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 970.119659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.129001] Call Trace: [ 970.131597] dump_stack+0x1b2/0x281 [ 970.135211] should_fail.cold+0x10a/0x149 [ 970.139356] should_failslab+0xd6/0x130 [ 970.143314] kmem_cache_alloc_trace+0x29a/0x3d0 [ 970.147971] tty_register_device_attr+0x1d2/0x710 [ 970.152802] ? redirected_tty_write+0xb0/0xb0 [ 970.157285] ? __raw_spin_lock_init+0x28/0x100 [ 970.161855] ? tty_port_init+0xa2/0x190 [ 970.165835] ? gsm_dlci_alloc+0x390/0x460 [ 970.170001] gsmld_open+0x548/0x7b0 [ 970.173622] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 970.177845] tty_ldisc_open+0x6c/0xb0 [ 970.181632] tty_set_ldisc+0x287/0x5d0 [ 970.185594] tty_ioctl+0xa2a/0x1430 [ 970.189204] ? tty_fasync+0x2c0/0x2c0 [ 970.192987] ? proc_fail_nth_write+0x7b/0x180 [ 970.197470] ? trace_hardirqs_on+0x10/0x10 [ 970.201697] ? fsnotify+0x974/0x11b0 [ 970.205393] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 970.210308] ? debug_check_no_obj_freed+0x2c0/0x680 [ 970.215309] ? SyS_write+0x1b7/0x210 [ 970.219006] ? tty_fasync+0x2c0/0x2c0 [ 970.222793] do_vfs_ioctl+0x75a/0xff0 [ 970.226589] ? lock_acquire+0x170/0x3f0 [ 970.230605] ? ioctl_preallocate+0x1a0/0x1a0 [ 970.234999] ? __fget+0x265/0x3e0 [ 970.238442] ? do_vfs_ioctl+0xff0/0xff0 [ 970.242489] ? security_file_ioctl+0x83/0xb0 [ 970.246885] SyS_ioctl+0x7f/0xb0 [ 970.250233] ? do_vfs_ioctl+0xff0/0xff0 [ 970.254190] do_syscall_64+0x1d5/0x640 [ 970.258066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 970.263237] RIP: 0033:0x7f05e3be50e9 [ 970.266935] RSP: 002b:00007f05e255a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.274641] RAX: ffffffffffffffda RBX: 00007f05e3cf7f60 RCX: 00007f05e3be50e9 [ 970.281898] RDX: 0000000020000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 970.289152] RBP: 00007f05e255a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 970.296404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.303656] R13: 00007ffe3356552f R14: 00007f05e255a300 R15: 0000000000022000 00:22:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) 00:22:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) 00:22:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) [ 970.752426] kasan: CONFIG_KASAN_INLINE enabled [ 970.762801] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 970.810385] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 970.816721] Modules linked in: [ 970.820000] CPU: 1 PID: 6304 Comm: syz-executor.5 Not tainted 4.14.275-syzkaller #0 [ 970.827785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.837230] task: ffff8880a1062200 task.stack: ffff8880a3410000 [ 970.843296] RIP: 0010:cdev_del+0x22/0x90 [ 970.847347] RSP: 0018:ffff8880a3417ca0 EFLAGS: 00010207 [ 970.852707] RAX: dffffc0000000000 RBX: ffff888238893a00 RCX: 0000000000000000 [ 970.859971] RDX: 000000000000000c RSI: ffff8880a1062a88 RDI: 0000000000000064 [ 970.867233] RBP: 0000000000000000 R08: ffffffff8b9b68d0 R09: 0000000000000000 [ 970.874495] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888238893a08 [ 970.881755] R13: ffff888238527408 R14: ffff8880ab7aa980 R15: ffff88809cd63d98 [ 970.889023] FS: 00005555559b6400(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 970.897329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.903205] CR2: 00007fff172e3ff8 CR3: 0000000096f64000 CR4: 00000000003426e0 [ 970.910616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 970.917879] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 970.925141] Call Trace: [ 970.927733] tty_unregister_device+0x101/0x1a0 [ 970.932322] gsmld_close+0xaa/0x1f0 [ 970.936037] ? gsmtty_cleanup+0x150/0x150 [ 970.940190] tty_ldisc_close+0x8c/0xc0 [ 970.944084] tty_ldisc_release+0xe8/0x400 [ 970.948235] tty_release_struct+0x20/0xe0 [ 970.952380] tty_release+0xb3f/0x10d0 [ 970.956178] ? do_tty_hangup+0x30/0x30 [ 970.960071] __fput+0x25f/0x7a0 [ 970.960082] task_work_run+0x11f/0x190 [ 970.960092] exit_to_usermode_loop+0x1ad/0x200 [ 970.960099] do_syscall_64+0x4a3/0x640 [ 970.960108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 970.960114] RIP: 0033:0x7f05e3b97d2b [ 970.960117] RSP: 002b:00007ffe33565590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 970.960123] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f05e3b97d2b [ 970.960126] RDX: 0000000000000000 RSI: 0000001b2d8215b4 RDI: 0000000000000003 [ 970.960129] RBP: 00007f05e3cf9960 R08: 0000000000000000 R09: 000000006e2d4e9e [ 970.960133] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000ed091 [ 970.960136] R13: 00007ffe33565690 R14: 00007ffe335656b0 R15: 0000000000000032 00:22:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x700, 0x401, 0x1, {{0x23, 0x4, 0x3, 0x3, 0x8c, 0x64, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x59, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x8a, [@broadcast, @broadcast, @private=0xa010100, @multicast2]}, @lsrr={0x83, 0x7, 0x97, [@empty]}, @cipso={0x86, 0x4a, 0x1, [{0xdd57f0fd249e263a, 0x10, "7f451b31ba1d68b92f63f0667343"}, {0x0, 0x6, "49ebd00c"}, {0x7, 0x8, "c87f718b819f"}, {0x0, 0x10, "74f02a3409bd3ed143ba2e30b69f"}, {0x0, 0xf, "f97f8082b56fd3bff37906d3e0"}, {0x7, 0x3, "e9"}, {0x0, 0x4, "6814"}]}]}}}}}) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) 00:22:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) 00:22:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x200011) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) (async) 00:22:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 00:22:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x30, &(0x7f00000000c0), 0x0) [ 970.960143] Code: e5 44 f7 ff eb d2 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 e3 93 cd ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f [ 970.960269] RIP: cdev_del+0x22/0x90 RSP: ffff8880a3417ca0 [ 971.079767] ---[ end trace b59147386447bb3d ]--- [ 971.577179] Kernel panic - not syncing: Fatal exception [ 971.582620] Kernel Offset: disabled [ 971.586243] Rebooting in 86400 seconds..