60e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xa00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xc00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xb00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[0x0]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xd00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xc00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xe00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xd00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xedf, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xe00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xffe, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xedf, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1100, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1100, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1200, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1200, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:30:40 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2500, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1c00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="1c", 0x1}]) 20:30:40 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x4000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2500, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, 0x0) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5c00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xdf0e, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x4000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, 0x0) 20:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5505, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfe0f, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5c00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xff00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, 0x0) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x20000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, &(0x7f0000000580)) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x8d00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x200000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xdf0e, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, &(0x7f0000000580)) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x900, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xff00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x3000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x20000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, &(0x7f0000000580)) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x4000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[0x0]) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[0x0]) 20:30:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x6000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x3000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x7000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5427, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[0x0]) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x4000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x8000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, 0x0) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x9000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x8000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xa000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x6000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x2000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(0xffffffffffffffff, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x7000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xb000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r0, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="1c", 0x1}]) 20:30:42 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xc000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x8000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 20:30:42 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x9000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xd000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xe000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xa000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x10000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xb000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x3, &(0x7f0000002400)=[{&(0x7f00000001c0)="0400050900000000666174000404090a020002740e", 0x15}, {0x0, 0x0, 0xfffffffffffffff7}, {&(0x7f00000000c0)="01", 0x1, 0x25}], 0x0, &(0x7f00000004c0)=ANY=[]) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200)=""/86) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x11000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xc000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 715.591305][ T1924] FAT-fs (loop4): invalid media value (0x00) [ 715.625458][ T1924] FAT-fs (loop4): Can't find a valid FAT filesystem 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x12000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xd000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xe000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x25000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x10000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x40000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5c000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x11000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x80ffffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x12000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xdf0e0000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x1c000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfdfdffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x25000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfe0f0000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x40000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xff000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x55050000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5425, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfffffdfd, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x5c000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xffffff80, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, 0x0) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x80ffffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x81ffffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x82ffffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x3, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x8d000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xdf0e0000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfdfdffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xff000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xfffffdfd, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x6, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xffffff80, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x7, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xffffff81, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x9, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0xffffff82, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, 0x0) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, 0x0) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, 0x0) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x3, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x10, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x6, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) io_setup(0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec", 0x4b, 0x11, 0x0, 0x0) 20:30:46 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:30:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x11, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x7, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 719.471229][ T2465] FAULT_INJECTION: forcing a failure. [ 719.471229][ T2465] name failslab, interval 1, probability 0, space 0, times 0 [ 719.507476][ T2465] CPU: 0 PID: 2465 Comm: syz-executor.4 Not tainted 5.8.0-rc6-syzkaller #0 [ 719.516155][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.526195][ T2465] Call Trace: [ 719.529468][ T2465] dump_stack+0x10f/0x19d [ 719.533776][ T2465] should_fail+0x23c/0x250 [ 719.538175][ T2465] __should_failslab+0x81/0x90 [ 719.542948][ T2465] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 719.548655][ T2465] should_failslab+0x5/0x20 [ 719.553137][ T2465] __kmalloc+0x43/0x2d0 [ 719.557444][ T2465] tomoyo_realpath_from_path+0x98/0x3c0 [ 719.563048][ T2465] tomoyo_path_number_perm+0xc1/0x2d0 [ 719.568411][ T2465] ? __rcu_read_unlock+0x4b/0x260 [ 719.573420][ T2465] tomoyo_file_ioctl+0x1c/0x20 [ 719.578172][ T2465] security_file_ioctl+0x45/0x90 [ 719.583121][ T2465] __se_sys_ioctl+0x48/0x130 [ 719.587697][ T2465] __x64_sys_ioctl+0x3f/0x50 [ 719.592269][ T2465] do_syscall_64+0x51/0xb0 [ 719.596735][ T2465] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 719.602603][ T2465] RIP: 0033:0x45c1f9 [ 719.606507][ T2465] Code: Bad RIP value. [ 719.610556][ T2465] RSP: 002b:00007f463ce8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.618945][ T2465] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 719.626966][ T2465] RDX: 0000000000000000 RSI: 0000000000005418 RDI: 0000000000000004 [ 719.634922][ T2465] RBP: 00007f463ce8fca0 R08: 0000000000000000 R09: 0000000000000000 [ 719.642876][ T2465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.650893][ T2465] R13: 00007ffcefebae1f R14: 00007f463ce909c0 R15: 000000000078bf0c [ 719.678007][ T2465] ERROR: Out of memory at tomoyo_realpath_from_path. 20:30:47 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:47 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x12, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 2 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 4 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) [ 719.810203][ T2508] FAULT_INJECTION: forcing a failure. [ 719.810203][ T2508] name failslab, interval 1, probability 0, space 0, times 0 [ 719.815962][ T2507] FAULT_INJECTION: forcing a failure. [ 719.815962][ T2507] name failslab, interval 1, probability 0, space 0, times 0 [ 719.826838][ T2508] CPU: 0 PID: 2508 Comm: syz-executor.4 Not tainted 5.8.0-rc6-syzkaller #0 [ 719.843918][ T2508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.854029][ T2508] Call Trace: [ 719.857307][ T2508] dump_stack+0x10f/0x19d [ 719.861625][ T2508] should_fail+0x23c/0x250 [ 719.866130][ T2508] __should_failslab+0x81/0x90 [ 719.870939][ T2508] ? tomoyo_encode2+0x1e2/0x350 [ 719.875774][ T2508] should_failslab+0x5/0x20 [ 719.880262][ T2508] __kmalloc+0x43/0x2d0 [ 719.884405][ T2508] ? tomoyo_get_local_path+0x421/0x430 [ 719.889846][ T2508] tomoyo_encode2+0x1e2/0x350 [ 719.894508][ T2508] tomoyo_realpath_from_path+0x36e/0x3c0 [ 719.900122][ T2508] tomoyo_path_number_perm+0xc1/0x2d0 [ 719.905484][ T2508] ? __rcu_read_unlock+0x4b/0x260 [ 719.910548][ T2508] tomoyo_file_ioctl+0x1c/0x20 [ 719.915358][ T2508] security_file_ioctl+0x45/0x90 [ 719.920269][ T2508] __se_sys_ioctl+0x48/0x130 [ 719.924831][ T2508] __x64_sys_ioctl+0x3f/0x50 [ 719.929400][ T2508] do_syscall_64+0x51/0xb0 [ 719.933790][ T2508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 719.939653][ T2508] RIP: 0033:0x45c1f9 [ 719.943515][ T2508] Code: Bad RIP value. [ 719.947580][ T2508] RSP: 002b:00007f463ce8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.955967][ T2508] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 719.963941][ T2508] RDX: 0000000000000000 RSI: 0000000000005418 RDI: 0000000000000004 [ 719.971887][ T2508] RBP: 00007f463ce8fca0 R08: 0000000000000000 R09: 0000000000000000 [ 719.979852][ T2508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.987835][ T2508] R13: 00007ffcefebae1f R14: 00007f463ce909c0 R15: 000000000078bf0c [ 719.999998][ T2507] CPU: 1 PID: 2507 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 720.008577][ T2507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.018665][ T2507] Call Trace: [ 720.021981][ T2507] dump_stack+0x10f/0x19d [ 720.026335][ T2507] should_fail+0x23c/0x250 [ 720.030736][ T2507] __should_failslab+0x81/0x90 [ 720.034737][ T2508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 720.035485][ T2507] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 720.047820][ T2507] should_failslab+0x5/0x20 [ 720.052304][ T2507] __kmalloc+0x43/0x2d0 [ 720.056490][ T2507] tomoyo_realpath_from_path+0x98/0x3c0 [ 720.062021][ T2507] tomoyo_path_number_perm+0xc1/0x2d0 [ 720.067388][ T2507] ? __rcu_read_unlock+0x4b/0x260 [ 720.072398][ T2507] tomoyo_file_ioctl+0x1c/0x20 [ 720.077145][ T2507] security_file_ioctl+0x45/0x90 [ 720.082065][ T2507] __se_sys_ioctl+0x48/0x130 [ 720.086644][ T2507] __x64_sys_ioctl+0x3f/0x50 [ 720.091222][ T2507] do_syscall_64+0x51/0xb0 [ 720.095681][ T2507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 720.101557][ T2507] RIP: 0033:0x45c1f9 [ 720.105422][ T2507] Code: Bad RIP value. 20:30:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x25, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 4 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:30:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x9, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 720.109467][ T2507] RSP: 002b:00007f5dec2d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.117860][ T2507] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 720.125814][ T2507] RDX: 0000000020000100 RSI: 0000000000005424 RDI: 0000000000000004 [ 720.133816][ T2507] RBP: 00007f5dec2d6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 720.141855][ T2507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.149815][ T2507] R13: 00007fff561d549f R14: 00007f5dec2d79c0 R15: 000000000078bf0c 20:30:47 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:30:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 2 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 720.303852][ T2507] ERROR: Out of memory at tomoyo_realpath_from_path. 20:30:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2, 0x0) 20:30:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x300, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 720.396346][ T2558] FAULT_INJECTION: forcing a failure. [ 720.396346][ T2558] name failslab, interval 1, probability 0, space 0, times 0 [ 720.432799][ T2558] CPU: 1 PID: 2558 Comm: syz-executor.2 Not tainted 5.8.0-rc6-syzkaller #0 [ 720.441684][ T2558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.451728][ T2558] Call Trace: [ 720.455033][ T2558] dump_stack+0x10f/0x19d [ 720.459355][ T2558] should_fail+0x23c/0x250 [ 720.463766][ T2558] __should_failslab+0x81/0x90 [ 720.468564][ T2558] ? tomoyo_encode2+0x1e2/0x350 [ 720.473399][ T2558] should_failslab+0x5/0x20 [ 720.477885][ T2558] __kmalloc+0x43/0x2d0 [ 720.482026][ T2558] ? tomoyo_get_local_path+0x421/0x430 [ 720.487471][ T2558] tomoyo_encode2+0x1e2/0x350 [ 720.492193][ T2558] tomoyo_realpath_from_path+0x36e/0x3c0 [ 720.497967][ T2558] tomoyo_path_number_perm+0xc1/0x2d0 [ 720.503414][ T2558] ? __rcu_read_unlock+0x4b/0x260 [ 720.508437][ T2558] tomoyo_file_ioctl+0x1c/0x20 [ 720.513260][ T2558] security_file_ioctl+0x45/0x90 [ 720.518240][ T2558] __se_sys_ioctl+0x48/0x130 [ 720.522848][ T2558] __x64_sys_ioctl+0x3f/0x50 [ 720.527426][ T2558] do_syscall_64+0x51/0xb0 [ 720.531887][ T2558] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 720.537757][ T2558] RIP: 0033:0x45c1f9 [ 720.541627][ T2558] Code: Bad RIP value. 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x600, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 720.545672][ T2558] RSP: 002b:00007f5dec2d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.554063][ T2558] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 720.562019][ T2558] RDX: 0000000020000100 RSI: 0000000000005424 RDI: 0000000000000004 [ 720.569981][ T2558] RBP: 00007f5dec2d6ca0 R08: 0000000000000000 R09: 0000000000000000 [ 720.577947][ T2558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.585904][ T2558] R13: 00007fff561d549f R14: 00007f5dec2d79c0 R15: 000000000078bf0c 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x700, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x10, 0x0) 20:30:48 executing program 2 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 720.647634][ T2558] ERROR: Out of memory at tomoyo_realpath_from_path. 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x900, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x1262, 0x0) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2275, 0x0) 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x10, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, 0x0) 20:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x11, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540a, 0x0) 20:30:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x12, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 20:30:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1c, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) 20:30:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xedf, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x25, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540d, 0x0) 20:30:49 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="1c", 0x1}]) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xffe, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:30:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x12, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5413, 0x0) 20:30:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1100, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, 0x0) 20:30:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8d, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="1c", 0x1}]) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, 0x0) 20:30:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1200, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x300, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 722.850856][ T2800] FAULT_INJECTION: forcing a failure. [ 722.850856][ T2800] name failslab, interval 1, probability 0, space 0, times 0 [ 722.864383][ T2800] CPU: 1 PID: 2800 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 722.873083][ T2800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.883121][ T2800] Call Trace: [ 722.886400][ T2800] dump_stack+0x10f/0x19d [ 722.890712][ T2800] should_fail+0x23c/0x250 [ 722.895149][ T2800] __should_failslab+0x81/0x90 [ 722.899902][ T2800] ? tomoyo_realpath_from_path+0x98/0x3c0 [ 722.905692][ T2800] should_failslab+0x5/0x20 [ 722.910180][ T2800] __kmalloc+0x43/0x2d0 [ 722.914426][ T2800] tomoyo_realpath_from_path+0x98/0x3c0 [ 722.919958][ T2800] tomoyo_path_number_perm+0xc1/0x2d0 [ 722.925491][ T2800] ? __rcu_read_unlock+0x4b/0x260 [ 722.930495][ T2800] tomoyo_file_ioctl+0x1c/0x20 [ 722.935311][ T2800] security_file_ioctl+0x45/0x90 [ 722.940234][ T2800] __se_sys_ioctl+0x48/0x130 [ 722.944810][ T2800] __x64_sys_ioctl+0x3f/0x50 [ 722.949378][ T2800] do_syscall_64+0x51/0xb0 [ 722.953847][ T2800] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 722.959718][ T2800] RIP: 0033:0x45c1f9 [ 722.963586][ T2800] Code: Bad RIP value. [ 722.967635][ T2800] RSP: 002b:00007fbb30ae5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.976028][ T2800] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 722.983980][ T2800] RDX: 0000000000000000 RSI: 0000000000005409 RDI: 0000000000000004 [ 722.991934][ T2800] RBP: 00007fbb30ae5ca0 R08: 0000000000000000 R09: 0000000000000000 20:30:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5415, 0x0) 20:30:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x500, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 722.999887][ T2800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.007869][ T2800] R13: 00007ffebadaf69f R14: 00007fbb30ae69c0 R15: 000000000078bf0c 20:30:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5413, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5416, 0x0) [ 723.042910][ T2800] ERROR: Out of memory at tomoyo_realpath_from_path. 20:30:51 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="1c", 0x1}]) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:51 executing program 0 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5417, 0x0) 20:30:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x555, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5415, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, 0x0) 20:30:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x600, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 723.843253][ T2851] FAULT_INJECTION: forcing a failure. [ 723.843253][ T2851] name failslab, interval 1, probability 0, space 0, times 0 [ 723.905574][ T2851] CPU: 1 PID: 2851 Comm: syz-executor.0 Not tainted 5.8.0-rc6-syzkaller #0 [ 723.914338][ T2851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.924376][ T2851] Call Trace: [ 723.927657][ T2851] dump_stack+0x10f/0x19d [ 723.931971][ T2851] should_fail+0x23c/0x250 [ 723.936370][ T2851] __should_failslab+0x81/0x90 [ 723.941117][ T2851] ? tomoyo_encode2+0x1e2/0x350 [ 723.945950][ T2851] should_failslab+0x5/0x20 [ 723.950436][ T2851] __kmalloc+0x43/0x2d0 20:30:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, 0x0) 20:30:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, 0x0) [ 723.954578][ T2851] ? tomoyo_get_local_path+0x421/0x430 [ 723.960020][ T2851] tomoyo_encode2+0x1e2/0x350 [ 723.964747][ T2851] tomoyo_realpath_from_path+0x36e/0x3c0 [ 723.970437][ T2851] tomoyo_path_number_perm+0xc1/0x2d0 [ 723.975867][ T2851] ? __rcu_read_unlock+0x4b/0x260 [ 723.980894][ T2851] tomoyo_file_ioctl+0x1c/0x20 [ 723.985681][ T2851] security_file_ioctl+0x45/0x90 [ 723.990607][ T2851] __se_sys_ioctl+0x48/0x130 [ 723.995233][ T2851] __x64_sys_ioctl+0x3f/0x50 [ 723.999911][ T2851] do_syscall_64+0x51/0xb0 [ 724.004314][ T2851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 724.010260][ T2851] RIP: 0033:0x45c1f9 [ 724.014140][ T2851] Code: Bad RIP value. [ 724.018181][ T2851] RSP: 002b:00007fbb30ae5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.026624][ T2851] RAX: ffffffffffffffda RBX: 0000000000017240 RCX: 000000000045c1f9 [ 724.034578][ T2851] RDX: 0000000000000000 RSI: 0000000000005409 RDI: 0000000000000004 [ 724.042532][ T2851] RBP: 00007fbb30ae5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 724.050486][ T2851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.058434][ T2851] R13: 00007ffebadaf69f R14: 00007fbb30ae69c0 R15: 000000000078bf0c [ 724.200203][ T2851] ERROR: Out of memory at tomoyo_realpath_from_path. 20:30:52 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, 0x0, 0x0) 20:30:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x700, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, 0x0) 20:30:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xdf0e, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 0 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:30:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, 0x0) 20:30:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x900, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfe0f, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5417, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2, 0x0) 20:30:53 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, 0x0, 0x0) 20:30:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, 0x0) 20:30:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xff00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x10, 0x0) 20:30:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c00, 0x0) 20:30:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x20000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, 0x0) 20:30:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, 0x0) 20:30:54 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, 0x0, 0x0) 20:30:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x200000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, 0x0) 20:30:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, 0x0) 20:30:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5428, 0x0) 20:30:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5402, 0x0) 20:30:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5429, 0x0) 20:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5403, 0x0) 20:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5437, 0x0) 20:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x700, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 20:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xedf, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x3000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5405, 0x0) 20:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5450, 0x0) 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1100, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 3 (fault-call:8 fault-nth:0): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5406, 0x0) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5451, 0x0) [ 728.037068][ T3074] FAULT_INJECTION: forcing a failure. [ 728.037068][ T3074] name failslab, interval 1, probability 0, space 0, times 0 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 728.100369][ T3074] CPU: 1 PID: 3074 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 728.108999][ T3074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.119034][ T3074] Call Trace: [ 728.122369][ T3074] dump_stack+0x10f/0x19d [ 728.126684][ T3074] should_fail+0x23c/0x250 [ 728.131083][ T3074] __should_failslab+0x81/0x90 [ 728.135832][ T3074] should_failslab+0x5/0x20 [ 728.140317][ T3074] kmem_cache_alloc+0x29/0x2b0 [ 728.145073][ T3074] ? io_submit_one+0xaf/0xe10 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x6000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 728.149813][ T3074] io_submit_one+0xaf/0xe10 [ 728.154304][ T3074] ? asm_exc_page_fault+0x1e/0x30 [ 728.159313][ T3074] __se_sys_io_submit+0xf5/0x250 [ 728.164239][ T3074] ? debug_smp_processor_id+0x18/0x20 [ 728.169598][ T3074] ? fpregs_assert_state_consistent+0x7e/0x90 [ 728.175654][ T3074] __x64_sys_io_submit+0x3f/0x50 [ 728.180582][ T3074] do_syscall_64+0x51/0xb0 [ 728.184985][ T3074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 728.190879][ T3074] RIP: 0033:0x45c1f9 [ 728.194751][ T3074] Code: Bad RIP value. 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1200, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x7000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 728.198799][ T3074] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 728.207189][ T3074] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 728.215152][ T3074] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 728.223143][ T3074] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 728.231097][ T3074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.239049][ T3074] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:55 executing program 3 (fault-call:8 fault-nth:1): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5407, 0x0) 20:30:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5452, 0x0) 20:30:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1c00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5408, 0x0) 20:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x9000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545d, 0x0) 20:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540a, 0x0) [ 728.612075][ T3136] FAULT_INJECTION: forcing a failure. [ 728.612075][ T3136] name failslab, interval 1, probability 0, space 0, times 0 [ 728.650977][ T3136] CPU: 1 PID: 3136 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 728.659568][ T3136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 728.669606][ T3136] Call Trace: [ 728.672947][ T3136] dump_stack+0x10f/0x19d [ 728.677262][ T3136] should_fail+0x23c/0x250 [ 728.681667][ T3136] __should_failslab+0x81/0x90 [ 728.686418][ T3136] should_failslab+0x5/0x20 [ 728.690942][ T3136] kmem_cache_alloc_trace+0x32/0x2c0 [ 728.696217][ T3136] ? finish_task_switch+0x8b/0x270 [ 728.701369][ T3136] ? netdevice_event+0x297/0x660 [ 728.706306][ T3136] netdevice_event+0x297/0x660 [ 728.711051][ T3136] ? __rcu_read_unlock+0x4b/0x260 [ 728.716058][ T3136] ? preempt_count_add+0x4e/0x90 [ 728.720975][ T3136] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 728.726936][ T3136] ? netdevice_event+0x660/0x660 [ 728.731863][ T3136] ? rdma_roce_rescan_device+0x30/0x30 [ 728.737304][ T3136] ? cfg802154_netdev_notifier_call+0x9c/0x400 [ 728.743435][ T3136] raw_notifier_call_chain+0x53/0xb0 [ 728.748702][ T3136] rollback_registered_many+0x74f/0xce0 [ 728.754247][ T3136] unregister_netdevice_queue+0x1cd/0x2f0 [ 728.759948][ T3136] __tun_detach+0xb33/0x1020 [ 728.764526][ T3136] ? tun_chr_open+0x290/0x290 [ 728.769185][ T3136] tun_chr_close+0x5d/0xa0 [ 728.773582][ T3136] __fput+0x1df/0x460 [ 728.777664][ T3136] ____fput+0x11/0x20 [ 728.781629][ T3136] task_work_run+0x8e/0x110 [ 728.786118][ T3136] get_signal+0x3f6/0x1650 [ 728.790559][ T3136] do_signal+0x25/0x270 [ 728.794693][ T3136] ? __rcu_read_unlock+0x4b/0x260 [ 728.799696][ T3136] ? __se_sys_io_submit+0x1b9/0x250 [ 728.804878][ T3136] __prepare_exit_to_usermode+0x127/0x230 [ 728.810585][ T3136] __syscall_return_slowpath+0x47/0x60 [ 728.816025][ T3136] do_syscall_64+0x5d/0xb0 [ 728.820424][ T3136] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 728.826296][ T3136] RIP: 0033:0x45c1f9 [ 728.830167][ T3136] Code: Bad RIP value. [ 728.834206][ T3136] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 728.842591][ T3136] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 728.850531][ T3136] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 728.858472][ T3136] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 728.866410][ T3136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.874383][ T3136] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:56 executing program 3 (fault-call:8 fault-nth:2): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, 0x0) 20:30:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5460, 0x0) 20:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, 0x0) 20:30:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6364, 0x0) 20:30:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5505, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 729.169653][ T3183] FAULT_INJECTION: forcing a failure. [ 729.169653][ T3183] name failslab, interval 1, probability 0, space 0, times 0 [ 729.215784][ T3183] CPU: 0 PID: 3183 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 729.224386][ T3183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.234423][ T3183] Call Trace: [ 729.237713][ T3183] dump_stack+0x10f/0x19d [ 729.242027][ T3183] should_fail+0x23c/0x250 [ 729.246426][ T3183] __should_failslab+0x81/0x90 [ 729.251224][ T3183] should_failslab+0x5/0x20 [ 729.255711][ T3183] kmem_cache_alloc_node+0x38/0x260 [ 729.260909][ T3183] ? check_preemption_disabled+0x51/0x140 [ 729.266620][ T3183] ? __alloc_skb+0x97/0x2e0 [ 729.271147][ T3183] __alloc_skb+0x97/0x2e0 [ 729.275507][ T3183] inet_netconf_notify_devconf+0x163/0x220 [ 729.281298][ T3183] inetdev_event+0x5f1/0xad0 [ 729.285880][ T3183] ? netdevice_event+0x660/0x660 [ 729.290982][ T3183] ? rdma_roce_rescan_device+0x30/0x30 [ 729.296630][ T3183] raw_notifier_call_chain+0x53/0xb0 [ 729.301910][ T3183] rollback_registered_many+0x74f/0xce0 [ 729.307501][ T3183] ? __queue_delayed_work+0xea/0x150 [ 729.312765][ T3183] unregister_netdevice_queue+0x1cd/0x2f0 [ 729.318474][ T3183] __tun_detach+0xb33/0x1020 [ 729.323055][ T3183] ? tun_chr_open+0x290/0x290 [ 729.327709][ T3183] tun_chr_close+0x5d/0xa0 [ 729.332104][ T3183] __fput+0x1df/0x460 [ 729.336067][ T3183] ____fput+0x11/0x20 [ 729.340029][ T3183] task_work_run+0x8e/0x110 [ 729.344518][ T3183] get_signal+0x3f6/0x1650 [ 729.349064][ T3183] do_signal+0x25/0x270 [ 729.353200][ T3183] ? __rcu_read_unlock+0x4b/0x260 [ 729.358208][ T3183] ? __se_sys_io_submit+0x1b9/0x250 [ 729.363394][ T3183] __prepare_exit_to_usermode+0x127/0x230 [ 729.369098][ T3183] __syscall_return_slowpath+0x47/0x60 [ 729.374537][ T3183] do_syscall_64+0x5d/0xb0 [ 729.378941][ T3183] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 729.384810][ T3183] RIP: 0033:0x45c1f9 [ 729.388694][ T3183] Code: Bad RIP value. [ 729.392749][ T3183] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 729.401139][ T3183] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 729.409176][ T3183] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 729.417127][ T3183] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 729.425098][ T3183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.433047][ T3183] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:57 executing program 3 (fault-call:8 fault-nth:3): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8912, 0x0) 20:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540d, 0x0) 20:30:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540e, 0x0) 20:30:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, 0x0) 20:30:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8d00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5410, 0x0) [ 729.737788][ T3230] FAULT_INJECTION: forcing a failure. [ 729.737788][ T3230] name failslab, interval 1, probability 0, space 0, times 0 [ 729.768289][ T3230] CPU: 1 PID: 3230 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 729.776879][ T3230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.786917][ T3230] Call Trace: [ 729.790202][ T3230] dump_stack+0x10f/0x19d [ 729.794563][ T3230] should_fail+0x23c/0x250 [ 729.799006][ T3230] __should_failslab+0x81/0x90 [ 729.803793][ T3230] should_failslab+0x5/0x20 [ 729.808351][ T3230] kmem_cache_alloc_node_trace+0x3b/0x260 [ 729.814165][ T3230] ? __kmalloc_node_track_caller+0x30/0x40 [ 729.819951][ T3230] ? kmem_cache_alloc_node+0x12b/0x260 [ 729.825543][ T3230] ? inet_netconf_notify_devconf+0x163/0x220 [ 729.831501][ T3230] __kmalloc_node_track_caller+0x30/0x40 [ 729.837121][ T3230] __alloc_skb+0xd3/0x2e0 [ 729.841475][ T3230] inet_netconf_notify_devconf+0x163/0x220 [ 729.847276][ T3230] inetdev_event+0x5f1/0xad0 [ 729.851927][ T3230] ? netdevice_event+0x660/0x660 [ 729.856850][ T3230] ? rdma_roce_rescan_device+0x30/0x30 [ 729.862291][ T3230] raw_notifier_call_chain+0x53/0xb0 [ 729.867563][ T3230] rollback_registered_many+0x74f/0xce0 [ 729.873114][ T3230] unregister_netdevice_queue+0x1cd/0x2f0 [ 729.878817][ T3230] __tun_detach+0xb33/0x1020 [ 729.883458][ T3230] ? tun_chr_open+0x290/0x290 [ 729.888134][ T3230] tun_chr_close+0x5d/0xa0 [ 729.892526][ T3230] __fput+0x1df/0x460 [ 729.896487][ T3230] ____fput+0x11/0x20 [ 729.900516][ T3230] task_work_run+0x8e/0x110 [ 729.905004][ T3230] get_signal+0x3f6/0x1650 [ 729.909411][ T3230] do_signal+0x25/0x270 [ 729.913551][ T3230] ? __rcu_read_unlock+0x4b/0x260 [ 729.918577][ T3230] ? __se_sys_io_submit+0x1b9/0x250 [ 729.923760][ T3230] __prepare_exit_to_usermode+0x127/0x230 [ 729.929481][ T3230] __syscall_return_slowpath+0x47/0x60 [ 729.935046][ T3230] do_syscall_64+0x5d/0xb0 [ 729.939448][ T3230] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 729.945331][ T3230] RIP: 0033:0x45c1f9 [ 729.949199][ T3230] Code: Bad RIP value. [ 729.953250][ T3230] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 729.961637][ T3230] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 729.969588][ T3230] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 729.977598][ T3230] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 729.985560][ T3230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 729.993510][ T3230] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:57 executing program 3 (fault-call:8 fault-nth:4): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x10000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xdf0e, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6364, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5411, 0x0) 20:30:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400454ca, 0x0) 20:30:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:30:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8912, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40049409, 0x0) 20:30:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x11000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xff00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 730.316386][ T3292] FAULT_INJECTION: forcing a failure. [ 730.316386][ T3292] name failslab, interval 1, probability 0, space 0, times 0 [ 730.363781][ T3292] CPU: 1 PID: 3292 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 730.372369][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.382490][ T3292] Call Trace: [ 730.385769][ T3292] dump_stack+0x10f/0x19d [ 730.390087][ T3292] should_fail+0x23c/0x250 [ 730.394519][ T3292] __should_failslab+0x81/0x90 [ 730.399267][ T3292] should_failslab+0x5/0x20 [ 730.403756][ T3292] kmem_cache_alloc_node+0x38/0x260 [ 730.409005][ T3292] ? check_preemption_disabled+0x51/0x140 [ 730.414735][ T3292] ? __alloc_skb+0x97/0x2e0 [ 730.419224][ T3292] __alloc_skb+0x97/0x2e0 [ 730.423536][ T3292] inet6_netconf_notify_devconf+0x105/0x1c0 [ 730.429439][ T3292] addrconf_ifdown+0xcc8/0xe40 [ 730.434187][ T3292] addrconf_notify+0x2a2/0x1e30 [ 730.439019][ T3292] ? preempt_count_add+0x4e/0x90 [ 730.443939][ T3292] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 730.449726][ T3292] ? preempt_count_add+0x4e/0x90 [ 730.454648][ T3292] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 730.460498][ T3292] ? tun_device_event+0x207/0x930 [ 730.465505][ T3292] ? find_next_bit+0xa7/0xf0 [ 730.470078][ T3292] ? check_preemption_disabled+0x51/0x140 [ 730.475824][ T3292] ? __this_cpu_preempt_check+0x18/0x20 [ 730.481358][ T3292] ? tls_dev_event+0x3a7/0x7c0 [ 730.486162][ T3292] ? __local_bh_enable_ip+0x48/0x70 [ 730.491342][ T3292] ? _raw_spin_unlock_bh+0x33/0x40 [ 730.496444][ T3292] ? ip6mr_device_event+0x13d/0x160 [ 730.501625][ T3292] raw_notifier_call_chain+0x53/0xb0 [ 730.506891][ T3292] rollback_registered_many+0x74f/0xce0 [ 730.512438][ T3292] ? __queue_delayed_work+0xea/0x150 [ 730.517755][ T3292] unregister_netdevice_queue+0x1cd/0x2f0 [ 730.523458][ T3292] __tun_detach+0xb33/0x1020 [ 730.528036][ T3292] ? tun_chr_open+0x290/0x290 [ 730.532705][ T3292] tun_chr_close+0x5d/0xa0 [ 730.537151][ T3292] __fput+0x1df/0x460 [ 730.541225][ T3292] ____fput+0x11/0x20 [ 730.545194][ T3292] task_work_run+0x8e/0x110 [ 730.549680][ T3292] get_signal+0x3f6/0x1650 [ 730.554088][ T3292] do_signal+0x25/0x270 [ 730.558225][ T3292] ? __rcu_read_unlock+0x4b/0x260 [ 730.563284][ T3292] ? __se_sys_io_submit+0x1b9/0x250 [ 730.568525][ T3292] __prepare_exit_to_usermode+0x127/0x230 [ 730.574231][ T3292] __syscall_return_slowpath+0x47/0x60 [ 730.579670][ T3292] do_syscall_64+0x5d/0xb0 [ 730.584072][ T3292] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 730.589940][ T3292] RIP: 0033:0x45c1f9 [ 730.593807][ T3292] Code: Bad RIP value. [ 730.597850][ T3292] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 730.606241][ T3292] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 730.614195][ T3292] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 730.622145][ T3292] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 730.630102][ T3292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 730.638197][ T3292] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:58 executing program 3 (fault-call:8 fault-nth:5): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x20000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x12000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40186366, 0x0) 20:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5413, 0x0) 20:30:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, 0x0) 20:30:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x401870cb, 0x0) 20:30:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x25000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400454ca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 730.909631][ T3346] FAULT_INJECTION: forcing a failure. [ 730.909631][ T3346] name failslab, interval 1, probability 0, space 0, times 0 [ 730.941415][ T3346] CPU: 1 PID: 3346 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 730.950097][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.960128][ T3346] Call Trace: [ 730.963406][ T3346] dump_stack+0x10f/0x19d [ 730.967732][ T3346] should_fail+0x23c/0x250 [ 730.972130][ T3346] __should_failslab+0x81/0x90 [ 730.976876][ T3346] should_failslab+0x5/0x20 [ 730.981399][ T3346] kmem_cache_alloc_node_trace+0x3b/0x260 [ 730.987100][ T3346] ? __kmalloc_node_track_caller+0x30/0x40 [ 730.992928][ T3346] ? kmem_cache_alloc_node+0x12b/0x260 [ 730.998379][ T3346] ? inet6_netconf_notify_devconf+0x105/0x1c0 [ 731.004428][ T3346] __kmalloc_node_track_caller+0x30/0x40 [ 731.010081][ T3346] __alloc_skb+0xd3/0x2e0 [ 731.014390][ T3346] inet6_netconf_notify_devconf+0x105/0x1c0 [ 731.020317][ T3346] addrconf_ifdown+0xcc8/0xe40 [ 731.025071][ T3346] addrconf_notify+0x2a2/0x1e30 [ 731.029942][ T3346] ? preempt_count_add+0x4e/0x90 [ 731.034864][ T3346] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 731.040658][ T3346] ? nf_tables_netdev_event+0x33a/0x360 [ 731.046192][ T3346] ? debug_smp_processor_id+0x18/0x20 [ 731.051544][ T3346] ? delay_tsc+0x96/0xe0 [ 731.055838][ T3346] ? __this_cpu_preempt_check+0x18/0x20 [ 731.061366][ T3346] ? tls_dev_event+0x3a7/0x7c0 [ 731.066114][ T3346] ? __local_bh_enable_ip+0x48/0x70 [ 731.071289][ T3346] ? _raw_spin_unlock_bh+0x33/0x40 [ 731.076460][ T3346] ? ip6mr_device_event+0x13d/0x160 [ 731.081707][ T3346] raw_notifier_call_chain+0x53/0xb0 [ 731.086971][ T3346] rollback_registered_many+0x74f/0xce0 [ 731.092497][ T3346] unregister_netdevice_queue+0x1cd/0x2f0 [ 731.098202][ T3346] __tun_detach+0xb33/0x1020 [ 731.102838][ T3346] ? tun_chr_open+0x290/0x290 [ 731.107521][ T3346] tun_chr_close+0x5d/0xa0 [ 731.111919][ T3346] __fput+0x1df/0x460 [ 731.115908][ T3346] ____fput+0x11/0x20 [ 731.119873][ T3346] task_work_run+0x8e/0x110 [ 731.124412][ T3346] get_signal+0x3f6/0x1650 [ 731.128958][ T3346] do_signal+0x25/0x270 [ 731.133131][ T3346] ? __rcu_read_unlock+0x4b/0x260 [ 731.138212][ T3346] ? __se_sys_io_submit+0x1b9/0x250 [ 731.143394][ T3346] __prepare_exit_to_usermode+0x127/0x230 [ 731.149199][ T3346] __syscall_return_slowpath+0x47/0x60 [ 731.154644][ T3346] do_syscall_64+0x5d/0xb0 20:30:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x40000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 731.159051][ T3346] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 731.164921][ T3346] RIP: 0033:0x45c1f9 [ 731.168790][ T3346] Code: Bad RIP value. [ 731.172830][ T3346] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 731.181221][ T3346] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 731.189196][ T3346] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 731.197206][ T3346] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 731.205174][ T3346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 731.213127][ T3346] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:58 executing program 3 (fault-call:8 fault-nth:6): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, 0x0) 20:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5415, 0x0) 20:30:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x2000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045432, 0x0) 20:30:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5416, 0x0) 20:30:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x80ffffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x3000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4008af60, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 731.484716][ T3399] FAULT_INJECTION: forcing a failure. [ 731.484716][ T3399] name failslab, interval 1, probability 0, space 0, times 0 [ 731.518529][ T3399] CPU: 0 PID: 3399 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 731.527117][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.537205][ T3399] Call Trace: [ 731.540488][ T3399] dump_stack+0x10f/0x19d [ 731.544908][ T3399] should_fail+0x23c/0x250 [ 731.549403][ T3399] __should_failslab+0x81/0x90 [ 731.554152][ T3399] should_failslab+0x5/0x20 [ 731.558638][ T3399] kmem_cache_alloc_node+0x38/0x260 [ 731.563819][ T3399] ? __alloc_skb+0x97/0x2e0 [ 731.568342][ T3399] __alloc_skb+0x97/0x2e0 [ 731.572652][ T3399] mpls_netconf_notify_devconf+0x63/0x110 [ 731.578394][ T3399] mpls_dev_notify+0x73a/0xa30 [ 731.583144][ T3399] ? batadv_hard_if_event+0xa49/0xc50 [ 731.588636][ T3399] ? ovs_netdev_get_vport+0x5a/0x60 [ 731.593821][ T3399] raw_notifier_call_chain+0x53/0xb0 [ 731.599162][ T3399] rollback_registered_many+0x74f/0xce0 [ 731.604693][ T3399] ? __queue_delayed_work+0xea/0x150 [ 731.609957][ T3399] unregister_netdevice_queue+0x1cd/0x2f0 [ 731.615692][ T3399] __tun_detach+0xb33/0x1020 [ 731.620267][ T3399] ? tun_chr_open+0x290/0x290 [ 731.624988][ T3399] tun_chr_close+0x5d/0xa0 [ 731.629530][ T3399] __fput+0x1df/0x460 [ 731.633612][ T3399] ____fput+0x11/0x20 [ 731.637664][ T3399] task_work_run+0x8e/0x110 [ 731.642153][ T3399] get_signal+0x3f6/0x1650 [ 731.646569][ T3399] do_signal+0x25/0x270 [ 731.650709][ T3399] ? __rcu_read_unlock+0x4b/0x260 [ 731.656766][ T3399] ? __se_sys_io_submit+0x1b9/0x250 [ 731.661947][ T3399] __prepare_exit_to_usermode+0x127/0x230 [ 731.667698][ T3399] __syscall_return_slowpath+0x47/0x60 [ 731.673140][ T3399] do_syscall_64+0x5d/0xb0 [ 731.677643][ T3399] entry_SYSCALL_64_after_hwframe+0x44/0xa9 20:30:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xdf0e0000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 731.683522][ T3399] RIP: 0033:0x45c1f9 [ 731.687392][ T3399] Code: Bad RIP value. [ 731.691437][ T3399] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 731.699973][ T3399] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 731.707933][ T3399] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 731.715884][ T3399] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 731.723837][ T3399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 731.731788][ T3399] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:30:59 executing program 3 (fault-call:8 fault-nth:7): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:30:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfdfdffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5417, 0x0) 20:30:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400c6615, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, 0x0) 20:30:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x4000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086301, 0x0) 20:30:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfe0f0000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:30:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40186366, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:30:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xff000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 732.072717][ T3460] FAULT_INJECTION: forcing a failure. [ 732.072717][ T3460] name failslab, interval 1, probability 0, space 0, times 0 [ 732.128735][ T3460] CPU: 0 PID: 3460 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 732.137323][ T3460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.147529][ T3460] Call Trace: [ 732.150829][ T3460] dump_stack+0x10f/0x19d [ 732.155218][ T3460] should_fail+0x23c/0x250 [ 732.159616][ T3460] __should_failslab+0x81/0x90 [ 732.164369][ T3460] should_failslab+0x5/0x20 [ 732.168908][ T3460] kmem_cache_alloc_node_trace+0x3b/0x260 [ 732.174681][ T3460] ? __kmalloc_node_track_caller+0x30/0x40 [ 732.180554][ T3460] ? kmem_cache_alloc_node+0x12b/0x260 [ 732.185993][ T3460] ? mpls_netconf_notify_devconf+0x63/0x110 [ 732.191893][ T3460] __kmalloc_node_track_caller+0x30/0x40 [ 732.197770][ T3460] __alloc_skb+0xd3/0x2e0 [ 732.202088][ T3460] mpls_netconf_notify_devconf+0x63/0x110 [ 732.207789][ T3460] mpls_dev_notify+0x73a/0xa30 [ 732.212624][ T3460] ? batadv_hard_if_event+0xa49/0xc50 [ 732.217982][ T3460] ? ovs_netdev_get_vport+0x5a/0x60 [ 732.223173][ T3460] raw_notifier_call_chain+0x53/0xb0 [ 732.228442][ T3460] rollback_registered_many+0x74f/0xce0 [ 732.233975][ T3460] unregister_netdevice_queue+0x1cd/0x2f0 [ 732.239742][ T3460] __tun_detach+0xb33/0x1020 [ 732.244333][ T3460] ? tun_chr_open+0x290/0x290 [ 732.248993][ T3460] tun_chr_close+0x5d/0xa0 [ 732.253446][ T3460] __fput+0x1df/0x460 [ 732.257428][ T3460] ____fput+0x11/0x20 [ 732.261408][ T3460] task_work_run+0x8e/0x110 [ 732.265903][ T3460] get_signal+0x3f6/0x1650 [ 732.270311][ T3460] do_signal+0x25/0x270 [ 732.274455][ T3460] ? __rcu_read_unlock+0x4b/0x260 [ 732.279477][ T3460] ? __se_sys_io_submit+0x1b9/0x250 [ 732.284667][ T3460] __prepare_exit_to_usermode+0x127/0x230 [ 732.290372][ T3460] __syscall_return_slowpath+0x47/0x60 [ 732.295810][ T3460] do_syscall_64+0x5d/0xb0 [ 732.300284][ T3460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 732.306157][ T3460] RIP: 0033:0x45c1f9 [ 732.310022][ T3460] Code: Bad RIP value. [ 732.314068][ T3460] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 732.322521][ T3460] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 732.330477][ T3460] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 732.338428][ T3460] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 732.346434][ T3460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 732.354386][ T3460] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:00 executing program 3 (fault-call:8 fault-nth:8): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, 0x0) 20:31:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x6000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, 0x0) 20:31:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfffffdfd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, 0x0) 20:31:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x7000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xffffff80, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0086420, 0x0) 20:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, 0x0) 20:31:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045301, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 732.627519][ T3508] FAULT_INJECTION: forcing a failure. [ 732.627519][ T3508] name failslab, interval 1, probability 0, space 0, times 0 [ 732.659456][ T3508] CPU: 0 PID: 3508 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 732.668053][ T3508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.678092][ T3508] Call Trace: [ 732.681371][ T3508] dump_stack+0x10f/0x19d [ 732.685688][ T3508] should_fail+0x23c/0x250 [ 732.690082][ T3508] __should_failslab+0x81/0x90 [ 732.694826][ T3508] should_failslab+0x5/0x20 [ 732.699317][ T3508] kmem_cache_alloc_node+0x38/0x260 [ 732.704589][ T3508] ? __alloc_skb+0x97/0x2e0 [ 732.709078][ T3508] __alloc_skb+0x97/0x2e0 [ 732.713404][ T3508] rtmsg_ifinfo_build_skb+0x61/0x130 [ 732.718675][ T3508] rollback_registered_many+0x7e7/0xce0 [ 732.724209][ T3508] ? __queue_delayed_work+0xea/0x150 [ 732.729478][ T3508] unregister_netdevice_queue+0x1cd/0x2f0 [ 732.735187][ T3508] __tun_detach+0xb33/0x1020 [ 732.739758][ T3508] ? tun_chr_open+0x290/0x290 [ 732.744425][ T3508] tun_chr_close+0x5d/0xa0 [ 732.748824][ T3508] __fput+0x1df/0x460 [ 732.752785][ T3508] ____fput+0x11/0x20 [ 732.756746][ T3508] task_work_run+0x8e/0x110 [ 732.761235][ T3508] get_signal+0x3f6/0x1650 [ 732.765641][ T3508] do_signal+0x25/0x270 [ 732.769916][ T3508] ? __rcu_read_unlock+0x4b/0x260 [ 732.774931][ T3508] ? __se_sys_io_submit+0x1b9/0x250 [ 732.780119][ T3508] __prepare_exit_to_usermode+0x127/0x230 [ 732.785871][ T3508] __syscall_return_slowpath+0x47/0x60 [ 732.791308][ T3508] do_syscall_64+0x5d/0xb0 [ 732.795723][ T3508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 732.801609][ T3508] RIP: 0033:0x45c1f9 [ 732.805566][ T3508] Code: Bad RIP value. [ 732.809635][ T3508] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 732.818026][ T3508] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 732.825978][ T3508] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 732.833956][ T3508] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 732.841932][ T3508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 732.849926][ T3508] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:00 executing program 3 (fault-call:8 fault-nth:9): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045430, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, 0x0) 20:31:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189436, 0x0) 20:31:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, 0x0) 20:31:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc020660b, 0x0) 20:31:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x9000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 733.148086][ T3563] FAULT_INJECTION: forcing a failure. [ 733.148086][ T3563] name failslab, interval 1, probability 0, space 0, times 0 [ 733.178734][ T3563] CPU: 0 PID: 3563 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 733.187318][ T3563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:31:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 733.197517][ T3563] Call Trace: [ 733.200790][ T3563] dump_stack+0x10f/0x19d [ 733.205216][ T3563] should_fail+0x23c/0x250 [ 733.209636][ T3563] __should_failslab+0x81/0x90 [ 733.214382][ T3563] should_failslab+0x5/0x20 [ 733.218870][ T3563] kmem_cache_alloc_node_trace+0x3b/0x260 [ 733.224571][ T3563] ? __kmalloc_node_track_caller+0x30/0x40 [ 733.230383][ T3563] ? kmem_cache_alloc_node+0x12b/0x260 [ 733.235890][ T3563] ? rtmsg_ifinfo_build_skb+0x61/0x130 [ 733.241410][ T3563] __kmalloc_node_track_caller+0x30/0x40 [ 733.247153][ T3563] __alloc_skb+0xd3/0x2e0 [ 733.251466][ T3563] rtmsg_ifinfo_build_skb+0x61/0x130 [ 733.256737][ T3563] rollback_registered_many+0x7e7/0xce0 [ 733.262290][ T3563] unregister_netdevice_queue+0x1cd/0x2f0 [ 733.268043][ T3563] __tun_detach+0xb33/0x1020 [ 733.273056][ T3563] ? tun_chr_open+0x290/0x290 [ 733.277716][ T3563] tun_chr_close+0x5d/0xa0 [ 733.282188][ T3563] __fput+0x1df/0x460 [ 733.286157][ T3563] ____fput+0x11/0x20 [ 733.290116][ T3563] task_work_run+0x8e/0x110 [ 733.294602][ T3563] get_signal+0x3f6/0x1650 [ 733.299010][ T3563] do_signal+0x25/0x270 [ 733.303196][ T3563] ? __rcu_read_unlock+0x4b/0x260 [ 733.308205][ T3563] ? __se_sys_io_submit+0x1b9/0x250 [ 733.313421][ T3563] __prepare_exit_to_usermode+0x127/0x230 [ 733.319165][ T3563] __syscall_return_slowpath+0x47/0x60 [ 733.324615][ T3563] do_syscall_64+0x5d/0xb0 [ 733.329014][ T3563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 733.334882][ T3563] RIP: 0033:0x45c1f9 [ 733.338751][ T3563] Code: Bad RIP value. [ 733.342794][ T3563] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 733.351325][ T3563] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 733.359278][ T3563] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 733.367239][ T3563] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 733.375298][ T3563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 733.383358][ T3563] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:01 executing program 3 (fault-call:8 fault-nth:10): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086301, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x48884}, 0x40400c1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x3, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xa000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, 0x0) 20:31:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x4, {0x2ec, 0xb1, 0x7fff, 0x7ff}}) 20:31:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xb000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, 0x0) 20:31:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4, 0x0, "000000000000000000090010000000001000"}) [ 733.649996][ T3611] FAULT_INJECTION: forcing a failure. [ 733.649996][ T3611] name failslab, interval 1, probability 0, space 0, times 0 [ 733.685466][ T3611] CPU: 0 PID: 3611 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 733.694083][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.704121][ T3611] Call Trace: [ 733.707459][ T3611] dump_stack+0x10f/0x19d [ 733.711876][ T3611] should_fail+0x23c/0x250 [ 733.716275][ T3611] __should_failslab+0x81/0x90 [ 733.721014][ T3611] should_failslab+0x5/0x20 [ 733.725503][ T3611] kmem_cache_alloc_trace+0x32/0x2c0 [ 733.730785][ T3611] ? kobject_uevent_env+0x1a7/0xc40 [ 733.735971][ T3611] kobject_uevent_env+0x1a7/0xc40 [ 733.740975][ T3611] ? kernfs_find_ns+0x30d/0x320 [ 733.745815][ T3611] ? kernfs_put+0x39/0x300 [ 733.750216][ T3611] ? sysfs_remove_group+0x18e/0x1a0 [ 733.755523][ T3611] kobject_uevent+0x18/0x20 [ 733.760013][ T3611] kobject_del+0x9f/0x250 [ 733.764330][ T3611] kobject_put+0x116/0x170 [ 733.768747][ T3611] net_rx_queue_update_kobjects+0x2cd/0x300 [ 733.774622][ T3611] ? nlmsg_notify+0x11a/0x180 [ 733.779278][ T3611] netdev_unregister_kobject+0xaf/0xf0 [ 733.784764][ T3611] rollback_registered_many+0xab4/0xce0 [ 733.790297][ T3611] unregister_netdevice_queue+0x1cd/0x2f0 [ 733.799724][ T3611] __tun_detach+0xb33/0x1020 [ 733.804294][ T3611] ? tun_chr_open+0x290/0x290 [ 733.809016][ T3611] tun_chr_close+0x5d/0xa0 [ 733.813534][ T3611] __fput+0x1df/0x460 [ 733.817502][ T3611] ____fput+0x11/0x20 [ 733.821528][ T3611] task_work_run+0x8e/0x110 [ 733.826017][ T3611] get_signal+0x3f6/0x1650 [ 733.830436][ T3611] do_signal+0x25/0x270 [ 733.834581][ T3611] ? __rcu_read_unlock+0x4b/0x260 [ 733.839613][ T3611] ? __se_sys_io_submit+0x1b9/0x250 [ 733.844850][ T3611] __prepare_exit_to_usermode+0x127/0x230 [ 733.850555][ T3611] __syscall_return_slowpath+0x47/0x60 [ 733.855997][ T3611] do_syscall_64+0x5d/0xb0 [ 733.860428][ T3611] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 733.866302][ T3611] RIP: 0033:0x45c1f9 [ 733.870169][ T3611] Code: Bad RIP value. [ 733.874281][ T3611] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 733.882739][ T3611] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 733.890695][ T3611] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 20:31:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 733.898650][ T3611] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 733.906613][ T3611] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 733.914568][ T3611] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:01 executing program 3 (fault-call:8 fault-nth:11): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x2, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000000)) 20:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, 0x0) 20:31:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xc000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0xf21, 0x0, 0x7fff, 0x2, 0x1, "8001000000000000000000ec00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, 0x0) 20:31:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x62000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x6, 0x0, "000000000000000000090010000000001000"}) 20:31:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xd000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 734.264779][ T3667] FAULT_INJECTION: forcing a failure. [ 734.264779][ T3667] name failslab, interval 1, probability 0, space 0, times 0 [ 734.300491][ T3667] CPU: 1 PID: 3667 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 734.309069][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.319102][ T3667] Call Trace: [ 734.322376][ T3667] dump_stack+0x10f/0x19d [ 734.326689][ T3667] should_fail+0x23c/0x250 [ 734.331098][ T3667] __should_failslab+0x81/0x90 [ 734.335848][ T3667] ? kzalloc+0x1d/0x30 [ 734.339906][ T3667] should_failslab+0x5/0x20 [ 734.344385][ T3667] __kmalloc+0x43/0x2d0 [ 734.348528][ T3667] kzalloc+0x1d/0x30 [ 734.352540][ T3667] kobject_get_path+0x7c/0x110 [ 734.357291][ T3667] kobject_uevent_env+0x1be/0xc40 [ 734.362294][ T3667] ? kernfs_find_ns+0x30d/0x320 [ 734.367125][ T3667] ? kernfs_put+0x39/0x300 [ 734.371541][ T3667] ? sysfs_remove_group+0x18e/0x1a0 [ 734.376724][ T3667] kobject_uevent+0x18/0x20 [ 734.381210][ T3667] kobject_del+0x9f/0x250 [ 734.385527][ T3667] kobject_put+0x116/0x170 [ 734.389930][ T3667] net_rx_queue_update_kobjects+0x2cd/0x300 [ 734.395894][ T3667] ? nlmsg_notify+0x11a/0x180 [ 734.400566][ T3667] netdev_unregister_kobject+0xaf/0xf0 [ 734.406035][ T3667] rollback_registered_many+0xab4/0xce0 [ 734.411620][ T3667] unregister_netdevice_queue+0x1cd/0x2f0 [ 734.417322][ T3667] __tun_detach+0xb33/0x1020 [ 734.421973][ T3667] ? tun_chr_open+0x290/0x290 [ 734.426644][ T3667] tun_chr_close+0x5d/0xa0 [ 734.431040][ T3667] __fput+0x1df/0x460 [ 734.435040][ T3667] ____fput+0x11/0x20 [ 734.439042][ T3667] task_work_run+0x8e/0x110 [ 734.443535][ T3667] get_signal+0x3f6/0x1650 [ 734.447950][ T3667] do_signal+0x25/0x270 [ 734.452094][ T3667] ? __rcu_read_unlock+0x4b/0x260 [ 734.457225][ T3667] ? __se_sys_io_submit+0x1b9/0x250 [ 734.462416][ T3667] __prepare_exit_to_usermode+0x127/0x230 [ 734.469167][ T3667] __syscall_return_slowpath+0x47/0x60 [ 734.474618][ T3667] do_syscall_64+0x5d/0xb0 [ 734.479073][ T3667] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 734.484943][ T3667] RIP: 0033:0x45c1f9 [ 734.488814][ T3667] Code: Bad RIP value. [ 734.492872][ T3667] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 734.501270][ T3667] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 734.509227][ T3667] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 734.517178][ T3667] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 734.525172][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 734.533124][ T3667] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:02 executing program 3 (fault-call:8 fault-nth:12): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x7, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xe000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, 0x0) 20:31:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x5, 0x3ff, 0xfffffff9, 0x1ff, 0x11, "8d9470fd6caaa78a7f8f4e539063758d747824"}) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5428, 0x0) 20:31:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0xa0040) bind$netrom(r1, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x48) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000000c0)=""/68, &(0x7f0000000140)=0x44) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x10000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5437, 0x0) [ 734.783790][ T3713] FAULT_INJECTION: forcing a failure. [ 734.783790][ T3713] name failslab, interval 1, probability 0, space 0, times 0 [ 734.821684][ T3713] CPU: 1 PID: 3713 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 734.830374][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.840408][ T3713] Call Trace: [ 734.843685][ T3713] dump_stack+0x10f/0x19d [ 734.847994][ T3713] should_fail+0x23c/0x250 [ 734.852483][ T3713] __should_failslab+0x81/0x90 [ 734.857235][ T3713] should_failslab+0x5/0x20 [ 734.861782][ T3713] kmem_cache_alloc_node+0x38/0x260 [ 734.866973][ T3713] ? __alloc_skb+0x97/0x2e0 [ 734.871461][ T3713] __alloc_skb+0x97/0x2e0 [ 734.875782][ T3713] alloc_uevent_skb+0x5b/0x120 [ 734.880544][ T3713] kobject_uevent_env+0x726/0xc40 [ 734.885572][ T3713] ? kernfs_put+0x39/0x300 [ 734.889986][ T3713] ? sysfs_remove_group+0x18e/0x1a0 [ 734.895316][ T3713] kobject_uevent+0x18/0x20 [ 734.899807][ T3713] kobject_del+0x9f/0x250 [ 734.904123][ T3713] kobject_put+0x116/0x170 [ 734.908582][ T3713] net_rx_queue_update_kobjects+0x2cd/0x300 [ 734.914463][ T3713] ? nlmsg_notify+0x11a/0x180 [ 734.919181][ T3713] netdev_unregister_kobject+0xaf/0xf0 [ 734.924626][ T3713] rollback_registered_many+0xab4/0xce0 [ 734.930163][ T3713] unregister_netdevice_queue+0x1cd/0x2f0 [ 734.935996][ T3713] __tun_detach+0xb33/0x1020 [ 734.940554][ T3713] ? tun_chr_open+0x290/0x290 [ 734.945229][ T3713] tun_chr_close+0x5d/0xa0 [ 734.949615][ T3713] __fput+0x1df/0x460 [ 734.953566][ T3713] ____fput+0x11/0x20 [ 734.957514][ T3713] task_work_run+0x8e/0x110 [ 734.961982][ T3713] get_signal+0x3f6/0x1650 [ 734.966458][ T3713] do_signal+0x25/0x270 [ 734.970582][ T3713] ? __rcu_read_unlock+0x4b/0x260 [ 734.975645][ T3713] ? __se_sys_io_submit+0x1b9/0x250 [ 734.980843][ T3713] __prepare_exit_to_usermode+0x127/0x230 [ 734.986530][ T3713] __syscall_return_slowpath+0x47/0x60 [ 734.991990][ T3713] do_syscall_64+0x5d/0xb0 [ 734.996372][ T3713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 735.002234][ T3713] RIP: 0033:0x45c1f9 [ 735.006091][ T3713] Code: Bad RIP value. [ 735.010125][ T3713] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 735.018501][ T3713] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 735.026437][ T3713] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 735.034376][ T3713] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 735.042315][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 735.050265][ T3713] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:02 executing program 3 (fault-call:8 fault-nth:13): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x11000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x9, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)=0xaf71) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76000000000000000000000dc00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, 0x0) 20:31:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x12000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5450, 0x0) [ 735.313139][ T3759] FAULT_INJECTION: forcing a failure. [ 735.313139][ T3759] name failslab, interval 1, probability 0, space 0, times 0 [ 735.347542][ T3759] CPU: 0 PID: 3759 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 20:31:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb, 0x0, "000000000000000000090010000000001000"}) [ 735.356201][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.366320][ T3759] Call Trace: [ 735.369598][ T3759] dump_stack+0x10f/0x19d [ 735.373911][ T3759] should_fail+0x23c/0x250 [ 735.378329][ T3759] __should_failslab+0x81/0x90 [ 735.383088][ T3759] should_failslab+0x5/0x20 [ 735.387622][ T3759] kmem_cache_alloc_node_trace+0x3b/0x260 [ 735.393323][ T3759] ? __kmalloc_node_track_caller+0x30/0x40 [ 735.399109][ T3759] ? kmem_cache_alloc_node+0x12b/0x260 [ 735.404650][ T3759] ? alloc_uevent_skb+0x5b/0x120 [ 735.409572][ T3759] __kmalloc_node_track_caller+0x30/0x40 [ 735.415271][ T3759] __alloc_skb+0xd3/0x2e0 [ 735.419586][ T3759] alloc_uevent_skb+0x5b/0x120 [ 735.424346][ T3759] kobject_uevent_env+0x726/0xc40 [ 735.429359][ T3759] ? kernfs_put+0x39/0x300 [ 735.433766][ T3759] ? sysfs_remove_group+0x18e/0x1a0 [ 735.438955][ T3759] kobject_uevent+0x18/0x20 [ 735.443445][ T3759] kobject_del+0x9f/0x250 [ 735.447764][ T3759] kobject_put+0x116/0x170 [ 735.452166][ T3759] net_rx_queue_update_kobjects+0x2cd/0x300 [ 735.458039][ T3759] ? nlmsg_notify+0x11a/0x180 [ 735.462719][ T3759] netdev_unregister_kobject+0xaf/0xf0 [ 735.468166][ T3759] rollback_registered_many+0xab4/0xce0 [ 735.473693][ T3759] unregister_netdevice_queue+0x1cd/0x2f0 [ 735.479385][ T3759] __tun_detach+0xb33/0x1020 [ 735.483953][ T3759] ? tun_chr_open+0x290/0x290 [ 735.488656][ T3759] tun_chr_close+0x5d/0xa0 [ 735.493120][ T3759] __fput+0x1df/0x460 [ 735.497072][ T3759] ____fput+0x11/0x20 [ 735.501027][ T3759] task_work_run+0x8e/0x110 [ 735.505496][ T3759] get_signal+0x3f6/0x1650 [ 735.509883][ T3759] do_signal+0x25/0x270 [ 735.514007][ T3759] ? __rcu_read_unlock+0x4b/0x260 [ 735.519001][ T3759] ? __se_sys_io_submit+0x1b9/0x250 [ 735.524168][ T3759] __prepare_exit_to_usermode+0x127/0x230 [ 735.529855][ T3759] __syscall_return_slowpath+0x47/0x60 [ 735.535283][ T3759] do_syscall_64+0x5d/0xb0 [ 735.539674][ T3759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 735.545533][ T3759] RIP: 0033:0x45c1f9 [ 735.549389][ T3759] Code: Bad RIP value. [ 735.553425][ T3759] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 735.561803][ T3759] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 735.569821][ T3759] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 735.577760][ T3759] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 735.585700][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 735.593683][ T3759] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:03 executing program 3 (fault-call:8 fault-nth:14): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) fcntl$addseals(r0, 0x409, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x49, 0x2, &(0x7f0000000480)="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"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x1c000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5451, 0x0) 20:31:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5452, 0x0) 20:31:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x25000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x5, 0xff, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x40000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 735.904006][ T3808] FAULT_INJECTION: forcing a failure. [ 735.904006][ T3808] name failslab, interval 1, probability 0, space 0, times 0 [ 735.962522][ T3808] CPU: 1 PID: 3808 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 735.974877][ T3808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.984923][ T3808] Call Trace: [ 735.988191][ T3808] dump_stack+0x10f/0x19d [ 735.992502][ T3808] should_fail+0x23c/0x250 [ 735.996900][ T3808] __should_failslab+0x81/0x90 [ 736.001647][ T3808] should_failslab+0x5/0x20 [ 736.006134][ T3808] kmem_cache_alloc_trace+0x32/0x2c0 [ 736.011447][ T3808] ? call_usermodehelper_setup+0x81/0x160 [ 736.017178][ T3808] call_usermodehelper_setup+0x81/0x160 [ 736.022711][ T3808] ? add_uevent_var+0x1c0/0x1c0 [ 736.027569][ T3808] kobject_uevent_env+0xb2e/0xc40 [ 736.032576][ T3808] ? kernfs_put+0x39/0x300 [ 736.037247][ T3808] ? sysfs_remove_group+0x18e/0x1a0 [ 736.042461][ T3808] kobject_uevent+0x18/0x20 [ 736.046948][ T3808] kobject_del+0x9f/0x250 [ 736.051278][ T3808] kobject_put+0x116/0x170 [ 736.055683][ T3808] net_rx_queue_update_kobjects+0x2cd/0x300 [ 736.061555][ T3808] ? nlmsg_notify+0x11a/0x180 [ 736.066335][ T3808] netdev_unregister_kobject+0xaf/0xf0 [ 736.071777][ T3808] rollback_registered_many+0xab4/0xce0 [ 736.077320][ T3808] unregister_netdevice_queue+0x1cd/0x2f0 [ 736.083102][ T3808] __tun_detach+0xb33/0x1020 [ 736.087684][ T3808] ? tun_chr_open+0x290/0x290 [ 736.092337][ T3808] tun_chr_close+0x5d/0xa0 [ 736.096753][ T3808] __fput+0x1df/0x460 [ 736.100719][ T3808] ____fput+0x11/0x20 [ 736.104682][ T3808] task_work_run+0x8e/0x110 [ 736.109311][ T3808] get_signal+0x3f6/0x1650 [ 736.113718][ T3808] do_signal+0x25/0x270 [ 736.117858][ T3808] ? __rcu_read_unlock+0x4b/0x260 [ 736.122868][ T3808] ? __se_sys_io_submit+0x1b9/0x250 [ 736.128046][ T3808] __prepare_exit_to_usermode+0x127/0x230 [ 736.133744][ T3808] __syscall_return_slowpath+0x47/0x60 [ 736.139205][ T3808] do_syscall_64+0x5d/0xb0 [ 736.143604][ T3808] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 736.149463][ T3808] RIP: 0033:0x45c1f9 [ 736.153395][ T3808] Code: Bad RIP value. [ 736.157427][ T3808] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 736.165804][ T3808] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 736.173749][ T3808] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 736.181703][ T3808] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 736.189643][ T3808] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 736.197605][ T3808] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:03 executing program 3 (fault-call:8 fault-nth:15): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x4, 0x10, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200000, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3) r3 = syz_open_pts(r1, 0x80003) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f0000000000)) ioctl$TCSETSF(r3, 0x5418, 0x0) 20:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545d, 0x0) 20:31:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x55050000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5460, 0x0) 20:31:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000480)=""/148, 0x94}], 0x4, &(0x7f0000000540)=""/98, 0x62}, 0x9}, {{&(0x7f00000005c0)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/171, 0xab}], 0x3, &(0x7f0000000900)=""/203, 0xcb}, 0x7510}, {{&(0x7f0000000a00)=@caif=@dbg, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000a80)=""/225, 0xe1}, {&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/161, 0xa1}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/155, 0x9b}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001ec0)=""/89, 0x59}, {&(0x7f0000001f40)=""/112, 0x70}], 0x9, &(0x7f0000002080)=""/134, 0x86}, 0x8}, {{&(0x7f0000002140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/144, 0x90}, {&(0x7f0000002280)=""/135, 0x87}, {&(0x7f0000002340)=""/93, 0x5d}], 0x3}, 0x6}, {{&(0x7f0000002400)=@nl=@unspec, 0x80, &(0x7f0000004680)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/74, 0x4a}, {&(0x7f0000003500)=""/253, 0xfd}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/87, 0x57}], 0x5, &(0x7f0000004700)=""/4, 0x4}, 0x2}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004740)=""/44, 0x2c}, {&(0x7f0000004780)=""/210, 0xd2}, {&(0x7f0000004880)=""/65, 0x41}], 0x3, &(0x7f0000004940)=""/4096, 0x1000}, 0xc37}], 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005b00)={&(0x7f0000005ac0)=@getqdisc={0x28, 0x26, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0x3, 0x1}, {0x1, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000810}, 0x24008004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r5 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r5, 0x5418, 0x0) 20:31:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x10, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x5c000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 736.534013][ T3851] FAULT_INJECTION: forcing a failure. [ 736.534013][ T3851] name failslab, interval 1, probability 0, space 0, times 0 [ 736.570009][ T3851] CPU: 1 PID: 3851 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 736.578681][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.588713][ T3851] Call Trace: [ 736.591989][ T3851] dump_stack+0x10f/0x19d [ 736.596298][ T3851] should_fail+0x23c/0x250 [ 736.600703][ T3851] __should_failslab+0x81/0x90 [ 736.605449][ T3851] should_failslab+0x5/0x20 [ 736.610045][ T3851] kmem_cache_alloc_trace+0x32/0x2c0 [ 736.615344][ T3851] ? kobject_uevent_env+0x1a7/0xc40 [ 736.620535][ T3851] kobject_uevent_env+0x1a7/0xc40 [ 736.625541][ T3851] ? kernfs_find_ns+0x30d/0x320 [ 736.630471][ T3851] ? kernfs_put+0x39/0x300 [ 736.634880][ T3851] ? sysfs_remove_group+0x18e/0x1a0 [ 736.640064][ T3851] kobject_uevent+0x18/0x20 [ 736.644551][ T3851] kobject_del+0x9f/0x250 [ 736.648865][ T3851] kobject_put+0x116/0x170 [ 736.653272][ T3851] netdev_queue_update_kobjects+0x27a/0x2b0 [ 736.659265][ T3851] netdev_unregister_kobject+0xbc/0xf0 [ 736.664770][ T3851] rollback_registered_many+0xab4/0xce0 [ 736.670300][ T3851] unregister_netdevice_queue+0x1cd/0x2f0 [ 736.676117][ T3851] __tun_detach+0xb33/0x1020 [ 736.680688][ T3851] ? tun_chr_open+0x290/0x290 [ 736.685345][ T3851] tun_chr_close+0x5d/0xa0 [ 736.689790][ T3851] __fput+0x1df/0x460 [ 736.693758][ T3851] ____fput+0x11/0x20 [ 736.697718][ T3851] task_work_run+0x8e/0x110 [ 736.702293][ T3851] get_signal+0x3f6/0x1650 [ 736.706702][ T3851] do_signal+0x25/0x270 [ 736.710840][ T3851] ? __rcu_read_unlock+0x4b/0x260 [ 736.715852][ T3851] ? __se_sys_io_submit+0x1b9/0x250 [ 736.721139][ T3851] __prepare_exit_to_usermode+0x127/0x230 [ 736.726914][ T3851] __syscall_return_slowpath+0x47/0x60 [ 736.732351][ T3851] do_syscall_64+0x5d/0xb0 [ 736.736745][ T3851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 736.742621][ T3851] RIP: 0033:0x45c1f9 [ 736.746490][ T3851] Code: Bad RIP value. [ 736.750535][ T3851] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 736.758927][ T3851] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 736.766899][ T3851] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 736.774852][ T3851] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 736.782800][ T3851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 736.790754][ T3851] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:04 executing program 3 (fault-call:8 fault-nth:16): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6364, 0x0) 20:31:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xa, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x11, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x80ffffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x9, 0x4, 0x6, 0x9, 0x451, 0x7fffffff, 0x567, r3}, &(0x7f0000000040)=0x20) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5418, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x1ff}, &(0x7f0000000100)=0x8) 20:31:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8912, 0x0) 20:31:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x12, 0x0, "000000000000000000090010000000001000"}) 20:31:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x81ffffff, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 737.074849][ T3904] FAULT_INJECTION: forcing a failure. [ 737.074849][ T3904] name failslab, interval 1, probability 0, space 0, times 0 20:31:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004c00000010001d800c00030008000100eb0aeeb7"], 0x24}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x1, {0x7f, 0x0, 0x3, 0x5}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xffffff7f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xd8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x4, 0x6, 0x7, 0x8, 0x1, @rand_addr=' \x01\x00', @private1, 0x7, 0x1, 0x4, 0x40}}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) 20:31:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x25, 0x0, "000000000000000000090010000000001000"}) [ 737.118730][ T3904] CPU: 1 PID: 3904 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 737.127322][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.137363][ T3904] Call Trace: [ 737.140646][ T3904] dump_stack+0x10f/0x19d [ 737.144963][ T3904] should_fail+0x23c/0x250 [ 737.149368][ T3904] __should_failslab+0x81/0x90 [ 737.154154][ T3904] ? kzalloc+0x1d/0x30 [ 737.158250][ T3904] should_failslab+0x5/0x20 [ 737.162742][ T3904] __kmalloc+0x43/0x2d0 [ 737.166881][ T3904] kzalloc+0x1d/0x30 [ 737.170763][ T3904] kobject_get_path+0x7c/0x110 [ 737.175515][ T3904] kobject_uevent_env+0x1be/0xc40 [ 737.180530][ T3904] ? kernfs_find_ns+0x30d/0x320 [ 737.185399][ T3904] ? kernfs_put+0x39/0x300 [ 737.189803][ T3904] ? sysfs_remove_group+0x18e/0x1a0 [ 737.194983][ T3904] kobject_uevent+0x18/0x20 [ 737.199469][ T3904] kobject_del+0x9f/0x250 [ 737.203828][ T3904] kobject_put+0x116/0x170 [ 737.208368][ T3904] netdev_queue_update_kobjects+0x27a/0x2b0 [ 737.216774][ T3904] netdev_unregister_kobject+0xbc/0xf0 [ 737.222215][ T3904] rollback_registered_many+0xab4/0xce0 [ 737.227734][ T3904] unregister_netdevice_queue+0x1cd/0x2f0 [ 737.233430][ T3904] __tun_detach+0xb33/0x1020 [ 737.237990][ T3904] ? tun_chr_open+0x290/0x290 [ 737.242635][ T3904] tun_chr_close+0x5d/0xa0 [ 737.247021][ T3904] __fput+0x1df/0x460 [ 737.250971][ T3904] ____fput+0x11/0x20 [ 737.254922][ T3904] task_work_run+0x8e/0x110 [ 737.259461][ T3904] get_signal+0x3f6/0x1650 [ 737.263850][ T3904] do_signal+0x25/0x270 [ 737.268026][ T3904] ? __rcu_read_unlock+0x4b/0x260 [ 737.273081][ T3904] ? __se_sys_io_submit+0x1b9/0x250 [ 737.278365][ T3904] __prepare_exit_to_usermode+0x127/0x230 [ 737.284148][ T3904] __syscall_return_slowpath+0x47/0x60 [ 737.289584][ T3904] do_syscall_64+0x5d/0xb0 [ 737.293986][ T3904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 737.299856][ T3904] RIP: 0033:0x45c1f9 [ 737.303747][ T3904] Code: Bad RIP value. [ 737.307785][ T3904] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 737.316175][ T3904] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 737.324125][ T3904] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 737.332077][ T3904] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 737.340060][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 737.348017][ T3904] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:05 executing program 3 (fault-call:8 fault-nth:17): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, 0x0) 20:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x82ffffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xc, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20, 0x0, "80000002c76060e500"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x81, 0x8, 0x5, 0x44fc, 0x9, "caff4c13007765b4227f6554ac189c1c50d7a5"}) r1 = syz_open_pts(r0, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x8000, 0x11a, 0x6}, 0x18) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000240)={0x4, 0x6, 0x4, 0x8, 0xf, "1e3e6da795e272b9e1f441d96720427f342d9d"}) ioctl$TCSETSF(r1, 0x5418, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='task\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000040)="28205833e3a14f2642a797fd8006a495298eacb298f8ff4af0bb64b5973ab02da8ed3d8e17ce6e59f7cd784ad361b4731729574c572814c3e3a7a64ca903d675c089767bb3fb43cc5c5661beab65f3608c65ef0ff3a2f65884c947513edc0ddb4212a4567b572b39ce6677a386f5c1c6afe68ccfa8", 0x75) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) openat2(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x680000, 0x2, 0xd}, 0x18) 20:31:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400454ca, 0x0) 20:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x300, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x8d000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) [ 737.667303][ T3953] FAULT_INJECTION: forcing a failure. [ 737.667303][ T3953] name failslab, interval 1, probability 0, space 0, times 0 [ 737.701508][ T3953] CPU: 1 PID: 3953 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 20:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xe, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 737.710120][ T3953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.720353][ T3953] Call Trace: [ 737.723633][ T3953] dump_stack+0x10f/0x19d [ 737.728034][ T3953] should_fail+0x23c/0x250 [ 737.732433][ T3953] __should_failslab+0x81/0x90 [ 737.737177][ T3953] should_failslab+0x5/0x20 [ 737.741681][ T3953] kmem_cache_alloc_node+0x38/0x260 [ 737.746869][ T3953] ? __alloc_skb+0x97/0x2e0 [ 737.751455][ T3953] __alloc_skb+0x97/0x2e0 [ 737.755768][ T3953] alloc_uevent_skb+0x5b/0x120 [ 737.760516][ T3953] kobject_uevent_env+0x726/0xc40 [ 737.765525][ T3953] ? kernfs_put+0x39/0x300 [ 737.769935][ T3953] ? sysfs_remove_group+0x18e/0x1a0 [ 737.775187][ T3953] kobject_uevent+0x18/0x20 [ 737.779674][ T3953] kobject_del+0x9f/0x250 [ 737.783987][ T3953] kobject_put+0x116/0x170 [ 737.788417][ T3953] netdev_queue_update_kobjects+0x27a/0x2b0 [ 737.794297][ T3953] netdev_unregister_kobject+0xbc/0xf0 [ 737.799759][ T3953] rollback_registered_many+0xab4/0xce0 [ 737.805290][ T3953] unregister_netdevice_queue+0x1cd/0x2f0 [ 737.810996][ T3953] __tun_detach+0xb33/0x1020 [ 737.815640][ T3953] ? tun_chr_open+0x290/0x290 [ 737.820296][ T3953] tun_chr_close+0x5d/0xa0 [ 737.824698][ T3953] __fput+0x1df/0x460 [ 737.828666][ T3953] ____fput+0x11/0x20 [ 737.832703][ T3953] task_work_run+0x8e/0x110 [ 737.837211][ T3953] get_signal+0x3f6/0x1650 [ 737.841664][ T3953] do_signal+0x25/0x270 [ 737.845786][ T3953] ? __rcu_read_unlock+0x4b/0x260 [ 737.850810][ T3953] ? __se_sys_io_submit+0x1b9/0x250 [ 737.855977][ T3953] __prepare_exit_to_usermode+0x127/0x230 [ 737.861710][ T3953] __syscall_return_slowpath+0x47/0x60 [ 737.867260][ T3953] do_syscall_64+0x5d/0xb0 [ 737.871646][ T3953] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 737.877620][ T3953] RIP: 0033:0x45c1f9 [ 737.881565][ T3953] Code: Bad RIP value. [ 737.885627][ T3953] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 737.894012][ T3953] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 737.901957][ T3953] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 737.909927][ T3953] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 737.917876][ T3953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 737.925868][ T3953] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40049409, 0x0) 20:31:05 executing program 3 (fault-call:8 fault-nth:18): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x500, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x9, 0x129202) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x6, 0x20}, 0xc) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xdf0e0000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40186366, 0x0) 20:31:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x600, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfdfdffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000003240)=[{&(0x7f00000000c0)={0x27, 0x1, 0x2, 0x1, 0x1, 0x97, "7af42fb6eb40cb4557a9d1b55d012f10f25e09f2619efb9374c6620694fe107cbb7f2d1f339f00275d0204daf25a76cf6a2575afc8077763ebcd126c9810ec", 0x1f}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f00000001c0)={0xd0, 0x10c, 0xfffffffb, "93bd77cf868d8f527c6ca5cfe947da5e8ae4cf4e66bf3badd4854505b422b1babef6d3c080e8297ca5fec5f8a2bb5e063a179c200beab3bb2da705bc1170922de6cf2cba14e22ccfb406f9ccf662f78e493b3c15f6b5885a67cca682c9cb9cf94cedac0cd6051a00e4dd2af331e1ec0f02cb7bf372bc0b1adc83d4b25d69a126350c6d3b0d7ee36d000dec1570c796ca939f99ff35ae380f2af87be76ce5895362128cebe917cf12140d9c103000fa22466d61a40fdde2d69f3973188c"}, 0xd0, 0x4000}, {&(0x7f00000002c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0xff, "efea1c17bd4a9c6d38fd2833cd6ecd097282c9fd1f6086326398b2ca81aa169c0af37fc9860a530e796e45df88388c68e414cc38a3d64fbb24b9e7f338fd4f", 0x15}, 0x60, &(0x7f00000016c0)=[{&(0x7f0000000480)="6719669b1b3d81c7536498f590491e8808895c401cf6338c644d7ebf18a82fad2495d1bbeca04c514c56b9759df77616af9248f2d7e9d9379064aefbf4dfa22bc7a0a2cc02f3a2fd902e9b72f35ea99e1ab982604435a84ddbc72e8d393ecfb4a9dbf7043a8c7ed250e4bb3806d2e6428db2fba8d98fbcb2a8b2e2ebb28fafbd289e9c07", 0x84}, {&(0x7f0000000340)="916639fd385ea38fca59979b04e671386a983b2d3beb36b757104f111c277773d23ece99aa6b8b76", 0x28}, {&(0x7f00000003c0)="3ba58da24969881196163cb0de318fc17018", 0x12}, {&(0x7f0000000540)="d88e9d5ae501c3d1ad3d0b3053344c8466b280e9602ccc8a0c6a672783d9278e68fc722a2406e68240d14c73864808246341ec6b43d6761827bec2e593731f7e4da90966debf80cb8a96d3b276888f0c844e2d68697175ee81c81282cb19c569672cae856a7cab65a67caa22610e690cf121359d93d427dc46651652839fac6f1f3c448660b6b3d676eb4888cb49a8f167f633eaf9792e7645bf25a4351b71ddad0aed38c1bb1f0efb6fbebd23d4ee93789e4646b3c7500d235883678403405b6334727e7ee5ff7c5bc9fea4b6080c005284981bea48616e0bbdcc53a61fc3f40c1cf6a4ce62204225931dcef589288560e7af962f75ff2a0f3cbcc173b4b89ac550f4f7206a9ec26b1d79d8402a25ba1ae8bf9e5407483032524ce91229d386f77f3fc9977e7d4e8301613751e0d4cc5625af479d7977739c11b9220cf54bb360dda3581bece43eef7632cfdafd63099b656654034bf87df4be64427f80fb12d5816e8dee9cd50ea14c4abc986723b9e831b2b8d978f619ab8604e2afcaf27dd92ac40bed4ef8e1c4399e13a298c7e0c9bd138ca44073373d9052e4a409cb6f45cb8e287a4397b77ece1b65c02c4ffe41fa88ac5069eacc32904179aac42140dfcf57bce4ab3e67bdb6a0753f6ddd77ecc7e36e735d882b44fb6bcba7a9aa0a9181200b0f48f1ff88c4402c97dcc710d0d44b83dd0c31d5ec018a22088208fad645a3e79c015c41b7c238649a02716a437833dfaab0195bea09b980006353b62153e6f7fdf896128ac9ed50d083613d1e33ac7ab4ce36d55ed3137e5fc854a60a25bf5ab328f0b3f9ae4c5fafae3fb53b7274ba94cbca16ceb1e74be0877b3b9838c04c56c61ca5baffeeb776cb0462c4556acfbabb26e2780873cd96c0f68bb65a5bd7bfc0fa36eaf7f98b2ab7ef56bfc59507e263671fa0861e3187c1161589d323f14c250bfdce1142c96d34154fbe7234f89af031187f9150e77e8696b72af080f229fcce9149ddb3a38713d11361156dea900b8784ccd4082415ebdcfcb4314e43242634fe178c8437154f9b1100c46c1a843ebe36bfae68764809ba741abd0c0c3efd1b2c44aabeadf7f71581991d8c56afed0f809a3b29bc67db5ed49eb5f6b1c5a92c7525e9ad6f890d63a63bb96fd03f5e66a1d0571d947093786e5a14d87adcd4105b687ca10808874db48ebabbeed0b25200efb570c014674804052f6a9524338d3533478927760541952457d715539ef74ff707e901e04951fce1031f024d3809a9e3da3fc5ae6a8c4db165a2f85036339648a4190581766b5033631eb0f3c6a25796d356f92febcbb27bef27263d44a200bb3253c14a6846ebd12d00239470fed264ca4de94fa13f7ee8dda85a6b20157a174dbf626d7a91aa3d25205a3988ed4bbd6be8abbcddcba6b9c7bdf283975d718e69712841e0bee1dd8eede65d1bf53d05da1328a39808fc6fa36a5d7529c94dbd852369721838f550f0d97001ed54cd363ab0682944534a9c8223690f4dd4717091b555193317f5285bc47f18315eef661083b57137a44843a698b5870da9fc5cf39eaa8a108224f931a158f02cf409c228190ac385d18b7c380f14453e8f783eecc88a8bc9bb63e90a4fd40deab18219e558b985428770308d7ed3d0840d677cf7589e8d0211977270c0552140e92d459503c9b4c02ba7c2a81db37cbddc71087e1e3681aa2663eb3b3b7ded5ae95d00aae9c98c4ecb0b413cfcbadeba5277dbd898e4a9462df6d944b4671b6556007110d9ea1a5dd05070d32d03bea1a88dd2dc9d6f6cd3f25479ddb80a178f952b82d033de5c562f7d53118788d78f3475ce55c292af394f33ecf096945944ba122a7128ab7c432b990abddb697c897221a13f5fc6530640077beac5478f434bebfef4c9caa4b54517b9947649bdd7671d9dce86ccbf2bacbf054fb2d7b3a23aeea61ba195a2a0911b418688504500ac8e44ebe481e5215a704173ead4bd72b3b462ec5c5198ef6ff71c59da8f33748c81d93679c84cfdb1e28508085aa8e1df75e41eff6026dbb79f512e5f90077440d9e2b5551730fdc531d72c3e42e609f210b992a5943bc3404abac2508f1ce4a9e164e9abca13de4bac0f603f4af2e76436511b9d464e3693df5c7b3d049d4efc9fa48a165b6085ad04b48f8321ca60f83f6028d6cc5a37856d44a104f64eba8f515ed5917d47a24201aa54341bf8d562993f1c3f1233efb83810954b01b46fbed160ead496250eee69bf2b1715f269d5308c89ea1ba31facface39dd49dfedb5d9556f1d0aaa639622a6a77bd364b3156cf8b1f72964c7271c6370ac28007cf0f873ca8413aeda95e10b1af68a3e9acde3c9f5540ec5396cf6f365dcfa2292e3244617417585afe49753e1d8f2c09163f2925decea00f145f4891dbe906852dd3c6883c98971a8ffb1d1f2864fbdfc7e0201fcc0189d02894269e6418480768231fc811d315ef72629540a975e7acd66c2c7bda2310d9b4f7b3a8d3310ce004fe12da9b92b4960cd054f1cd15e45877b4234a853cb1b8b2d70add24200dfa6d201bd7f5e5777819b70a9801ff15038188ffb479f1ecc12ae833da70f12d64b4c3d72d800e95860e5917cc5fc66670b6f30e23ad4eef4f65e5e3ced2ed5b69bf7a70d29f957ef967326d78743f4d9741937aa894e7961dae0ea342d2f52629929e3c2bb43a763b4fa130df905066dba8f1b6a9c760156da73a09fe7847213b1bb6e2228bca8140640e7e1b8ad6c3e6d7de1190fe2e52bcac79e2cc92a96ca28af01c11929ab16adb04b443cf47132a34084580a186c2903c341375a43cc4f698ac2eee67da63af773cab554bbfff6342be51e58d3b520ceef43832e99cad2064f40f94185ee2ebe7dd48343e8dcf1ae7533002c09e00700001e33afacd9d286615ef78abf84c8e1bc049deb14290ad2b78b936314991bb8cb5533fa0f3bd6fa1a7d78a712b2fd18bebde37cf101fa3a829e580f1e4f20eb3f410dbaca9ab564ab14bbf8953474a1fa13edc00ff836aeda58cfe3f6548f7403b7c8dc7d92af68c5770d3b06951ca3db8b3f68492828c532690002cd76961bed0ba858fbb9752c8cf0053e329b0f454333cbb6fc77dce8e148f80c445fc7c1010e21be028c5af347d35136198c49c1ec6e45a79d8f4adf95a7b3b9438e733dc913bbf165f4ee239cb34fdc1dc746bfe5cf5b2de482661d4d54b842f443dfa6ee6630914ede91da5871fd5fce5864046642245c215a5c36f8e19de52b86df74b306f241d3512ecfebdeb6c9b67b8806b1d111baff69d55088635bb8a35c87512326eade6f959f8c04b30db094729141e22060ca5889083dbde13a1ad81f4d4c93f94a178dc0014a1caf47123b67afedf18f5dde180f2231a6dfbd0fc3b1c0a112a7e530c0ee9f09af98d72d3b6ed52ae5ad37e7cececac7f8c1bfad5ad3a8ca2619324e7b1f737502a44101ec26d77bad6ad0a5be63c5e55c6e2bd92d27926ea48020fa8cb212d38fee72f26433f63ae8d99665b3db01732bf15c9faf7a672aac219c75f9ff2873c35862f660a6436e51d60dc0f7d2af7d3e0650c5de74a1ba6084b6e0a0f833228c6f7d75ea084a1f8ecf1fddfe8c4b0fbb7180df45fa222ca2920c4ef2eb820b38bafac791413390bff743e6b206f46e5343e8cf35e07e4b47e82c55864fd360137749d85edd54fa1cd87ba6dd65c9ca71220ce165b4418084654ff9952b90577db622c00907decb21173c32f37e6f777d1cdc51f24268af0c253f09b8eb95848f9e6a7c938c927da5af93f959cac1569443fbecc75626a18018a74722a4c8e5447169d16057eb66870a962450765af6135bb460500c1117bcba249a4074c770fa1767c00ea2c98c8192402ff2c361ed2c5ed26946f3a8f9f2b0b514f86244c7eb382d6335cc1e43b5eb89e59d21c55adcc35b306df6c23079fa2f087a6cff3b6e43458261edb9e5ed2b3ab2577ce0156a847cc1d5b1ca4b2eaf8e216a587f93e20da7996c8ebb0f9ae839a9dd3dcb17b2eb733e56047ffca37be8a8dba1299022a22006977ca0631ba31610d8ed6c20b4ccb93e1c3e8342614c6ac9846f40213b6e82db39cab9a7c3a9c17054f16188391a9c4e46e97b91d213580f84214d5a5634e693cc7b491a811edf3e738d3c1ee8ea560dd91bddb5a4908d028ff957c50aa2f4905e599808c2e0e3ffd12ae186c67f8c42f1ada47f60d22223e552c076a55a6defc7fffa03a719993da963a56d50b7262b72ce44db3466c2011e92cc1185038c0dd71c1d8ea7299783e2c22a3c88abe68736dd96455ce83905051197c7ff1ec4475644716f9b499fed6c3f515baa991d72aaf35c5d660e26c764694f7003dd76e0f5cbecb224c51541fd6bccaa853fad5714d3b86830365d33a906b08e7015e1d4e59a72d1d3b03cdf7a8b1f67977267fe7a393700e7d184b6080b0ff8903142a447675e1212802a6856d07efb93bc4ec7d55cf65c3acff7b45cd6fc994334e22e90797a3b8915fa0b167890a19d3f041c744ac69103ad73668d46ed509532c3b5ea2e15fa8d1f376b6858c4c9e816835a44a0d91d6d11da782a61825e3de93f9649cf79c5969c0515a254c93e9382ac603130af0629e62351283fe7350bba34bab7044cea8ac7601cccdfe8605481f05364fdbd9da64e71b928aba86fadf27c46df22441d4ff30d897b6007aa22b37e1454675c2e2abfe3e06233b04b73125a2b157380deefa73d198ac5577ccfd646bdd39ec5de63dad90da44233b8e3b3a2e22332166e53ba1cfb556e608d51cb454fcaa7cbeccb02b9b74c79c78dabdcf5c8ec331e242c2283db32e9217a7c0cf3175511b28dc1a0a294c1d56461093a56ba56916c91447378d5f127eeaf85b67239330f761db672bed6ac3f09b243bd469b9814aee23419be4b53f967a11c4e70e0f36e717746f8e8bcdaa87aff386af2bc24fd479cc62f812e6a8ce9bb79d937857fc5614cd9efac8937f0ae2072791579db7a4a3024082596df655dd02062c70ed595baf07a18caef1523a5f30249114facfc067f7e8a4e42e409316eee3a346df383a1a4ef7117f2db3cd7ad0590a246144e6b0448c3fc8d4307a100039a3dccfa594eb444b1a85cab56d7dd805be31ed9f12c6c07fa5ebbd0ce7ebc63c93ad9c0b97773578dc0220dec355fac16139b933c1666356bf026f69dd57227c84f9fbc4891853352e9e84582592558f3ece9e241c4d752d7e1a0008e80e9a1b6916a8e0ff99cc7a2a721dba2b65ec4678a57d3a6e04acef3523862cba7a024abbcc0d4cf1595b3b9cfc75763f2f7d35ef3b747528083f871613e8d59a40dbc8632c8191b59816bbee3de0566262cef5c08c7fff900eb62d4fac201c7914c6077968ac3a20b4dde986fb2ddccb5f202e418b13ceb8f480fb2833348d9ec8e0a85a356ef861a7491590278a367686e572dd07d3d6d493741f587b947a57a6a2fb1f0d476c45594ea6b1525cc2b3dadba3754f4d14643d87ca5cd743c94b72b5e70af481c978fd3ba78b48667783d2caee00f1afb04d7c76664173c82149758122a2b6703f06b4025194b525aa6e9498482f464123c27802c716b74ae9dfe28fb9eb0c088a82027b12be485e23347649c4399b59da47e4d57e49dfd8f3c2f082a0ab655fe9e92ac4d88aa9eb22959527d1a74a8f4f3f441b7369502b079dd6f03c77649c8f9df42249a052314f1bbae481241885a85ac9ef5e493d506f316abe361953bd77617b75d20aba7020b7ad509a6122e9e728440669c", 0x1000}, {&(0x7f0000001540)="446ed24172c40c20ad62d640f76f5edcc2d925f8fc42c7543723e0a313876d058d22e2488fb34f439eba2326ee7ebfa9f6c6ede4452acc4ec1f5799d0f02f58b2afb5d1081452a8a8b36bef14795e398e287ba7470bf5c4522170d5d09ba999099e72c66e24e039e9ca9c7397e57f37859c29ce9b5713fb66ef4b30422a68f5afca7ede3c14eeebd61f16b32d5cd17ca857a7e84dfbd8ab1b414272210e7b55461efab2dd71d596f1518d5db", 0xac}, {&(0x7f0000001600)="eac59bdc1e3da54a921404c7173dafa13c889b811bccb931f186782793a11edb850a9e3662f0b1598b8dd13219053b05b194db5c65da7ccf98542274409d056f77bc52db126eb968e1b8c0e6abb0590d73aaac9f81c567e7feb30737fa36643b269e3b423134290b5ea0305a47a136fcb781d095ab2bc55ce2aeb88e9e87f18dd32bba113f5056b349448a1cf721b180873a4227647acfee6e5a0ed3120cc2dfc1401dfe412833811519", 0xaa}], 0x6, &(0x7f0000000400)={0x28, 0x10f, 0x0, "c7aee25f97a86660815e00f8083f5a36608b71e7d4ebbc"}, 0x28, 0x8044}, {&(0x7f0000001740)={0x27, 0x0, 0x1, 0x5, 0x81, 0x93, "4f2d928d9d8b3df2185e46dd7f39f25388bf811eae0649a4a83afd552ae06390094826d11f030f31cc6d1806a599ff15cc78843299d513b03901abb4835efe", 0x3c}, 0x60, &(0x7f0000002900)=[{&(0x7f00000017c0)="7958dd9a95aba7c47de5c8c3b70773640e6f554f0c36ccfd29b9f56e5cdbf3f5bf6e8f3914b4040d3e0aa77ef2053ee254f54cc44aed733018a7edb31fe18f4cae73325df881ead69d73d48c2e2961fbe73da2c8b38b01104bcd77a96e60f29b7570f6d06f2430135e700634542f78ef133de0d258a095aa698e82df1be5053f3bbbeecd87eb23db50ce0d86a32a2b0afad93a80e1955fe0a73878a6d8a9f984a0", 0xa1}, {&(0x7f0000001880)="d39db7f5bae36a6240aa6abf2bb5a6e3e2eb333b2549ae8f6cfc384ee6d85b7026e815bef47fd94090b5080e16fd91e5cce2811d076477895a172fb0594c87f3eb05ef13b5e151fdef2d5e84397a6616e051f203b678929d62ee15d3d69345b3e07e27a4264fbe58fe2f8ceb7c905e88845b4783e2ba8b1256cc0b3b7b4b1ef68b94d24d18f672265fe2541b89608c6abe1f533a702fbb00097fd770fc5a305276dfc8cf95f224bc4c7303038c4b78a1d4b4d3c6e90c2c3d6de6ea48a79896af3c5d37a09111355fa722682a95acd432f60d5f7244939a1193f45fd237b573dc8ad9702b569453dfc2c99e94dec3ad7ba1b2a5341aa125c0d0e7b448021c8aba071cd787452107671433b7cc97adb102d014bab536e217ec77597eaf309f3183a0685cc47b3d115c71cb93e1b5465ab9711ef054182be065b1788af3cad735307ebfa5736be2ed5f8d651a0ecf7395faae82af5038ed977131f067cc953ac46fc26202cbf2ea9f6cbfa276e473ad2995e1720cc52f6341d7b7450d0c256fe4e7470579f6892c5e334d5321351cdfdc273fb266f25127273e9478e9f9b4887659e24351ec0f83dff502b4345acefae64e8b6fd8407094823e3062147d5b6ae60e4d7b7950abb2d0e444e14bf8b7fce7a2e6095a6059867f913a9b17279824e6e9e7fb1b9e7cec118d17d1d7b4c88479bec9fd0a89d3434872c051164c071020a5fc8c8943a8ef2d53ea32e39c85a4e43e46092c2355bdca76c707ce2d3d8d7d2126002719263d176b1bf04991ec107289243612c552fe1d2c41770bcf9ca314e1a594fa412326b28390dd8285cd055816c5de9f4dabe388c60886eabbfdf182699866786934a24fd81c9caf92823c1da75bf59e2815a0790b68f8f15cbdcf1e507df631014409a4d28cbf53230ab654b0c9c923815a01b5b94b7c037a82a3d2c82d2ec61cd3a225166bf2fc22731a9f56abd5460865a22141e317870bee14aec6cdb314ff902eec806ebd4d910ebaf26a6995ff5c0b36c526b0501cc744d5f37337b9577357ccaddf738eb6a087258fa5083a368bcd38ed1a0dee41d30ff9d6f09e92cc9f7bf7ff94e5c455a29880b2f459d052724fd52c9b3ad47a8b351b54219c7da9bd348a1c72982f3264d912bf742f86736cadc14eaa607bc3804660ecfc639561685aa6dddff6e00ce9924a1fb6934bc914e348e7826b452585a157c05f329c65e56fb34a9df9c0538168aff3527d521caf4b4b8ec7329a4ce031b4c0be0fb7ba196527fcebd7fcd9a6a31789906f6e4b4a2c256f564a17b31efb3fe6d36f6f3d8e634861421f658bd3ed189e814bdc7ffe096b145706d2bf925c388a62b8ada138f2040ee0e459fcfbb918a98f39da784463d205a4c57bca7300f2a23a70e38b8988696a1279d18538a621fd32259eaba89b7e0b41575c876a29fe7e72e85a26460fad2defcf414910cef647616076d23d33fe3630f7fa42b00d7e8eff70d321fe2520b9717c85cc31871cbd3b2af7de0344b41b570db057ca89bffca6704a24f059bf4f667b37308b05c01eb6f96d1e34aca2189e310c2c13fab2ef1c421d8e7203109cd1b44fe2aa2a869606685fc0baa23a2a12a5c8ee900ee6d01a53a56c42ec62b6aab87b2b39f1a33de4f4217d0d1882533e63e2cb764ab7f82e2569b06e70dea9ff33cd9c80235455acb20fbde972eb0e69c80a2189c5708136e7c345b3a1594430f3b66542ce7adfe65756d5b7d86c1076d8d5b6bacad76827866adbbd4d07a49264199fd42955a36b039364e68a3d23b58f7d4c08db78e92a61ebba7f4bc0957634537ffb85c8542a482e638be830ee1107564c37257dbc14157476626c207ea5ee458c506b00e9f8946f2f2c34ea4669c1984d10077b8ff5f4816a35cff2938fe5c350dfef186404e0a6d6f22846da5c54bd0b3f84dbb0bc48c60c9a2cab37fe6386afc594aca749ec9590de4730abd7a52edb17c57ea73284121cf545bfacc342d72cc7a3ce5b00a0c71219043b0c16257bfc7299dd9fa179568ad7b3f662491e6fcc5dc06a6d8c7aef7e93b65761154558523dd8e4b3884918f52c9cbc89072a1c8b8a38b9c3ff89037291fe302176ca409796f68e39ef9e12703bded557e873b27c59d15468d796d1b408e2bc5deea917379b13102913db4122c82eec80421b1a503a207af93407e0eac4eb5f189b49f4e5dc340f2b0dd8e9675690f611d36b0351054fcf0df6ef8db8d93471c44421b8b88d430d3a59db20f8b8969ffdc03b47d0f33104adb5939f2906b4da33ebec6d2e79dd6e8b4d5f07ece69f5636a99e9ecdda35cc3d10331a03409863dc2ff9a537bc4322ab171c0d93b5fe00a1285d7260623383b9d129631561a96116ba7399a1b5879f74cb4ac5b76bd853a1884e55060133b894990e978b367acc9593564b83c60faf86b0aa086181a45329166527037cc36eeb1ce709d39766c7cf2ecf18ac9a7009d316a5f5465ef4b5dad9f2f679883a34722d111b1f89bd3213bbcb3e28c610ca838d41463f25e78bbc91bb46985bef69bddc23982a94b43c55484c3da415aaa2b0e1f74c938b1e2f900c52ae37b45714f58364ada13fc2a16deaa821bd1cddb8f79361ca4a05e0d904285dc08ce2e3e6793eed400683f5b9558c3d874fac6c1b2f0ea04d1f75c64951683e6b69b3423298d37bc292d5168e683dffead5f357f2e15284a97d70601708ca7485f6a2bc2c1b40874c3ac89f456a63c0aa8367dec379ad539499e5533df0fc7ec37991ceeca4557121b7e0b2b2aff64559958bdde374dc5f1b32b7e2b2cbf91a05101772b7f872453ae7a8b2502acf44403ec9fa6aa1702f04ff1856138a1205fce05069cb0973deb70f4a9901cb0055ee691366dad5ec849cf3d380207c322a979ce8307e57fd7cbfdaf67d48a001ea0d83703fa3f206f418c4c7503d448065d8c7ddce6da13ae469de91bb40a55b4cea452e4290039395d5e980141a89e09c257a8f70468f8d6416d32cc23ec7ae40955c9ff20cf954800f08346f75fc71a78dc27026664f36ef8b120ad4dfe59b5d24489dc26d3f70bde21923cc2861d34151f025c264e8d0e03d83b2e2245c29822c1239b0f786f6607f04d0679c05a5aa919eb56c8b780c4d7d9a4dc08628dd69ac3d56ff593a035c5e075737e85b4d941334ca571bf4a8f7635bca1abee1c49e52c1543a1ece1580d9efe5a954788841a5a2724cb43ccad34565a8796dcefdaba6b168efdd9654389523e79d3b891a555bf09ccbfa73e4830fd26ea015b3d27ead5dac98b72f0106de417e49a65f0628ed8a47df2bc0d910c7af2b8e206b1499117337e6a28446302ac8d246961a9752c6728062b5be15afb55ea7b228d5541fc5eb8b5af4d3d0d4a33bbab87fcf83f5d9f04b09afe91cecaaa4bc71c5be48ae4ba36c12d74746838216303965eb384a94d99fb2b8f0a41e5e22dbc439130af4ff6ecedeb9f84a9b2a43638be64dbaea0f0ef51f293674366603f98abc29432df93d0ad09c9a195a6cf2619712ef6749d35f7f88982cb5c6ee331ee69f265b386a068cbd396e795275d3bce12389554995f57e81555e5561baa18f2b13b73832c50c8035c5628f5f6c2ab8e66a694cc025387f5593320875f076d69a4d31cf74eae7ce8040d7d300b5c7b5206b0eced78ec5d0639129753bed86f3ce7475a44667b685b2809befde0fe0063f183271117962dc03f01562fe3f7562d412966f86bbd9d95b38a142b1a288dec72e5affebbbae1c0ab1f15090af9ab8035980ba91794a30effbb6dd34b171f5f9b6462321752872dab3112cb06214d270dfc0372290c21b30b54c857907de37f64d1aaf2f6e8edf146e475c606e5705a253958e4f46ae0102197eb6843e9b726f862dd0d1f06963711fd28aa46c76c7407dad4c8c917122edc808e998df120046487267ad2990c9f0a5094eb6d527b5e13d4c0c825ccea575084bbfd5658b082c31b961c9d17a780caed2af0cfabaeb3f0f47d3f9fe7b37d88f978e677c48adbef59bc5e2a8b53fea74e9cf365b80e273022fad2099e3ffee31a6aa4e2bd32f4747fdb649e9d90339ef4b6f3443b859730d15de18c2e251b999454ef82226129d5d2decca7758a4d4cf1c2552831028f47b00d8ad496746d339b3f72ed12de45e625fa9a71bc0295bafd4c6a5e4dcff1565cbdf3594ac0f145efa415678355b698a7612fd951025d1eecbfc3ad7af905fcba139751bfae9d3e83e1c009b280f8572d68a673f92b8b1eb366b6028fb0c382ecfdb1c745c7b3ab866560cbb9cb02c2bb5f7e1653123dbdd6d2748bbbbd63a595266661bf76e83e9efa479f939b39c2ef7371b9152eecfac7d8225d85f15c55674e75a07dc4b14a7c72c1bff5b52fd2f7790a6597e04d005455e7d9b9b2e4de451d330e934727859ed3b440a186205fd587942151764544d870765efbbfe43fe80307c556a0fc99b7eaadc5ffb9ec4dc59d603504237e5eca2bb3f6ef8c060ce2da1d6b246d8e5aca21ddb193831930249d867721acad7fdafefe4b5c4fc59d406a5115ea073a9f79fb2d585eb1c1847d6dc599770af002ac1f980cbda096efff9fdcdd76f6c5d72317c9fc3b676bfbacb8df42338049bc438cfcb9a542b69062c6703b27082b368c96b1cd21df4c27e52f05044e7372f4be516b9208e0d8fec63d888a48162d92863e62f27f2b123540982d5f5fa0bdcca454f12d0ffdb0631bd477dca9354084d6201c0c04bce9bf32645d7c46a4d6be7316c9892c69ccfaa7c0322187b6bcdd8efde3e8f9be176bf4cfefcc0b3251882a7a3106cbff9a05109dad511bb8d6ca00c5c6cf0f8e72ffd5f4a01f6ce77bd9b4a8ba5974a3bae0bb053d57f871bc77c7b0938871cb7b6fb940f498cf1304cce7bd9795bfbac33c3b06a714a7209fb7ea7fd1bb7e50c43568b508eeb62d962f566d3f68edf5e292e26ee9e3be92a494579ba1ca7de78679becc474257c433b7a9883ffafebaaf2bf9379d75c6a0b3e4ebc67a0f87fb38ec8b0d482c4dbcc31882e6e50f9d2335a8e5d8884fd54fb952a8d3b8fee7cf79706fe616e98ca5350a4249ebedeb8527dc58e7e9ecfdecdf31be646eb3be0844ddcbc2587108245403eb8c32abbcd83fd6bce43ba343fa506d13e3e273543f2c885a25d69533b57493a003799f966d53bc926b21af42e360e0826219c491f5b289888246c27008a39e9233235cb05bd3da4e4ba51dd41e31f85c8668a00e9476a259c56ac538357200cdbf9a4d3b5699c08cfc4f97dfe6a893909c0e391bd00aa8b3cf38088afc75682850cecd6b6280ac38607a6f9fa2b75e1a04233f22da33b8305293fe173ce17ec01b82815683f46943cc376bafd61efde98739c38e17fad3b97fbecf1264209ed3da01c64f5d887956dc133223785c3d13b04f43b15ea7b316ab61ff5ac542657240e076af8eaf79104cc39dd0528c68220c3627455770c495383a2d6d479922ceab2e13f67498a7a43bfd7f79235ad09aad49548b090014f5b1f87a16b6ff1ebe8f85fb542d3de2c5e2a02ebb5157fad21305f8cab8a29444cfca814ff0a01545839f19c25268de5df06eeff7c08d79cebe3f2809aa1b064e9bc7ebc2baccb51f160f9519db9f1e629be6e28be513010eb198940b52c29e906cc84ada316ec31dd1a2ca38a5d52b36611053b161c6763dff2fde4bee6256a0d88fd7570b8c7bf6c45d97d2ddbafebd6daa8c7fc3a4b92f5393f45cd1f3adba4854f68eb4a2f6bb711cf98e515425ea609455efa22c0b0ea58", 0x1000}, {&(0x7f0000002880)="382e12e5fcac95fc997b29a43192d39a3f19a12009f1081ff69a9f1140b6e6e25f85e35579f2b52040a35e0520734d1f4737a0c22adf0ce212c74e948aaa60f2f5113a4ec683b3c3c4bedc78face687b0b1e5fd7e01cdc9d01997e2777e7dbadd9dadc8eccc3cc3e06baa44bdf0e17de", 0x70}], 0x3, &(0x7f0000002940)={0x88, 0x108, 0x8e, "d2207202490a66177144bc479060159fc003980c7fa8a3f0be61327e0a8f18963c43653e94449312aa7f078b31478413ef15f0f5509b21c0b3e3b11e12527a644cfeb2f6dbd8d23805c54f058a9514be03a2fc8a0a255f663f588f3e8f26f745c3c498014b42832d2c1f1c47268c9a0cf5af6a27"}, 0x88, 0x40000}, {&(0x7f0000002a00)={0x27, 0x1, 0x2, 0x3, 0x9, 0x20, "c0717a1b6cd823c077d6c21fcb5fea65d737e29b573a551e2628f4c1a6cc34f016101e3bd2a25954cdcd83cf9bae1c054eebff05efb0efa0387a8b7ffc81e9", 0xe}, 0x60, &(0x7f00000030c0)=[{&(0x7f0000002a80)="15f7d5c930c359bd8d2fe1dfc5a56bdea9c7a9c8f40489db67ae54648feb72a33b65c0a00075200f9a7b83dc1babec4608e25eaaa7f2c6f165f55d505005e8689f30455b2d521e6602efced81021919cbe467ec8c0ffb5ac61a711be793f35424c4436bfbde405764c441689728c97d5e2c7d2b40e9decf16e889559a4526073c6a31b92ec24e02f", 0x88}, {&(0x7f0000002b40)="e27cb67e2a0ab1abec7d4f2c323f15dac121d9532ed6254ba664bea66153583e2cebec4307905761a7118db48438babcedf550e60a3d170066608831e7604655519b26c299f97426", 0x48}, {&(0x7f0000002bc0)="cad8d49780233e60049847f6341f3a467bd64ca13a3f690f2b29d8e10d16280e9bea", 0x22}, {&(0x7f0000002c00)="5fd8678c707ca916e554b4b13a2b7340d0236c985c910700f5c0cb626afe4316c33f4b89c0579b7cca0897638efbdafb73abc68b35cd1a72a2b2c8c3b49944db76d22de63b0c8c95226f65ce3fec335dd85b6e64c048bb0ce25dc7d145dde9ca7cb2eafe1f698213bdce7aa3008b70bef0e8c9f7f92c18ca18b3e2cc9fbac11736fb75d5a23cfa381671552d4c060e4899f1b1d20917b7627cc46a2f6f48865d8c48bb4ac3bd1c5c2bf4098174b75205f0b2", 0xb2}, {&(0x7f0000002cc0)="4f96d82e5883d1f9dcb7a43ddfe1c81bd9c85c27f716184999f6bd5ee9805b0b69a45659f59e1758dfa5091ae99c72041c27a04503e7485672e18c2f8d666aa4364a440794be80a671ee2ed4ce0a8e7d506ad63267cd5459c28d57dddbd51ca6fc7250d757cfcf1e124f33b7a7e68b63bb7b6cd72ca266baa554623cec330d308d8b8b93da27d23531552fc9402f9526e4e920c08eb2cdb36588e514f05dace2bcf547cea9055fafac2217b0cf98f67ab71e853da5b6845e75bfc990211dc8a8e6124a08c158560bafe0d44ddb5b6c325eedb8ca8ed4f2661b3e9d32e2e8bcde859aa4df0938479242645f989eda1a", 0xef}, {&(0x7f0000002dc0)="138fcfe2d1325e165f6dadda5809093ce41c2ba9b5e31bc8117f30e7597633855695135dfa1e3ef24117c977b6aae2ab7d6ac4e30887d22e4f62b14af322ae8536437ed5cd0878288886d068c77cb6c8141e952f1a886b4da3ae09e1", 0x5c}, {&(0x7f0000002e40)="82f1a8c63b20d3feb01b19c011121ed4b111e7c01c528c137e7a4d2ec1df5abdfcd8b15f88b62f6468a0cfde697f85d7e1620cfaf67a3b522577a09cf0cc5426c2aac6d955fd1ed66c9499d86c596e07f20048cf299d2cfb18e8bd7b7dce298bd3db9c825a408a23ecf33b1d67f48881b8134608082182a28b8208dcaade204363dd539f25e652e5ab53801466913a4dd1906b9351898cabf6b46f5fc824c96b1abc1345d87733c59f3dbb06039a622d453f7056a128af1c29931257acf9c18c1df9b397ceaa4153da", 0xc9}, {&(0x7f0000002f40)="27e0868efe9e0a78dffdb4df55293d8d9f1af2a51ac2efc0f1300e951ac7411483530bd91102faaead45168fd5b4d1411b2b849812f3082716a4d1da713e55c532d0e4d7a1b0492c", 0x48}, {&(0x7f0000002fc0)="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", 0xfc}], 0x9, &(0x7f0000003180)={0x88, 0x106, 0x10001, "efcdbbb772b1330f97649c9ded065f381ad3338eaec1ab7bce3457d4a31d8059bd5ef452f233cd2464c196bb950ecab93bc08d5ee69b485e859012907aa52dfb20291f0074b685be5beac5e48467b096dd35a1248573f3e1c6738d0bbb2181ddbb7a278303a02ea29166fb8a3763aa15eb4ea5"}, 0x88, 0x20000000}], 0x4, 0x4008001) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x84240, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000000)) [ 738.185072][ T3998] FAULT_INJECTION: forcing a failure. [ 738.185072][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 738.212043][ T3998] CPU: 1 PID: 3998 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 738.220653][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.230685][ T3998] Call Trace: 20:31:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xff000000, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 738.233979][ T3998] dump_stack+0x10f/0x19d [ 738.238297][ T3998] should_fail+0x23c/0x250 [ 738.242715][ T3998] __should_failslab+0x81/0x90 [ 738.247555][ T3998] should_failslab+0x5/0x20 [ 738.252035][ T3998] kmem_cache_alloc_node_trace+0x3b/0x260 [ 738.257752][ T3998] ? __kmalloc_node_track_caller+0x30/0x40 [ 738.263549][ T3998] ? kmem_cache_alloc_node+0x12b/0x260 [ 738.268999][ T3998] ? alloc_uevent_skb+0x5b/0x120 [ 738.273976][ T3998] __kmalloc_node_track_caller+0x30/0x40 [ 738.279586][ T3998] __alloc_skb+0xd3/0x2e0 [ 738.283929][ T3998] alloc_uevent_skb+0x5b/0x120 [ 738.288678][ T3998] kobject_uevent_env+0x726/0xc40 [ 738.293682][ T3998] ? kernfs_put+0x39/0x300 [ 738.298137][ T3998] ? sysfs_remove_group+0x18e/0x1a0 [ 738.303321][ T3998] kobject_uevent+0x18/0x20 [ 738.307889][ T3998] kobject_del+0x9f/0x250 [ 738.312198][ T3998] kobject_put+0x116/0x170 [ 738.316600][ T3998] netdev_queue_update_kobjects+0x27a/0x2b0 [ 738.322478][ T3998] netdev_unregister_kobject+0xbc/0xf0 [ 738.327925][ T3998] rollback_registered_many+0xab4/0xce0 [ 738.333454][ T3998] unregister_netdevice_queue+0x1cd/0x2f0 [ 738.339169][ T3998] __tun_detach+0xb33/0x1020 [ 738.343748][ T3998] ? tun_chr_open+0x290/0x290 [ 738.348408][ T3998] tun_chr_close+0x5d/0xa0 [ 738.352806][ T3998] __fput+0x1df/0x460 [ 738.356773][ T3998] ____fput+0x11/0x20 [ 738.360741][ T3998] task_work_run+0x8e/0x110 [ 738.365295][ T3998] get_signal+0x3f6/0x1650 [ 738.369754][ T3998] do_signal+0x25/0x270 [ 738.374004][ T3998] ? __rcu_read_unlock+0x4b/0x260 [ 738.379015][ T3998] ? __se_sys_io_submit+0x1b9/0x250 [ 738.384202][ T3998] __prepare_exit_to_usermode+0x127/0x230 [ 738.389905][ T3998] __syscall_return_slowpath+0x47/0x60 [ 738.395502][ T3998] do_syscall_64+0x5d/0xb0 [ 738.399919][ T3998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 738.405788][ T3998] RIP: 0033:0x45c1f9 [ 738.409645][ T3998] Code: Bad RIP value. [ 738.413675][ T3998] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 738.422047][ T3998] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 738.430021][ T3998] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 738.437984][ T3998] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 738.445928][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 738.453863][ T3998] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:06 executing program 3 (fault-call:8 fault-nth:19): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, 0x0) 20:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xfffffdfd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x700, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x12, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xc883, 0x0, 0x8, 0x9, 0x14, "58624d091074866250008a1000"}) syz_open_pts(0xffffffffffffffff, 0x0) 20:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x100000, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0xe, 0xf, 0x71, &(0x7f0000000480)}) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xffffff80, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045432, 0x0) 20:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x900, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2f, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x15, 0x9, 0xdd, &(0x7f0000000480)}) r1 = syz_open_pts(r0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xbc2b, 0x484602) ioctl$TCSETSF(r1, 0x5418, 0x0) [ 738.791647][ T4054] FAULT_INJECTION: forcing a failure. [ 738.791647][ T4054] name failslab, interval 1, probability 0, space 0, times 0 [ 738.827498][ T4054] CPU: 1 PID: 4054 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 738.836086][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.846120][ T4054] Call Trace: [ 738.849490][ T4054] dump_stack+0x10f/0x19d [ 738.853805][ T4054] should_fail+0x23c/0x250 [ 738.858212][ T4054] __should_failslab+0x81/0x90 [ 738.862960][ T4054] should_failslab+0x5/0x20 [ 738.867449][ T4054] kmem_cache_alloc_trace+0x32/0x2c0 [ 738.872719][ T4054] ? call_usermodehelper_setup+0x81/0x160 [ 738.878425][ T4054] call_usermodehelper_setup+0x81/0x160 [ 738.884068][ T4054] ? add_uevent_var+0x1c0/0x1c0 [ 738.889164][ T4054] kobject_uevent_env+0xb2e/0xc40 [ 738.894176][ T4054] ? kernfs_put+0x39/0x300 [ 738.898579][ T4054] ? sysfs_remove_group+0x18e/0x1a0 [ 738.903798][ T4054] kobject_uevent+0x18/0x20 [ 738.908291][ T4054] kobject_del+0x9f/0x250 [ 738.912701][ T4054] kobject_put+0x116/0x170 [ 738.917121][ T4054] netdev_queue_update_kobjects+0x27a/0x2b0 [ 738.922998][ T4054] netdev_unregister_kobject+0xbc/0xf0 [ 738.928438][ T4054] rollback_registered_many+0xab4/0xce0 [ 738.933968][ T4054] unregister_netdevice_queue+0x1cd/0x2f0 [ 738.939667][ T4054] __tun_detach+0xb33/0x1020 [ 738.944287][ T4054] ? tun_chr_open+0x290/0x290 [ 738.949149][ T4054] tun_chr_close+0x5d/0xa0 [ 738.953541][ T4054] __fput+0x1df/0x460 [ 738.957508][ T4054] ____fput+0x11/0x20 [ 738.961504][ T4054] task_work_run+0x8e/0x110 [ 738.965992][ T4054] get_signal+0x3f6/0x1650 [ 738.970404][ T4054] do_signal+0x25/0x270 [ 738.974541][ T4054] ? __rcu_read_unlock+0x4b/0x260 [ 738.979594][ T4054] ? __se_sys_io_submit+0x1b9/0x250 [ 738.984786][ T4054] __prepare_exit_to_usermode+0x127/0x230 [ 738.990487][ T4054] __syscall_return_slowpath+0x47/0x60 [ 738.996016][ T4054] do_syscall_64+0x5d/0xb0 [ 739.000422][ T4054] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 739.006379][ T4054] RIP: 0033:0x45c1f9 [ 739.010247][ T4054] Code: Bad RIP value. [ 739.014329][ T4054] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 739.022827][ T4054] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 739.030779][ T4054] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 739.038729][ T4054] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 739.046693][ T4054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 739.054664][ T4054] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:06 executing program 3 (fault-call:8 fault-nth:20): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, 0x0) 20:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa00, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x5c, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xffffff81, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x0, 0xe4a, 0x1, 0x4, 0x8001, 0x9, 0xfa, 0x1, r4}, 0x20) 20:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086301, 0x0) 20:31:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb00, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0xffffff82, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:06 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x6, r1, 0x4, 0x20006a) tkill(r1, 0x3d) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x7, 0xfffffffc, 0x0, 0x0, 0x4, "8000"}) r4 = syz_open_pts(0xffffffffffffffff, 0x8200) ioctl$TCSETSF(r4, 0x5418, 0x0) 20:31:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x500, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 739.384904][ T4104] FAULT_INJECTION: forcing a failure. [ 739.384904][ T4104] name failslab, interval 1, probability 0, space 0, times 0 [ 739.448914][ T4104] CPU: 1 PID: 4104 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 739.457503][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.467559][ T4104] Call Trace: [ 739.470910][ T4104] dump_stack+0x10f/0x19d [ 739.475281][ T4104] should_fail+0x23c/0x250 [ 739.479681][ T4104] __should_failslab+0x81/0x90 [ 739.484439][ T4104] ? dev_uevent_filter+0x70/0x70 [ 739.489354][ T4104] should_failslab+0x5/0x20 [ 739.493839][ T4104] kmem_cache_alloc_trace+0x32/0x2c0 [ 739.499135][ T4104] ? kobject_uevent_env+0x1a7/0xc40 [ 739.504315][ T4104] ? dev_uevent_filter+0x70/0x70 [ 739.509270][ T4104] kobject_uevent_env+0x1a7/0xc40 [ 739.514277][ T4104] ? kernfs_find_ns+0x30d/0x320 [ 739.519110][ T4104] ? preempt_count_add+0x4e/0x90 [ 739.524026][ T4104] ? _raw_spin_unlock_irq+0x4b/0x70 [ 739.529206][ T4104] ? device_pm_check_callbacks+0x626/0x640 [ 739.534997][ T4104] kobject_uevent+0x18/0x20 [ 739.539477][ T4104] device_del+0xa13/0xa80 [ 739.543816][ T4104] ? pm_runtime_set_memalloc_noio+0x19a/0x1b0 [ 739.549945][ T4104] netdev_unregister_kobject+0xe6/0xf0 [ 739.555465][ T4104] rollback_registered_many+0xab4/0xce0 [ 739.561000][ T4104] unregister_netdevice_queue+0x1cd/0x2f0 [ 739.566702][ T4104] __tun_detach+0xb33/0x1020 [ 739.571282][ T4104] ? tun_chr_open+0x290/0x290 [ 739.575950][ T4104] tun_chr_close+0x5d/0xa0 [ 739.580351][ T4104] __fput+0x1df/0x460 [ 739.584318][ T4104] ____fput+0x11/0x20 [ 739.588286][ T4104] task_work_run+0x8e/0x110 [ 739.592865][ T4104] get_signal+0x3f6/0x1650 [ 739.597276][ T4104] do_signal+0x25/0x270 [ 739.601468][ T4104] ? __rcu_read_unlock+0x4b/0x260 [ 739.606479][ T4104] ? __se_sys_io_submit+0x1b9/0x250 [ 739.611661][ T4104] __prepare_exit_to_usermode+0x127/0x230 [ 739.617369][ T4104] __syscall_return_slowpath+0x47/0x60 [ 739.622913][ T4104] do_syscall_64+0x5d/0xb0 [ 739.627395][ T4104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 739.633269][ T4104] RIP: 0033:0x45c1f9 [ 739.637141][ T4104] Code: Bad RIP value. [ 739.641187][ T4104] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 739.649689][ T4104] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 739.657631][ T4104] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 739.665569][ T4104] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 739.673560][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 739.682281][ T4104] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:07 executing program 3 (fault-call:8 fault-nth:21): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x1, 0x2, 0x3}, 0xfff}}, 0x18) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc00, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x600, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, 0x0) 20:31:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, 0x0) 20:31:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, r3, 0x536ae464467e3e0b}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x8c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6a}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0x6, "1d8bdb"}, 0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x4, 0x6, "02000000006060e500007044000000ef00"}) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5418, 0x0) 20:31:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x700, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd00, 0x0, "000000000000000000090010000000001000"}) [ 739.977957][ T4145] FAULT_INJECTION: forcing a failure. [ 739.977957][ T4145] name failslab, interval 1, probability 0, space 0, times 0 [ 739.997635][ T4145] CPU: 1 PID: 4145 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 740.006218][ T4145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.016249][ T4145] Call Trace: [ 740.019522][ T4145] dump_stack+0x10f/0x19d [ 740.023851][ T4145] should_fail+0x23c/0x250 [ 740.028256][ T4145] __should_failslab+0x81/0x90 [ 740.033006][ T4145] ? kzalloc+0x1d/0x30 [ 740.037159][ T4145] should_failslab+0x5/0x20 [ 740.041645][ T4145] __kmalloc+0x43/0x2d0 [ 740.045783][ T4145] kzalloc+0x1d/0x30 [ 740.049714][ T4145] kobject_get_path+0x7c/0x110 [ 740.054478][ T4145] kobject_uevent_env+0x1be/0xc40 [ 740.059519][ T4145] ? kernfs_find_ns+0x30d/0x320 [ 740.064421][ T4145] ? preempt_count_add+0x4e/0x90 [ 740.069359][ T4145] ? _raw_spin_unlock_irq+0x4b/0x70 [ 740.074539][ T4145] ? device_pm_check_callbacks+0x626/0x640 [ 740.080332][ T4145] kobject_uevent+0x18/0x20 [ 740.084822][ T4145] device_del+0xa13/0xa80 [ 740.089141][ T4145] ? pm_runtime_set_memalloc_noio+0x19a/0x1b0 [ 740.095267][ T4145] netdev_unregister_kobject+0xe6/0xf0 [ 740.100727][ T4145] rollback_registered_many+0xab4/0xce0 [ 740.106343][ T4145] unregister_netdevice_queue+0x1cd/0x2f0 [ 740.112042][ T4145] __tun_detach+0xb33/0x1020 [ 740.116616][ T4145] ? tun_chr_open+0x290/0x290 [ 740.121314][ T4145] tun_chr_close+0x5d/0xa0 [ 740.125772][ T4145] __fput+0x1df/0x460 [ 740.129739][ T4145] ____fput+0x11/0x20 [ 740.133700][ T4145] task_work_run+0x8e/0x110 [ 740.138182][ T4145] get_signal+0x3f6/0x1650 [ 740.142591][ T4145] do_signal+0x25/0x270 [ 740.146796][ T4145] ? __rcu_read_unlock+0x4b/0x260 [ 740.151822][ T4145] ? __se_sys_io_submit+0x1b9/0x250 [ 740.157110][ T4145] __prepare_exit_to_usermode+0x127/0x230 [ 740.162820][ T4145] __syscall_return_slowpath+0x47/0x60 [ 740.168268][ T4145] do_syscall_64+0x5d/0xb0 [ 740.172672][ T4145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 740.178543][ T4145] RIP: 0033:0x45c1f9 [ 740.182416][ T4145] Code: Bad RIP value. [ 740.186459][ T4145] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 740.194847][ T4145] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 740.202798][ T4145] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 740.210753][ T4145] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 740.218793][ T4145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 20:31:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x900, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 740.226751][ T4145] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:07 executing program 3 (fault-call:8 fault-nth:22): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x7, 0x0, 0x9, 0x8001, 0x18, "c8a5bbef0f503510ca4288c35294326ee46034"}) 20:31:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x3, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xa00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189436, 0x0) 20:31:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe00, 0x0, "000000000000000000090010000000001000"}) 20:31:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xb00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc020660b, 0x0) 20:31:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "808046b298085a350900"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xedf, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xc00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) [ 740.581664][ T4213] FAULT_INJECTION: forcing a failure. [ 740.581664][ T4213] name failslab, interval 1, probability 0, space 0, times 0 [ 740.631181][ T4213] CPU: 0 PID: 4213 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 740.639768][ T4213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.649801][ T4213] Call Trace: [ 740.653130][ T4213] dump_stack+0x10f/0x19d [ 740.657443][ T4213] should_fail+0x23c/0x250 [ 740.661919][ T4213] __should_failslab+0x81/0x90 [ 740.666669][ T4213] should_failslab+0x5/0x20 [ 740.671154][ T4213] kmem_cache_alloc_node+0x38/0x260 [ 740.676340][ T4213] ? __alloc_skb+0x97/0x2e0 [ 740.680833][ T4213] __alloc_skb+0x97/0x2e0 [ 740.685146][ T4213] alloc_uevent_skb+0x5b/0x120 [ 740.689881][ T4213] kobject_uevent_env+0x726/0xc40 [ 740.694894][ T4213] ? preempt_count_add+0x4e/0x90 [ 740.699902][ T4213] ? _raw_spin_unlock_irq+0x4b/0x70 [ 740.705102][ T4213] ? device_pm_check_callbacks+0x626/0x640 [ 740.710960][ T4213] kobject_uevent+0x18/0x20 [ 740.715438][ T4213] device_del+0xa13/0xa80 [ 740.719738][ T4213] ? pm_runtime_set_memalloc_noio+0x19a/0x1b0 [ 740.725776][ T4213] netdev_unregister_kobject+0xe6/0xf0 [ 740.731234][ T4213] rollback_registered_many+0xab4/0xce0 [ 740.736749][ T4213] unregister_netdevice_queue+0x1cd/0x2f0 [ 740.742437][ T4213] __tun_detach+0xb33/0x1020 [ 740.747114][ T4213] ? tun_chr_open+0x290/0x290 [ 740.751760][ T4213] tun_chr_close+0x5d/0xa0 [ 740.756203][ T4213] __fput+0x1df/0x460 [ 740.760159][ T4213] ____fput+0x11/0x20 [ 740.764144][ T4213] task_work_run+0x8e/0x110 [ 740.768616][ T4213] get_signal+0x3f6/0x1650 [ 740.773018][ T4213] do_signal+0x25/0x270 [ 740.777148][ T4213] ? __rcu_read_unlock+0x4b/0x260 [ 740.782157][ T4213] ? __se_sys_io_submit+0x1b9/0x250 [ 740.787326][ T4213] __prepare_exit_to_usermode+0x127/0x230 [ 740.793021][ T4213] __syscall_return_slowpath+0x47/0x60 [ 740.798457][ T4213] do_syscall_64+0x5d/0xb0 [ 740.802867][ T4213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 740.808770][ T4213] RIP: 0033:0x45c1f9 [ 740.812640][ T4213] Code: Bad RIP value. [ 740.816675][ T4213] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 740.825053][ T4213] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 740.833074][ T4213] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 740.841022][ T4213] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 740.848966][ T4213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 740.856914][ T4213] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:08 executing program 3 (fault-call:8 fault-nth:23): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xffe, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5418, 0x0) 20:31:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xd00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x20802, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5418, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) 20:31:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xe00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1100, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x6, 0x0, "000000000000000000090010000000001000"}) 20:31:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000000c0), 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) [ 741.178017][ T4268] FAULT_INJECTION: forcing a failure. [ 741.178017][ T4268] name failslab, interval 1, probability 0, space 0, times 0 20:31:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1200, 0x0, "000000000000000000090010000000001000"}) [ 741.223515][ T4268] CPU: 1 PID: 4268 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 741.232097][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.242131][ T4268] Call Trace: [ 741.245404][ T4268] dump_stack+0x10f/0x19d [ 741.249728][ T4268] should_fail+0x23c/0x250 [ 741.254252][ T4268] __should_failslab+0x81/0x90 [ 741.259005][ T4268] should_failslab+0x5/0x20 [ 741.263493][ T4268] kmem_cache_alloc_node_trace+0x3b/0x260 [ 741.269197][ T4268] ? __kmalloc_node_track_caller+0x30/0x40 [ 741.274984][ T4268] ? kmem_cache_alloc_node+0x12b/0x260 [ 741.280504][ T4268] ? alloc_uevent_skb+0x5b/0x120 [ 741.285432][ T4268] __kmalloc_node_track_caller+0x30/0x40 [ 741.291059][ T4268] __alloc_skb+0xd3/0x2e0 [ 741.295397][ T4268] alloc_uevent_skb+0x5b/0x120 [ 741.300190][ T4268] kobject_uevent_env+0x726/0xc40 [ 741.305319][ T4268] ? preempt_count_add+0x4e/0x90 [ 741.310242][ T4268] ? _raw_spin_unlock_irq+0x4b/0x70 [ 741.315437][ T4268] ? device_pm_check_callbacks+0x626/0x640 [ 741.321221][ T4268] kobject_uevent+0x18/0x20 [ 741.325697][ T4268] device_del+0xa13/0xa80 [ 741.330117][ T4268] ? pm_runtime_set_memalloc_noio+0x19a/0x1b0 [ 741.336164][ T4268] netdev_unregister_kobject+0xe6/0xf0 [ 741.341602][ T4268] rollback_registered_many+0xab4/0xce0 [ 741.347156][ T4268] unregister_netdevice_queue+0x1cd/0x2f0 [ 741.352848][ T4268] __tun_detach+0xb33/0x1020 [ 741.357452][ T4268] ? tun_chr_open+0x290/0x290 [ 741.362095][ T4268] tun_chr_close+0x5d/0xa0 [ 741.366482][ T4268] __fput+0x1df/0x460 [ 741.370435][ T4268] ____fput+0x11/0x20 [ 741.374386][ T4268] task_work_run+0x8e/0x110 [ 741.378856][ T4268] get_signal+0x3f6/0x1650 [ 741.383273][ T4268] do_signal+0x25/0x270 [ 741.387398][ T4268] ? __rcu_read_unlock+0x4b/0x260 [ 741.392392][ T4268] ? __se_sys_io_submit+0x1b9/0x250 [ 741.397559][ T4268] __prepare_exit_to_usermode+0x127/0x230 [ 741.403246][ T4268] __syscall_return_slowpath+0x47/0x60 [ 741.408673][ T4268] do_syscall_64+0x5d/0xb0 [ 741.413060][ T4268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 741.418918][ T4268] RIP: 0033:0x45c1f9 [ 741.422789][ T4268] Code: Bad RIP value. [ 741.426825][ T4268] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 741.435211][ T4268] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 741.443151][ T4268] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 741.451109][ T4268] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 741.459051][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 741.467033][ T4268] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:09 executing program 3 (fault-call:8 fault-nth:24): timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2000, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x7, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x21, 0x37, 0x2, {0x0, 0x9a, 0x7, r2, 0x3, '*\\{'}}, 0x21) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5418, 0x0) 20:31:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xd0, 0x0, 0x0, 0x2, 0x0, "add27ed67b00010000000800"}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', '!!)@%.&\x00'}, &(0x7f0000000140)='/dev/ptmx\x00', 0xa, 0x1) 20:31:09 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x6, 0x8001, 0x9, 0x1, 0xa8, 0x51a}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2500, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x78, 0x7, 0x0, 0x1, 0x1}, 0x8) 20:31:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x1200, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8, 0x0, "000000000000000000090010000000001000"}) 20:31:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4000, 0x0, "000000000000000000090010000000001000"}) [ 742.482934][ T4325] FAULT_INJECTION: forcing a failure. [ 742.482934][ T4325] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 742.496122][ T4325] CPU: 1 PID: 4325 Comm: syz-executor.3 Not tainted 5.8.0-rc6-syzkaller #0 [ 742.504668][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.514821][ T4325] Call Trace: [ 742.518079][ T4325] dump_stack+0x10f/0x19d [ 742.522376][ T4325] should_fail+0x23c/0x250 [ 742.526761][ T4325] __alloc_pages_nodemask+0xec/0x390 [ 742.532054][ T4325] alloc_pages_current+0x21d/0x310 [ 742.537148][ T4325] __get_free_pages+0x8/0x30 [ 742.541730][ T4325] kfree_call_rcu+0x109/0x2c0 [ 742.546376][ T4325] dev_addr_flush+0xbd/0x140 [ 742.550934][ T4325] free_netdev+0xd4/0x210 [ 742.555232][ T4325] netdev_run_todo+0x72d/0x830 [ 742.559965][ T4325] ? tun_chr_open+0x290/0x290 [ 742.564609][ T4325] rtnl_unlock+0xa/0x10 [ 742.568796][ T4325] tun_chr_close+0x8f/0xa0 [ 742.573186][ T4325] __fput+0x1df/0x460 [ 742.577139][ T4325] ____fput+0x11/0x20 [ 742.581128][ T4325] task_work_run+0x8e/0x110 [ 742.585601][ T4325] get_signal+0x3f6/0x1650 [ 742.589991][ T4325] do_signal+0x25/0x270 [ 742.594117][ T4325] ? __rcu_read_unlock+0x4b/0x260 [ 742.599112][ T4325] ? __se_sys_io_submit+0x1b9/0x250 [ 742.604326][ T4325] __prepare_exit_to_usermode+0x127/0x230 [ 742.610035][ T4325] __syscall_return_slowpath+0x47/0x60 [ 742.615478][ T4325] do_syscall_64+0x5d/0xb0 [ 742.619879][ T4325] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 742.625738][ T4325] RIP: 0033:0x45c1f9 [ 742.629600][ T4325] Code: Bad RIP value. [ 742.633639][ T4325] RSP: 002b:00007f62d7870c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 742.642016][ T4325] RAX: 0000000000000001 RBX: 00000000000081c0 RCX: 000000000045c1f9 [ 742.649959][ T4325] RDX: 0000000020000580 RSI: 0000000000000001 RDI: 00007f62d7850000 [ 742.657900][ T4325] RBP: 00007f62d7870ca0 R08: 0000000000000000 R09: 0000000000000000 [ 742.665841][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 742.673826][ T4325] R13: 00007ffd9122fa2f R14: 00007f62d78719c0 R15: 000000000078bf0c 20:31:10 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x6, 0x7fff, 0x0, 0x16, "6b7c00c44b5cdf63d95245ba84d4fd637232a5"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:10 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5409, 0x0) 20:31:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x9, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x2500, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c00, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x200280) ioctl$TCSETSF(r1, 0x5409, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 20:31:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x5c00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, 0x0) 20:31:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xdf0e, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x545400, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:10 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xff00, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfe0f, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xffffffff, 0x0, 0xb, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) 20:31:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/210, 0xd2}, {&(0x7f00000017c0)=""/147, 0x93}], 0x4, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x40, "80000002c76060e500"}) r4 = syz_open_pts(r3, 0x189601) ioctl$TCSETSF(r4, 0x5409, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x11d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc}, @NL80211_BAND_5GHZ={0x8, 0x1, "eb0aeeb7"}]}]}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0102000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="91abe992c5851bfaa54039dadfbf8a97ec86ec150184e0e81d9ab2f1c54919c5b9ad262abd2ca58f619f647d4c32c3d43187e9c3c80b32f758992e24c7ecbf54fce0df3bea047950ef0d6c"], 0xd8}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xf30e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x40) 20:31:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xff00, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x20000, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd, 0x0, "000000000000000000090010000000001000"}) 20:31:10 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x3, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x2000, &(0x7f0000000000)=[r1, r2]}, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x7) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0xfffffffd, 0x0, 0x0, 0x0, 0x8, "80000002c76060e500"}) r5 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r5, 0x5409, 0x0) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x200000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x114, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x3b, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x0, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x114}, 0x1, 0x0, 0x0, 0x8851}, 0x4040095) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) accept4(r5, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x80800) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x9, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x4000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x10, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x6) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:11 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x4, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x5000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x3000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x11, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x3, 0x1, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)=0x2, 0x2) pselect6(0x40, &(0x7f0000000140)={0x9e4, 0x4ef, 0xfffffffffffffeff, 0x6, 0x5, 0x9, 0xfffffffffffffff8, 0x1}, &(0x7f00000001c0)={0x0, 0x7f, 0x3, 0x0, 0xcfe6, 0xfffffffffffffffb, 0x9, 0x9}, &(0x7f0000000200)={0x5, 0x9, 0x4, 0x637c, 0x0, 0x401, 0x200, 0x9}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x240000000000]}, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) recvfrom$netrom(r5, &(0x7f0000000300)=""/226, 0xe2, 0x100, &(0x7f0000000480)={{0x3, @null, 0x7}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x604882, 0x0) r7 = syz_open_pts(r6, 0x3c9202) ioctl$TCSETSF(r7, 0x5418, 0x0) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) fcntl$setlease(r1, 0x400, 0x2) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x12, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5, 0x40) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x6dc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) fadvise64(r0, 0x5, 0x20, 0x3) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) r2 = socket(0x1, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETSF(r4, 0x5418, 0x0) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x7000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x6, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x480000, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000040)) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1c, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/223) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x6000000, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x25, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f00000000c0)={0x2, 0x6, &(0x7f0000000000)=[0x0, 0xffc0, 0x1f, 0x2, 0x9, 0x401], &(0x7f0000000040)=[0x99, 0x1f, 0x4, 0x1d, 0x40], &(0x7f0000000080)=[0x1, 0x81, 0x2, 0x2]}) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) 20:31:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x9000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x9, 0x64, 0x2, {0x2, @pix={0x6, 0x162, 0x44495658, 0x1, 0x3, 0x40, 0x4, 0x0, 0x0, 0x2, 0x2, 0x2}}, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x7000000, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x7, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xa000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) 20:31:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8000000, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x11d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc}, @NL80211_BAND_5GHZ={0x8, 0x1, "eb0aeeb7"}]}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004804}, 0x20000000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r8 = syz_open_pts(r7, 0x0) ioctl$TCSETSF(r8, 0x5418, 0x0) 20:31:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xb000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) 20:31:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = socket(0x21, 0x5, 0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc801}, 0x8001) 20:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8d, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x9000000, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:12 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, 0x0) 20:31:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xc000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x300, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa000000, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xa, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x990000, 0xdc800000, 0x401, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00901, 0x8001, [], @p_u8=&(0x7f0000000000)=0x6}}) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000000c0)={0xd7, &(0x7f00000001c0)=""/215}) 20:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x500, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x25) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001002dbd4d00fcdbdf25022000a8fd00fd0600360700"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:31:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xd000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb000000, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x555, 0x0, "000000000000000000090010000000001000"}) 20:31:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc000000, 0x0, "000000000000000000090010000000001000"}) [ 745.272648][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 745.792664][ T17] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 745.801826][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.810443][ T17] usb 1-1: Product: syz [ 745.814749][ T17] usb 1-1: Manufacturer: syz [ 745.819328][ T17] usb 1-1: SerialNumber: syz [ 745.862974][ T17] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.552603][ T17] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.974356][T32552] usb 1-1: USB disconnect, device number 4 [ 747.612514][ T17] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 747.619393][ T17] ath9k_htc: Failed to initialize the device [ 747.625667][T32552] usb 1-1: ath9k_htc: USB layer deinitialized [ 747.982517][T32552] usb 1-1: new high-speed USB device number 5 using dummy_hcd 20:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x4, 0x7fffffff, 0xfffffffc, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x0, 0xfffffff7, 0x8000, 0xfff, 0x40, "63085894b5d7d0229949f164106ddc74210fc1", 0xcd9, 0x9}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xe000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd000000, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, r2, 0x703, 0x0, 0x0, {0x15}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xd8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0xd8}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x32, 0x8002}) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r10, &(0x7f00000017c0), 0x1d2, 0x0) tee(r9, r10, 0x2, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r11 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r11, 0x5418, 0x0) 20:31:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x600, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x64, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe000000, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x10000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x700, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000000)=""/253) ioctl$TCSETSF(r1, 0x5409, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000001c0)={{0x8, 0x9}, {0x80, 0x3f}, 0x564, 0x4, 0x81}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)={0xffffffff, 0x4}) 20:31:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x40080) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x10000000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) dup2(r3, r5) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r6 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r6, 0x5418, 0x0) 20:31:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x900, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x11000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x10000000, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x274402, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x10000, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 20:31:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa00, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x118, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x11000000, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x12000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)={{0x108, 0x6, 0x81, 0x331, 0x377, 0x400, 0x2f7, 0x1}, "4282b9cb20d47d5180e9bdaac0075db255c4b0c5ce7b947220b82e67941b2083277b6d595ac8bd949f837abd77406d30b2b133ac561a0aed29cbe4", [[], [], [], [], [], [], [], [], [], []]}, 0xa5b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x19, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x400001, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000040)=""/122) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x12000000, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb00, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x4000000, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc00, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x25000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x25000000, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x8000000, 0x7fffffff, 0x41}) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:16 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x306, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2e002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:16 executing program 0: ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x68002, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x40000000, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd00, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x5c000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = getuid() setreuid(0xee00, r1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x3, 0x68a8ce0c}, {0x8, 0x8}], r1}, 0x18, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe00, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c000000, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x8001, 0x8, 0xfff, 0xf, 0xb, "def4b94fd3f9b689aa2f046fb09cf2892ea5b3"}) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xedf, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x30a, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xff000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x80ffffff, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0xff, "80400002c75f60e500000000c800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$sock_int(r2, 0x1, 0xe, &(0x7f00000000c0)=0x324, 0x4) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/154) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/rpc\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x4000000000002) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f00000017c0), 0x1d2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x88ece850b0386198, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1100, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = dup2(r1, r0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x6d, 0x0, 0x0, 0x0, 0x4, "80000002c76060e500"}) r3 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000061124000000000009500000000000000dbcb547d0c43b393c383af29ddb64ab56ecc3db16e2db5e25028b8a931c7c4dc07f01c9a2f9a2405141abeadb1210c2b9b10927b6a39"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TCSETSF(r3, 0x5409, 0x0) uselib(&(0x7f0000000000)='./file0\x00') 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xdf0e0000, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1200, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2e8802, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_pts(r2, 0xa100) ioctl$TCSETSF(r3, 0x5418, 0x0) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000001c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000080)={0x1, 0x6, 0x1a, "d14f2ea11b81f132c0d7edd9b26b61446383dc5fbea5d2c65149913aae341e05c47e6bb224497df70429ab5e529a0d25c6a35d3d489f199b06d573d7", 0x7, "a78ced9a33ea2e72e6d29fe2483325c9998f3c933417e432f6ed3b9d2d8b1f47fd06aca152462e32058e9d68179a062876aa1be32f1d808aa6b695f5", 0xd8}) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x9, 0x4) faccessat2(r1, &(0x7f0000000000)='./file0\x00', 0x20, 0x1000) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5418, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000200)={0x1, 0x1f, 0x3, 0x9, 0xfffffff7, 0x3197}) r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0x3d9082) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000480)={"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"}) 20:31:16 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x324, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x39e2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x68100) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfdfdffff, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1c00, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 20:31:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfe0f0000, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x20, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x6e0043, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480), 0x1000) clock_gettime(0x7, &(0x7f0000000140)) ioctl$TCSETSF(r1, 0x5409, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f00000001c0)=0x9, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/203, 0xcb) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2500, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x336, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xff000000, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4000, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='w', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x3, 0xffffffff, 0x7f, 0x7f, 0x3, 0x4}) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$reject(0x13, r3, 0x0, 0x6, r6) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x14, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfffffdfd, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x88203, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = getuid() setreuid(0xee00, r5) setreuid(r4, r5) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000000c0)={0x7fffffff, 0x34424752, 0x58eb, 0x9, 0x3, @stepwise={{0x401, 0x401}, {0x4, 0x9}, {0x5, 0x81}}}) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r3}) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5505, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x20000000400) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "f7161f4507c1e6"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1f7b64bec0707090b8768afd39"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "abc3ad4f0697a99b8424ac6b0c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xffffff80, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c00, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f0000000740), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f60000f70f000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0102000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0xd8}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r6, 0x4, 0x9d, 0x6, 0x100, 0x10, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x80, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl2\x00', r7, 0x2f, 0x80, 0x32, 0x236dd0ff, 0x40, @remote, @mcast1, 0x8000, 0x10, 0xda, 0x5}}) ioctl$FITHAW(r2, 0xc0045878) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r8 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r9, 0x9, 0x7f, 0x0, 0xff, 0x10000}, &(0x7f0000000300)=0x14) ioctl$TCSETSF(r8, 0x5418, 0x0) 20:31:17 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x339, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000000)="ded746410066") r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x4, 0x1, 0x0, 0x5, 0x16, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x212000) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8d00, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x321241, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3d) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) kcmp(0x0, r3, 0x4, r4, r0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/99) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x2, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xfffffffc, 0x0, 0x6, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ustat(0x1, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x900c1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x910, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x8f8, 0x80, "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"}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x910}, 0x1, 0x0, 0x0, 0x4}, 0x80) ptrace$getregset(0x4204, r2, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)=""/100, 0x64}) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xdf0e, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, "8000000000000000001b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x7, 0x4}) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:17 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x500, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xff00, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x3, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x80000000, 0xa, 0x4, 0x8, 0x80, {r1, r2/1000+10000}, {0x5, 0x0, 0x3, 0x6, 0x3f, 0xf9, "9cea6a41"}, 0xb5aa, 0x3, @planes=&(0x7f0000000040)={0x7f, 0xffffffff, @mem_offset=0xff, 0x1}, 0x4}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r4 = syz_open_pts(r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) ioctl$TCSETSF(r4, 0x5418, 0x0) 20:31:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x20000, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x18000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x8000, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000040)=""/19, 0x13}], 0x3) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) 20:31:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x4, "000000000000000000090010000000001000"}) 20:31:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xa, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @rand_addr=0x64010102}, {0x1, @multicast}, 0x30, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}, 'tunl0\x00'}) 20:31:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:18 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xfe00, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x5, "000000000000000000090010000000001000"}) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xb, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x501f00) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x6, "000000000000000000090010000000001000"}) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xc, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 4: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1402, 0x800, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4801) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9e, 0xbe, "8dd7695ce817eeec3bb0973e0096fbe90799820591d88b0f796b0023b761fb5f572044219dae671563e2cd4f0ba478b75171c9d6589d79c7996c1ff5e79d4b365d1cd8134536744f9ecb913381e3aefe56636eeb3ba84e53c0c92a43b46a0be3ec9996152777d574030888cef7a7ba43ae3347b981200a05dc06dc1a40334c6c537a8b9db7d53d27b48e107ddd8a3549afaa9a775f4e4717e101"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xb3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x8, 0xfff9, 0x6]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3fb}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5418, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000340), &(0x7f00000003c0)=0x8) preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$FICLONE(r4, 0x40049409, r2) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0x1015, 0x0, 0x5, "ddd2abbbb71681b3c4bf8865a3393507", "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"}, 0x1015, 0x1) r1 = syz_open_pts(r0, 0xaa4003) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x4, 0x650, 'h5X', 0x8, 0x2}) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x7, "000000000000000000090010000000001000"}) 20:31:18 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x20000081, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xd, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000540)="baba8eb9f60ba780edf7beddc2bda372eb790a455077e499e1149c779b6811df61ba9c2a49a507443aba29b1e2400955f92a24da4140369d29073692c2f1d1dda0eb19c4ba3b3706e4da251cc9b2faaf6488c93e5aafe93f55916df51b10c64f4a34afc8393b21d6890f308279af94cd6ec80f79bee054f4306380d39160e76eaa6fafcd15a995065844a7ada47c2258256a1d5eeca5f291bd9de5e0583194e6eda34638788881c5a6c53da3e8d6262c18c527ff7037132e5ef8581b9219cb49a6d01049c05bb456a476f9f77d38b440c67780cc22e6aa9ba7b9c1be857c00313e82ff81a5962adbeeeb2289ced2614bb9e46283b6e8d05cd7c8ddee14", 0xfd}], 0x1, 0xfffffffffffffffe) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000480)) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) sendmsg$xdp(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, 0x4, r6, 0x1e}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="841d0af50c1fa7d28ebcaf057e58604321b34c3627df72b25ef998e2f821306632dbd71d4554d20aac8913a31b8735a4f9070512ab17f42276b9c9e7d02a86825903940a0ee0358481b5744b2871b8616055", 0x52}, {&(0x7f0000000180)="fa5c32053d7d2bee6b70d4deb4869863681aa56ed0d32b1cfee764dbf23fddb670e9689d7c4882", 0x27}, {&(0x7f00000001c0)="a46281a054b1c8935bc3888d2d97a20709b438ded28681d398b3f152829760b097548bf78a784b3e71805578ab3d7b93c0b2d77ffec05123bc2cf814b328e6c02c39a54babd5bd3b768909ffa2ac2b2065b0ef9c5b32169809bbe92c298cabfd2534032a08c8", 0x66}, {&(0x7f0000000240)="b041420851a9d55459c8eec2917fd039933d838eb9b4509ca0563c03235772dc24568a720dac98dfa9478eb8d890528e69b17605b4f61a804441038b34836388f28bb5e51a338bcc3c21837937d7b0f6a1356d9beabc5067f11c1f1fde714123dd937f726041e020da17df98322a113c2c30c11126a0bdcdef1825367d3cb927c896ad5c7918bbef157719b27830a1319db10e4b97e929c66555619b20e8d787", 0xa0}], 0x4, 0x0, 0x0, 0x2000c805}, 0x4010) r7 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r7, 0x5409, 0x0) 20:31:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_pts(r1, 0x202900) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x8, "000000000000000000090010000000001000"}) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x3000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xfffffbb3, 0xffff, 0x7, 0x80000000, 0x10, "0386dd1420cba8cc4b8dcb8a8d5e437271e955"}) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xe, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x9, "000000000000000000090010000000001000"}) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x4000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x7ffff000, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xa, "000000000000000000090010000000001000"}) 20:31:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x101, 0x208000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000500)) ioctl$TCSETSF(r1, 0x5418, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x8a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100030200ff202505a1a44000010203010902780002012010010904000001020d000009240600015967392305240006000d240f0101000080ff030600ee06241a0500080c241b010400807f810800030c241bd4000900088023036c0905810340008281070972010000020d00000904010102020d0300000000000000008705090503024000000305"], &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x0, 0x7f, 0x4, 0x10, 0x40}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441f}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x745b}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "32db09f5cf852d87a41ab350b30d3392c1bf72c901a1c8d8c27a5924e089c8461fbc56beb52879cf3b6f9353b07097edc0482b243c73c94f3726f6b3316893a48dcfdbbc2f3e066d5f6e6e40713a6195e2bb17608121e6b2900b1d3afe2e2c459ce7c2669621cd46824a3b4179e1feb86e79c6d2d86d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x400a}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x11, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x17, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x12, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xb, "000000000000000000090010000000001000"}) 20:31:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x6000000, 0x0, "000000000000000000090010000000001000"}) 20:31:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x0, 0x3, "80000002c76060e500"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x800, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000b40)=""/262, 0xffffff70}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f00000003c0)=""/2}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000580)=""/209, 0xd1}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000a00)=""/78, 0x4e}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f0000000680)=""/81, 0x51}], 0x9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000340)=0xfffffffffffffe9b) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4}, 0x8) r5 = semget$private(0x0, 0x3, 0xfb2a7963017aeb8e) semctl$GETZCNT(r5, 0x3, 0xf, &(0x7f00000001c0)=""/116) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0x19, "928ad109bed626c1d50a4525f1819e5bbed4954afa2ba33db3"}, &(0x7f0000000300)=0x21) r6 = syz_open_pts(0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$binfmt_script(r8, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#\xc6\xe6\'\\){9'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/vcs\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}], 0xa, "1fe9ab0d2141ede6420baf9c6d6b7fc442e791feb08bc1f6678556d33db145692d483bd2114092f159a515a440d0e72734322e92fbea21a2910f99a5997c9ca9743fc0c22545a4d46349a0b2433245ae0cc9b561ca93665e222a7ae3f4ca983e7bb5fb16f593e6b76b2922"}, 0xb5) ioctl$TCSETSF(r6, 0x5409, 0x0) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xc, "000000000000000000090010000000001000"}) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x25, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x7ffffff9, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x7000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xd, "000000000000000000090010000000001000"}) 20:31:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r3, 0xc9c, 0x10, 0xffffffffffffac52, 0x3f}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={r4, 0x5, 0x20, 0x7ff, 0xa41}, &(0x7f0000000280)=0x18) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7923548377b2dd21) r5 = syz_open_pts(r0, 0x6ca102) ioctl$TCSETSF(r5, 0x5409, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') read$FUSE(r7, &(0x7f0000000480), 0x1000) preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x5c, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xfffffe00, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x300, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xe, "000000000000000000090010000000001000"}) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x9000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x500, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xa000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x11, "000000000000000000090010000000001000"}) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x600, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xb000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40544106}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x1aa101) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:19 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0218, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x12, "000000000000000000090010000000001000"}) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x700, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc000000, 0x0, "000000000000000000090010000000001000"}) 20:31:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x25, "000000000000000000090010000000001000"}) 20:31:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x900, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xd000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0498, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x5c, "000000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xa00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xe000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x6a84, 0xc6, 0x6, 0x4, 0x18, "80000001006060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "020000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xb00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x10000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0518, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "030000000000000000090010000000001000"}) 20:31:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xfffffffd, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xc00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x11000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xd00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "040000000000000000090010000000001000"}) 20:31:20 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0b18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x12000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xe00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "050000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1c000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x1100, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0c18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "060000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x25000000, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x1200, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xc, "80000002c76060e500"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x740, 0x0) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f0000000340)=0x5) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000480)={'veth0_to_batadv\x00', 0x5, 0x4}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x6, 0xff, 0xfff, 'syz0\x00', 0x100}, 0x4, 0x1, 0x2d, r2, 0x3, 0x4, 'syz1\x00', &(0x7f0000000040)=['(\x00', '/dev/ptmx\x00', '-\x00'], 0xe, [], [0x7, 0x85, 0x0, 0x2]}) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="24c1ddc80aaf058a68daf3ecaea9080fed12556a696fc78bf1", 0x19, 0x240008c4, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty, 0x20, 0x2000001}, 0x20) preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x10001, 0x7, 0x7fff, 0x4, 0x988, 0x71f, 0xb2f, 0x4, 0x4, 0x8, 0x9, 0xb87, 0x3, 0xdd, 0x80000001], 0x1, 0x240900}) 20:31:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "070000000000000000090010000000001000"}) 20:31:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x40000000, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x2500, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "77000002c76060e500a5a5008100"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "080000000000000000090010000000001000"}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x55050000, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880970c0e98, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x5c00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "090000000000000000090010000000001000"}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c000000, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xff00, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x890840, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0a0000000000000000090010000000001000"}) 20:31:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x300c01, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xfffffffc, 0x0, 0x0, 0x0, 0x13}) r1 = syz_open_pts(r0, 0x404602) ioctl$TCSETSF(r1, 0x5418, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000001c0)) sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) r6 = dup2(r4, 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000003800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000037c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800046e8248a9a55256f31fd33ff774512643fe74e0efd5743e19a3b2808cae02000000000000003ea82f1ce8ec3d370738422ba201796817c739110be65d00ace208929737260bbd0af1470502c826a14ad6f40c", @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES16, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x809}, 0x4004800) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027a19014ce7f9ebd7000fbdbdf250300000008000500ac1414aa08000400ac1e000108000400ffffffff14000200fc010600000000000000000000000001050001000000000014000300fc020000000000000000000000000000050001000000000028f6e8e3f54b1261400be9755feefb1f23c288df40579e490225e824a712b5ccd3312ebacec4a320f3c13ed20ded41b439ea85d76bf41d8bcecc6dab208d44fb1d27ccefc871c058db47eeac6111786c987cab"], 0x64}, 0x1, 0x0, 0x0, 0x4808}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="000125bd7000000000000000000008000400ac1414bb14000300fe8000000000000000000000000000aa14000200fc02000000000000000000000000000114000600626f6e645f736c6176655f300000000014000300fe80008cb1b3d4f67f2d94000000003314000300fc01000000000000000000000000000014000200fc0200000000000000000000000000012800070073797374656d5f753a6f626a6563745f723a706f7765725f6465766963655f743a7330001400030000000000000000000000ffffe0000001"], 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc3, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @dev={0xfe, 0x80, [], 0xa}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8040) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x80) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r7, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000001) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c08c4}, 0x8) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x1000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x80ffffff, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8880a2aa1598, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0b0000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x591c1fe0583b8fbe, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x40400) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x88000, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x8, 0x4, 0x400, 0x0, 0x1}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x4, &(0x7f0000003000)={0x3, 0x40, 0x77fffb, 0x0, 0x4, 0x0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) preadv(r4, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000480)=""/134, 0x86}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/154, 0x9a}], 0x6, 0xffffffffdffffffd) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000200)) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) 20:31:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x3, 0x3}, 0x8) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000044) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0c0000000000000000090010000000001000"}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x81ffffff, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x3000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) ioctl$TCSETSF(r1, 0x5409, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x440000, 0x21) 20:31:21 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x418000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}}, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5418, 0x0) r4 = getuid() setreuid(0xee00, r4) syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000680)=[{&(0x7f0000000240)="0796c96f82f7c7f1b9819db46cdafaf6c47b7330c7b25d1967e8b88b2e5f1cfec585074568738116290a3483fdc36c55c94dfe23a0be", 0x36, 0x20000000000000}, {&(0x7f0000000280)="f1a4b8a9e1c0e3123246769f711314a8209c7a1e934a7e4b03ef8beef6d9763ecdee1ccda044930ab5d96e21be67b4d6bb8080f5acec67eef2b3489cf1ba0a6df0a99b305cbeae4c76022a816c3ff0f957cab1f6f7920a501a815500cff51a37ec038c580f9bfe374d9ae1829763ba46fb625c01be046acf54ccd44fb17ad7cd3fb2e9647786abb74b291a24854691799be48663be318701e2b3d6df2c99a43699950852fbaae448dac1b2956770e5629fea60bcc9ebfbf9e23bd152181db468fd1643ace97d0fb02fa49cafb255d711240f5c46ab9da32d7bb477012efa6007b14dc968b6af20560255", 0xea, 0x6e1}, {&(0x7f0000000380)="28042bd0fc44dc5f94a0c4c4aa010f1417e899069f159ad39fd34b7f4750d0d839861abaf690cb7907294b13880f", 0x2e, 0x9}, {&(0x7f00000003c0)="f62e60022b10904289819f10bf60caf9e225adcd411cb8f700132715be01321e317cb3195f1142938fd9118184a52641ba30af8252b425d7f24e8d24a2939ca82c719d9ee9a4e962d7686b0515c732d461b0", 0x52, 0x6}, {&(0x7f0000000480)="a3fcc0850712f1049ad4e6ebf710a27db62ea8593977e385714a0ef874dda4c7c3a7f8ec9acbe9e8fe5d567faaa321fc7224254690da590e68c5f626604640711747726126495483dc39d6bed3824930fcf313a98404f470c6935be81c32ad17bad1fbfbe56161bcf153df130383708d28a397d08eb4d6d5c6c8c7a51df2ab6d2a8bb7285b5bde77b635db424ecd7d799c9b6a5674d1649faa7926d6dae148b6d2c7a02b409c58aafca6", 0xaa, 0x5}, {&(0x7f0000000540)="5c770c9dd522de258e7c01f1959788f1f52027e86bfe7de0e819230b6ab71aa1d29026f28b803e8bab53c04a02e64b39bad16496d76cb759a1c397fbd5c25111e1d7a2ed978c341a6876142871d77ea409af98207c0c43836ef83d636b8b5f9f50e82873f9c53aa18b8ff058e7b93dae13ec57a6b0790d07dd8afef2cba855bdbb3a033db44c3fe9ce5370b797a6ae5481c0247edd743b90ff29b06c5ca99c73d64cdd307b1628d38db4ad8c12343294737abf61d02d0e944cdaec61b716337b780382fdc714379b1dec83499c1878e0244e7b18687589", 0xd7, 0x400}, {&(0x7f0000000640)="f477b3223e96b0cacf5290ab4ce3c02685187a07a376014f5dcefde7fff0a5fc7d644459bc51cfab2ba0", 0x2a, 0xfa05}], 0x107084, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@part={'part', 0x3d, 0x9}}], [{@smackfsroot={'smackfsroot', 0x3d, '+\xe4&'}}, {@smackfsdef={'smackfsdef', 0x3d, '/proc/self/net/pfkey\x00'}}, {@euid_lt={'euid<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '+}'}}, {@pcr={'pcr', 0x3d, 0x26}}]}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x82ffffff, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x4000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e0d7218, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0d0000000000000000090010000000001000"}) 20:31:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x61e382) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8d000000, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xfffff77c, 0x3, 0x4, 0x1, 0x4}) ioctl$TCSETSF(r1, 0x5418, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = accept4$ax25(r2, &(0x7f0000000040)={{0x3, @bcast}, [@netrom, @remote, @default, @default, @default, @rose, @netrom, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r4, 0x7fffffff, 0x4, 0x8}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x5000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0e0000000000000000090010000000001000"}) 20:31:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x6000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "100000000000000000090010000000001000"}) 20:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xdf0e0000, 0x0, "000000000000000000090010000000001000"}) 20:31:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2a2240, 0x0) r3 = dup2(r0, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r1, r2, 0x15, 0x4, r3}, 0x14) 20:31:22 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e0d7718, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x7000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x501a80, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x4, 0x0, 0x0, 0xffffff66, 0x14, "81000002c77afce50000000000000000008000"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x202012) keyctl$chown(0x4, r4, r2, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202012) keyctl$chown(0x4, r9, r7, r8) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x1}, {}, {0x2, 0x2}, {}, {0x2, 0x6}, {0x2, 0x2, 0xee01}, {0x2, 0x1}, {0x2, 0x5}], {0x4, 0x5}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x2, r3}, {0x8, 0x3, r5}, {0x8, 0x7, r8}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x3, r10}], {}, {0x20, 0x3}}, 0xb4, 0x3) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000000)=0x800) r11 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r11, 0x5409, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "110000000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfdfdffff, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x8000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x501000, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000040)={0x0, "19d310152abfa3705b4849bc8a21d94df2e61123d7f8ed5782b2da7d73251eda30010703bb1248bb0891ebb5aae3091709d3bc3e460c7fb14d3bf9841e22fe14"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x202401, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x105000) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0x990000, 0x0, 0x4, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x203f9, 0x0, [], @string=&(0x7f0000000140)=0x7}}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/unix\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5418, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "120000000000000000090010000000001000"}) 20:31:22 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e0d7d18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x7ff, 0x600}) r2 = syz_open_pts(r0, 0x802) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x9000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xff000000, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x1) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "250000000000000000090010000000001000"}) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7ff, 0x6, 0xfffffffe, 0x4f9d9ab}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x111000) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000080)={{0x2, 0x8}, 0x3}, 0x10) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xa000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xfffffdfd, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "5c0000000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:22 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e8ad518, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xb000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xffffff80, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x80) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "ff07fbaba7908f3a", "09000000000040026ae891da682800", "70c208b0", "1d17cc0001000048"}, 0x28) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000300000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) syz_open_pts(r3, 0x26200) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5418, 0x0) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000500000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xffffff81, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0xa, "5ffff402876060e500000000f200000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xc000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000280)=""/74, 0x4a}], 0x4, 0x0) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @empty}}, 0x1e) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xffffff82, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e8ad818, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000600000000000000090010000000001000"}) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_pts(r1, 0x80000) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xd000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000700000000000000090010000000001000"}) 20:31:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xe000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/208) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000040)=""/23) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x0, "80000002c76060e500"}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r4 = syz_open_pts(r3, 0x10002) ioctl$TCSETSF(r4, 0x5418, 0x0) 20:31:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$CHAR_RAW_REPORTZONE(r3, 0xc0101282, &(0x7f0000000240)={0x5, 0x1, 0x0, [{0x100000000, 0x4, 0x1, 0xf9, 0x81, 0xfd, 0x4}]}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x20, 0x4, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1b0ab16c1890d40f}, 0x4804) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x7, 0x0, 0x3, 0x2, 0xa8, "01ed6ef87b1db3c2f35fd2c53f3ea130a7a278", 0x200, 0x1ff}) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r5 = syz_open_pts(r0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x505280, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x10) ioctl$TCSETSF(r5, 0x5409, 0x0) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x2, "000000000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x2, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:23 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e8adc18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000900000000000000090010000000001000"}) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x10000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="1d3cfd621ddb4317d009632b3554712574931a6dbc1d9677e0147c6adf66610e85ac80ba9dc7b21e35d4e02d0c208d58e96062bbf7", 0x35, 0x800, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x3, "000000000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x3, 0xfc, '\x00\t\x00'}) r1 = syz_open_pts(r0, 0x0) eventfd2(0x80, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000a00000000000000090010000000001000"}) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x11000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x240403) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x4, "000000000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) recvfrom$l2tp6(r1, &(0x7f0000000280)=""/206, 0xce, 0x40000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x20) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)='/dev/ptmx\x00') r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5418, 0x0) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1802) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x111000, 0x0) recvfrom$llc(r2, &(0x7f0000000080)=""/164, 0xa4, 0x1, &(0x7f0000000140)={0x1a, 0x235, 0x40, 0x4, 0x2, 0xec, @remote}, 0x10) ioctl$TIOCCBRK(r2, 0x5428) 20:31:23 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811eb31098, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000b00000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x3c}, @local, @mcast1, 0x0, 0x7f7, 0x5, 0x100, 0x6, 0x3200004, r4}) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x12000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x5, "000000000000000000090010000000001000"}) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000c00000000000000090010000000001000"}) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x15, 0x171, &(0x7f0000000480)="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"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x2, 0x1]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7, 0x81, 0x0, "b1e3ba1e00227cf286eecb53b55d45f266306c2c45c22947a29e80a9056a2cadb5b65f922baad36e24e8052659931452714b3fe65f6bdd12b543cf02cf4f41", 0x34}, 0x60) ioctl$TCSETSF(r2, 0x5418, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7fffffff, 0x50340) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x25000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000d00000000000000090010000000001000"}) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x6, "000000000000000000090010000000001000"}) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:23 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3198, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x5c000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000e00000000000000090010000000001000"}) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x7, "000000000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = getuid() setreuid(0xee00, r4) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x3cc, 0x2c, 0x100, 0x70bd2b, 0x25dfdbff, {0x15}, [@nested={0x92, 0x41, 0x0, 0x1, [@typed={0x14, 0x1d, 0x0, 0x0, @ipv6=@ipv4={[], [], @local}}, @generic="c3d7e97a6a09265ff3179963e56ae92b0db0700df14d40c494d532774f6f07139b956ee5e7c647a2196c0512ad8ca9f5", @typed={0x14, 0x27, 0x0, 0x0, @ipv6=@mcast2}, @generic="2b74df846f044e44e9a44c697949dc75bf66b17483bb204983ae216dd4ba76a26c514cea11b4d9fd3c3be204a0ac4e8fa3428ff7af91"]}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0x5}, @nested={0x31c, 0x48, 0x0, 0x1, [@generic="f41f0310358c5d40c8f1dacc7d71bcce0628ad06409b30bcd3e839099fcec99cd5dc293e6ebb70dc4903c1aca81aeb21e1b6825155c9d497dbec7f4c85714d0780be0f86a09968d538104c7f141d324294bc035d62d1999101874218da2eb4182f90501e3b438d02533d260ebad7e19df6351aa48c29aee6ea1c7497fcb45bc9b9c5a79acf6d66ad689140d28dc332f400809497b2e9a638c2179b82b65c9f3b392f197d847f0f4e0cc99c8d96627eaa92f8877bf4522145220ee573533bf33cb6d51d680ceb34af1b813edd6c37d9aba572509ebfd707557c2775e7", @typed={0x8, 0x1f, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x13, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @generic="564c96b066d2e0a7162d04a103d0e1cf4d2facd95059610b7df2e1082d43f75dc07d313c170ae87dfe534d30132918a8d641328a8c29e8c5ce353225016982825349affc9c6cc3eaf356a699b4965be002dcd8c48b793bc00d4deadcb2", @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @generic="72094b0b05b26be9ef57a6e987c8134965bfc8909838d07e5cbbb1a2906979baf9a11fb6331bc0d5501b7adec85d7357316822f262cc6b52339a671b115c8b5e0018ce034e5152a9be5780180d8e26a5339c01fef72f7c55bcc52d1f22d81a5021d109d980994c0784e96d389ca76605edfc87a46954fa8f61c2f152e9c85bbcacc03cc199a1e287cc1b1b51df2f1aeadc206b", @generic="9449ab689b97db6cd87c65b16fb564807e83d5b299a4b0897aef0f4116a87d5c6fa2c928478692df9faea0c9d027ba87a0f808689f89507f39972e0f0d33a2362357adb376c855b667a1391bf21b1527818c0eb263bdede4c77d1b4b341b8a593e35ce6fc3f6a9397d52b25d5dffe840867c4e8c3290e03b64bfb03ffdee65a261161c65266bbb8b3f4dd9c5d0ad21a14fa4643cc6a7a0ae5c034e6958963457", @generic="d2f665991a31df67c39948757e1f4e6061ab8a1ae01721170c043e8cc6e16100b353c17db9839b967bda5b1698bba0b59356c36137c1e9b365520c7f45995100ae42a06ddc9afe54916795ea204002b53510c444f55c69a926c7e881215f90600035a32036e7529484798ee45b2bc927bcb4e1702f37e8aee71bd1759f59ee73"]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x10084000}, 0x2000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5418, 0x0) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x3, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "df0e00000000000000090010000000001000"}) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x44}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x69}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffc01}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xe9}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8dcd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400c4}, 0x10) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x8, "000000000000000000090010000000001000"}) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "fe0f00000000000000090010000000001000"}) 20:31:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xff000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:23 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3218, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) syz_open_pts(r1, 0x10000) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0xa82, @dev={0xfe, 0x80, [], 0x43}, 0x472358d2}, @in6={0xa, 0x4e21, 0x1f, @mcast1, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}], 0x58) ioctl$TCSETSF(r1, 0x5418, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000040)=""/195) 20:31:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001100000000000000090010000000001000"}) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x9, "000000000000000000090010000000001000"}) 20:31:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x1008, 0x40, "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"}, &(0x7f0000000040), 0x400) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001200000000000000090010000000001000"}) 20:31:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc3, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00') preadv(r2, &(0x7f0000001a40)=[{&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000001840)=""/160, 0xa0}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f0000001900)=""/40, 0x28}, {&(0x7f0000001940)=""/156, 0x9c}, {&(0x7f0000001a00)=""/49, 0x31}], 0x7, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000001600)=""/131, 0x83}], 0x5, 0x1) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x59, 0x2, 0x12, 0xffff, 0x2}) r5 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="05", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000002c0)="eab34acef1c41cede8549f2edf280190207d26604a70e29d0ac31d999c8a68c2b8af1b5dd3100b49f8a831a155b857a40a08ba5be9b11079241ad124a1b997578b6956804afdcd7b11eaecf4", 0x4c, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d2, 0x0) io_cancel(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000600)="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", 0x1000, 0x5, 0x0, 0x1}, &(0x7f0000000540)) keyctl$revoke(0x3, r6) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "002000000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xa, "000000000000000000090010000000001000"}) 20:31:24 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3598, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x23) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x80000001, 0x400, 0x9, 0x0, 0x12, "8000b512c76060e500"}) r4 = syz_open_pts(r0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x496280, 0x0) accept4$ax25(r5, &(0x7f0000000040)={{0x3, @bcast}, [@remote, @null, @default, @rose, @netrom, @rose, @bcast, @default]}, &(0x7f00000000c0)=0x48, 0x80800) ioctl$TCSETSF(r4, 0x5409, 0x0) 20:31:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "002500000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xb, "000000000000000000090010000000001000"}) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000140)=""/14, 0xe}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000580)=""/206, 0xce}], 0x6, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/153, 0x99}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f) 20:31:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4000c0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/nf_conntrack_expect\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$TCSETSF(r1, 0x5409, 0x0) ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000480)=""/4096) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "004000000000000000090010000000001000"}) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xc, "000000000000000000090010000000001000"}) 20:31:24 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3b18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xfffffffd, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000000)={0xd, 0x1}) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xd8}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x2, 0x6, 0x3, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x1b, 0x33, [@broadcast, @rand_addr=0x64010101, @multicast1, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d800000010000104000000000000000000007a00", @ANYRES32=0x0, @ANYBLOB="0102000000000000a800128009000100766c616e00000000980002800600010000000000640003800c00010000001d00000000000c000100cf000000050000000c00010000000000040000000c00010000010000030000000c00010000000000560000000c000100fcffffff050000000c00010020000000030000000c0001000000000005000000280004800c00010001800000050000000c00010004000000070000000c000100070000000900000008000500", @ANYRES32=r4, @ANYBLOB="08000a00692d27a6c454ff6e9289449b0e97ad85a1076746e6ab7d834c0eb6657f6014e3dbece72858f4207c981c6e4f9b642af6cda179919fc4acf52986095314461eeed5b693730ecd09f08061a4a2c06b3af816fe035025718a46e81836b0ec844d1a135f390bb8d0c9c4c2151c625bb2463b9a88faae074011aa9e728ad466a931c51ec628f0e11250a9295e7277e7c085328257458177a3f6305ac60f698d2eb86140b7a2801ed224d2d0d6ef363bb8fa489cb8adeb0051da729e171585b4429e71fd970ee42970e9438f59c920204603e8e4852ebc5f75da497df851af3850dc6c3c83c4927b0b7a", @ANYRES32=r4, @ANYBLOB], 0xd8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xd8}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r8, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)={'team0\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x5fc, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x2}, {0x8, 0x4, 0x90bd}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff00}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x2, 0x6, 0x4, 0x3}, {0x6, 0x2, 0x8, 0x9}, {0x6, 0x4, 0x40, 0xffff625e}, {0x58e3, 0x74, 0x7, 0x3}, {0x0, 0x46, 0x2, 0x3b}, {0x7fff, 0x63, 0x6b, 0x5}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7c}}}]}}, {{0x8}, {0x224}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x60004020}, 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r9 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r9, 0x5418, 0x0) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "005c00000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xd, "000000000000000000090010000000001000"}) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x20200) ioctl$TCSETSF(r0, 0x5418, 0x0) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0edf00000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0xe, "000000000000000000090010000000001000"}) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0ffe00000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x3, 0x0, [0x7, 0xfff, 0x6, 0x0, 0x5, 0xb3d7, 0x8, 0x1, 0x3, 0x1e, 0x4, 0xf315, 0x6, 0x71, 0x1f3]}, {0x2, 0x0, [0x5, 0x0, 0x7, 0xffffffff, 0x2, 0x30, 0xf5, 0x20, 0x80000001, 0x8, 0x7, 0x6, 0x7, 0x40, 0x6, 0x5]}, {0x8, 0x0, [0x8229, 0x9, 0xffffffdc, 0x0, 0x0, 0x7, 0x5, 0x7fffffff, 0x800, 0x80, 0xa01, 0x0, 0x2, 0x6, 0x100, 0x9]}, {0x10, 0x0, [0x800, 0x2, 0xb1f3, 0x5ec5, 0x5f, 0x9, 0xfffffffd, 0x8, 0x7fff, 0xffffffff, 0x1, 0x45, 0x0, 0x800, 0x4d802685, 0x762a9071]}, {0x13, 0x0, [0xfc, 0xbfcf, 0xff, 0x5, 0x3, 0xffffff20, 0x5, 0x5, 0x46, 0x5, 0xffffffff, 0x10000, 0xa01, 0x7, 0x8]}, {0x0, 0x0, [0x3, 0x2, 0x5, 0x29d, 0x2, 0x1, 0x1, 0xfffffffd, 0x3, 0x5, 0x4b9, 0x8000, 0xfffffffd, 0x91, 0x10700, 0x48]}, {0x4, 0x0, [0x101, 0x2, 0x9, 0xffffffff, 0x3, 0x6, 0x1, 0x3, 0xcaf3, 0x6, 0xac2b, 0x3f, 0x3, 0x9, 0x0, 0x100000]}, {0x38, 0x0, [0x400, 0xbc6b, 0xfffffff7, 0x8, 0x1000, 0x71, 0x4, 0x8001, 0xed58, 0x2, 0xff, 0x69, 0x3, 0x9, 0x7, 0x68]}], r1, 0x1, 0x1, 0x240}}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4a002, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x200, 0x0, 0xfffffffd, 0x0, 0x0, "80000002c76060e500"}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x2b, 0x0, "17f649b74a3ecc48f5feeefac537625396b285b20b731e2f079c0e9c7290393d707ac7499b26bbe33f3e34dd7477518bc54b7354d36d63c82f3119892d9bf32f9a1ac2ecfb13681fd9815fd03856eb93"}, 0xd8) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r4, 0x5409, 0x0) 20:31:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:24 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3d18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00ff00000000000000090010000000001000"}) 20:31:24 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x11, "000000000000000000090010000000001000"}) 20:31:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x0, "80000002c76060e500"}) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000002000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x7f, 0x80000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e22, 0xac6, @private1={0xfc, 0x1, [], 0x1}, 0xe9a1}}, 0x0, 0x0, 0x4, 0x0, "0e05bddf930752fd0ac7be0cc9ec505eae7f433ce8cca26df60844c5e8943cb7cff424843194eba056dafce04ca432a79f4faf11f383c6d8b2c36fd6d31eca34f07ffe382a15f3b29f6065cd216ffec5"}, 0xd8) ioctl$TCSETSF(r1, 0x5409, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000140)) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x12, "000000000000000000090010000000001000"}) 20:31:25 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88812274c298, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000020000000000000090010000000001000"}) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x1c, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0xfffffffe, 0x0, 0x0, "80000002c7ded65028d830617c00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xa, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000010000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x25, "000000000000000000090010000000001000"}) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x13, "8000000ac76060e5000400"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000020000000000090010000000001000"}) 20:31:25 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88812274c598, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x5c, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1000, 0x400, 0x81}) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000480)={{0x1, 0x0, 0x80, {0x2000, 0x2000}}, "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", "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"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000030000000000090010000000001000"}) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xc, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) getpriority(0x0, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "8e97693300"}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x30c, &(0x7f0000000740)={[{0x45, 0x4e00, "e3e3ae7dcf7a2c022f2f03079891e89dadd76cb59c565e85b955c84014862dac7ee0791ea509cca1b5e8b43fea3aa9c358fc6b4ca1f4559258fdc6bc8343e7c09e6d4e2624"}, {0x51, 0x4e00, "c178bcc6d5073757fe891f53755b792d6836b693d93ce72020b75d8e6d259d54cc1795bfff4f7745ab3673c4d39352d193f0f44d53b59e285c1f706a3be1bb34111a99ac0c09b6c9f3671224c4948f2ce4"}, {0x86, 0x4e00, "8dd5b706d0f3664475951e3cc4742449a1ba9c11536ce91eee6bd9e17dc9dafe9bfb8dec8902a92f2696a58812029b6289af909f385330bd90ec31bae5d874594cb5be3c5242e1ef6ef781403faa0ed7735e5f2b752943c45988c0473a7cc4613593d68f074139ef1766da9ae02b13998ad6209c74ea266985186eb65ead30c554908196a792"}, {0x72, 0x4e00, "9d5d3317f8ed272ab9ad75a079986dbd1b097b15d3a45addd22310dbc9c4d1f1f0e95d48a18da37be5b7210196131451870ee7a6fe1a0b9f0c98a2600fecd82eb3e7c4035200165dbbebed4a41de2d340e77e1d4cb8b1a1d3ffe1be6c11dc6b289d07f6d7c7eba11de6b189c2a36331466f7"}, {}, {0x33, 0x4e00, "66ac03c9a8374e79f03fd9d252e98a077badd5984ffcfe9ff65965609b0900f4b864680903ff7671d012574c8044a60f780e51"}, {0xe5, 0x4e00, "98c058bf1292e1141a31fe727e27d2496b85675c762c172cba5d72ac06707b8af7e3d5b645fbdc5aac688f36304e8205425bc5cf9a350310059124641fb9ef9e81ed56bd4a0c90981c51644b340dd8a2ecf2edf05694aa23dad2750b07a451ccd4eafe3128df55e38e66f079491cc68e01c2a68eee247881e9d3a95f6887e4660e6b2c4bad1102d2ff2a6185f903cb5b8f467af7c3ce568814a82d4a0fa6a5298bfdbcc444e34f3d23890b55de9ed0711af7bfbea652b480ae768074ce5d2a39c4aa191932ff2ac5d4ffd57b80cd61aeff5cc8a3813b8b88e81104f02c810a00ff35d89844"}, {0x35, 0x4e00, "4b8051c0be0f86117f6f1cb5fc84c68bfdf0d6178a7764b78048abace494e6eb9f52d79604c56107570df5dfc82a4d739d482c4b98"}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x29c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_IE={0x24d, 0x2a, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0xffffffffffffffff}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x13, 0x3}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000140)=""/3) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000040000000000090010000000001000"}) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x8d, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x84001, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x7f, 0x4) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000050000000000090010000000001000"}) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88812274c618, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:25 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="65de49ce4762"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfc99}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4c}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "020000000000000000090010000000001000"}) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000060000000000090010000000001000"}) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xe, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x500e, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5409, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000070000000000090010000000001000"}) 20:31:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "030000000000000000090010000000001000"}) 20:31:25 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88812274cc98, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000080000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x11, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) getgid() r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x6, 0x80000000, 0x10, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = syz_open_pts(r1, 0x241) r3 = syz_open_pts(r2, 0x40ca80) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x50001, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "040000000000000000090010000000001000"}) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000090000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x12, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x280480, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "050000000000000000090010000000001000"}) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000a0000000000090010000000001000"}) 20:31:26 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88812274cf18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x25, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/172, 0xac}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, 0x80, "80000002c76060e500"}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000480)=""/188, 0xbc}], 0x3, 0x401) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000400), &(0x7f0000000540)=0x4) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000280)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x5409, 0x0) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "060000000000000000090010000000001000"}) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000b0000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x5c, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000c0000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x300, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "070000000000000000090010000000001000"}) 20:31:26 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xfffffffffffffe00, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000d0000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "080000000000000000090010000000001000"}) 20:31:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x5}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x40000000, @private2={0xfc, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x4e21, 0xfff, @dev={0xfe, 0x80, [], 0x27}, 0x9}], 0x64) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1a) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000e0000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x600, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x599401, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000100000000000090010000000001000"}) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "090000000000000000090010000000001000"}) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x700, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0a0000000000000000090010000000001000"}) 20:31:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000110000000000090010000000001000"}) 20:31:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x900, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000120000000000090010000000001000"}) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0b0000000000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xa00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x80) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000250000000000090010000000001000"}) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0c0000000000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xb00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0xaf7, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8) syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5409, 0x0) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000400000000000090010000000001000"}) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0d0000000000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xc00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x111480, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xd00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000005c0000000000090010000000001000"}) 20:31:27 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0e0000000000000000090010000000001000"}) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "ffffff800000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xe00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000edf0000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x1100, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "100000000000000000090010000000001000"}) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x40) ioctl$TCSETSF(r1, 0x5409, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000480)=[{}, {}, {@fixed}, {}, {@fixed}, {}, {}]}) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "fffffdfd0000000000090010000000001000"}) 20:31:27 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "110000000000000000090010000000001000"}) 20:31:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x1200, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xc, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000ffe0000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x2500, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "120000000000000000090010000000001000"}) 20:31:28 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff8881224d3b18, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000ff0000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x5c00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "1c0000000000000000090010000000001000"}) 20:31:28 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "fdfdffff0000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xff00, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) name_to_handle_at(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x1008, 0x40, "beb0cd2e87ee42e78dead6dadbd6acc9944a42d72735b5328fb8576218872ffc7000f95068b7b7499c83a61aa3bd78c212c8e5a388aaa2cbfec4dc3082011388860a50c97c7b3060f8893060abe391433274983d8db6284c64cdb9ec0563f4f9955e88a48337ee62fe6a3c4b8c846f1a5613d82b87d65dee22f953e32e84ad264c756ed5447ff5c03336e85f7d06277b82f6b5246b953b619e2bf7a226898233541e23e5efecd82498afe97e855c86c430ec62498b9cc649de423a0e51b1d6816a7899b1b6aa56055b762a09da95016aeaea620d73dc1618a3483b48cb92afbc43807a22b2f6c3aad5ac03dbaab8c899484fd3406a1c23612821b3af27492d0b7a4a8db9aa763e8243f27f35061eac07fe527796122da9678d59492e48a38e56c0b79cc89f4e3c27844adb9b5312f323cbae0a01cee2bdca436cb8e43aa473191e140dbccbf781eba0ac3830ea92a95e77e891d533baf23505f61436f22a8f33ffa904b0f696c8b0c89e9e089c84d9e34197ef990bfc91679470f97ea48283b48989d129fb346f328d82a4ddbad530b889d638fde4d539ed21af038ffe659d8b64f671124ca0f60cfdcf328bad08debdca1cdf7e77828427ac121f36a010f97bffe1dbb56e372ba0130ac3da3a2800a23d3029b4e8339b9059a161b44c91a8889cea8d70678ee419ee46d80292e016769fda255a6b66512b882aef95ca03bd2cd6a552c7c339da129f9c87938aa5dede295f5b4e1fa9370219aac43db534c1b9b8f59400943ef69299ab999eab2c77c3de589269561d11b63932c77f4122be0d7082f7fadbdc407b08879f68a5ab750580c88a7cce24ba5c1c7c53bf84d17d680f441718c375a27f20dbd0f00d9ef3247d41802ce5abc857682000b68fcb814ae43be85751c2452dea3b8b9c3b1d45967d6f2d59d49dff6ef769b326decd5eb6c2daa0b579153532765110af728fa9cf00fd34fec874ec5bd9b6bb38efa201741b53c162b666e48391e85eacba0f2b4f8fd80d638ccc264d9a66edf25fe74e4d17ab066e34def3cec74100debb730c2b7e510ff805a3f08345e6e8ff8c14146a95c3bf1447448aeada71a975f251c7ed1939eedd648a82b955daabd84460274956c31112f875ae927844b49fd3b79faca41b0307dcab5799dbd5f464315ae9bb43597a44601ac7e6633d0e713709bc065d43c36116ff3e699cbb36c6b2d2b7f0500e8234f30da6fd4e9bb259dd31d97cba86db29456ddc2fd8690a18949cf5b4db1a0a207a22d34ca244bb53c982ef4df8ef3cb63a0e8d899aa320c541af3764aa8a2cf9515589a01a2f9a9eb8882cd59f53afd36f6b4b3b288b8802d902c3a87904ad2a949125b5fa77be58bcc985430c0aeccc5f47ce79f48b66032e3ec4b4d860020897fbfeb4d03e43a8c88fa0d82450a9eb436dcb147dcad1fe4459ff7121ef645b99fcafed52777296076ad2df8674423796cb6c37fdf9a84985ebcdc7cff5ee5d158f2b96c318b5e501450364798077f94593060833d9f900317b403b97328b6b95c0c545e0b3d8864547d1889568b3e6aab1454f1152d2d975f43693abaf0b879bf012de06244ec16c90b0e150ac5ca1dd2a0fc0a812d8688e9fea91724e8670683cff76db7208b5440b5fd30c6e84603d8cd80d7f69c3fd7687905fd0f0e918937a8a9511390bc571b6b5b72c3407fa1d0bb1a51d6def1e7036f03b19b66c734811eb6c16f87c96a1cd2640eaf93092d65de88dd6fa2e4d243d13697ff4623e8fa475b8b57f27a22174d4412306bad6a59769f61e83652276264662b2c405230179a042668d7a438eee29006e56ee2cd0855788a30eb0623909dfed3248d7f89e7b4ffe1f5ba56358b03a5c9fdd587a293bddc5fdb10b14cd50921a1080eeabd73861cd4a34b8b4743ea6be8da62a900e85430a2cc9b3649b59b2664c547cfa2a359c1fc1bac7c52a3de250cc9a8d6f111eaa67b8b1fd932293d907a461be55168cbd87045cb2ac202e4c8fad7555631bbfd6da4bcfd639102dc7a22c87b2e47a04733b4a8ddbfa06338deda39351ff18d1e426514700bd9729a605c6ae69fa07c3080040cfc7cd5049b3aac2f5e0b1e02440c3d5211110329681025af419abb5a9a98bd2914ef7d0138b0c58bcab9c4c1c2d105cd545685158d87ecc4fff0b2c2f378325b8221eaba2fbe5b66197748e4cb4c8cdef9054465197a2041c8083bef53b520062666c2bbe4debf81f1436406cf54389865fd4a11d6513bda1e5f07628efae04415ad3a36d28b66aba6b3119a34ddf981b33fd0e74afc8aef102c48dbe7395829f60bacf6d3939db8e8b13c6966d991969044db0f804b245baf8a2ff3db46e7f6d97ffd825f853871b5b03e91d94f160fe5de328606ae3c138e0eb23e005b78e23551b80e2b65c0ae06d5d96bf53848e1d6650ef3dc6399dae1aedf02aafea4ba0096d4d480af6b2224f46251684b0131938556d3adb25f8496549eedf9b1c35ddd6561b91698d70df5556378db728f4958ec57e60735bfc42d43e16d6b23e49679ab61f071004b3d34a1c16ddd455f115d692549bde159c22d5e0857ab8cbc14a8531216c92819b35af56e0a783114c2eb08aaa3f28ccdf5a5da3dbb625aac3b0288048755e881a78788b87df1e0d316963d0f9ead0da7b70dd6cabb9e5b46d135fc1eb37741e1e9c1ed349e54617a4320199c4ae5b6b81b386298e15948df4becc5dfeeb54a48f9e3521dedd03b1208b82644f6b4009d375c7333c4aebde2519b2d221cf1ef789ecc9ef7167eb32804187f175334902b187da979332df153f56e2918dd28d93d42b1e2c0b9a91689b48332c01274fae58707766d3e29e880dc5c65884b9ca889b4eac8108c4bae6eb0c16e783e334961523c3cf5babc902b6cf9095f80c4e16ef4e41ed10fbfd04864a2532e0c50cd6b31ccd52e01fde1525b8e226db0746a00a7cd4b505c63e8eecd25ab8c7a36fed76b4e164008a3255a39b26809e364c81888af6aac009c6817f08197ad820f42ad81983a4bbbf6344c554870e73f5d0873c13e56cb95f81b3a3fd67a51383d9793a9f20dcc8853747790a9f2d581199538a95eac79683591d1354936e7a63fe1246758eab4acd8b07f27a5e25d17722abc33ea7e0d68a2a84fa5816c046d097cde98cb056ade4fd6dd1e1fc575eae6c24913c9aa12e01cbf87e44a393899284d34ecccd1e69c00911d532480c51f97ad7cab374608468d3ff866ba8eeb8ee9c8bc17c39cf620e7c490a412897ca3a3f3f768281598fae2f571f1c2080d3bf46ecc5093b3117bfe548a490b7737aeabcbff80263f26965cff12f5d0e4f61b72d3fea6fc6c295a0e3746bc329764a3131e0cccb0b18f1b8b326eb3261a5e1119148c35dc90d81734810e919bf3881e925a8fe22369a828f1455599ce6dcaa510a6ca911f36ae6722a43fd292f8912a60475aee9f600834b97847629954a6c80dd79aee739c57dbb2e1dce3cd4dbe4d9ec188abe01158b68dabd71564a5810a1529d1ba1ab5299bc3e9897591a02f8bbefb669075ff93cf4fba19fd37ac005ba1aedd8186629b7c38ec0b64ba1a27edd37147183eeabfb6d72299c5797977892034e4c91e6b1ab6f46f918393dcabdd7e626778b6bab374d40fd8a92329dca133df0c6511a158b6ec46fad02adae5361531b17e43647cca8288191d8bcb89aca991430706937d507edddb6f5b592092b3fc88d96f0ce874f87ce8082abad597ec846048f9b66c3baba69f67cc85ab230288097044ad9087e77cf5a0f4b9ffe8ebfd8c5cb7517b960a5390e3bc3c1e3f0f214e97ec6f8312400171657e1f72c81937b2a8f4ef78bb5a13a1f9ca93380b8026604a592f9cf433dad25e8b7adfcd804c4320d63bcd5efada011f865be4de0298eb0000d64b21b70e196fefe2e85d13429568ae4277f733b75ac3e00d3d29f0ea483c2dffdad11e0a11449b91c067def7d89ff2f3879867464a3fa7d680f9a3dc68cf472bd3bd6f340512efa849a55a4cfb227e2198f34ba12de87e9914c3738ce2d60f24816576643b351953740d834a1e8e502a008d6bafdb4d9e50eb215a164c8a5d1ee9fa90774485fe36e81a5b70144c76653dd03989110a81a75e798bd3fc885e92a15f312d98516fc9b1af81ced8ad3366299edc71c5f1282c68abb4eb8db28bede7c8951d4971c8b25791030dc84af415c9814986cda3fce2b295d62604635a83faf3edc8d6c81418b451201c5c4ceb2136d175327c7e4213996218102e768a8e54be944063cf7d40f10574cd29fa36bf3d6dd5e6e0ac58711d48a46e3134c8b677316f7b29e41896d54af18bc8cbd885cb8db2eafdee9259df5f396793c8b15bba15444e5bbee528d0a6138596737460b7a796e8b9a6b30f23f8a0c0ed612211e0d8bd55ae65948ee4c662510e6948aaa0ba4181d8e54f3131477eca625d691fe0d7aff56554b715da0b563eef6af567d5ee6a21fae8629a14567cb2e8cb0739da01e0023234346e58825898490e29b7498d962bfdb33c44ffc6d1434d2c11a030bc16f59f41cca1c9123cf7e29455f93e66a6708c94caf9451b8d9be73757ec8ac1fe318ef86ec27aaf1a366efe29c6cfa69a7d20935dbf4bb6d9298ca0fa7bb91e4e6ad3612841fc756f946ce5c806246f123534200b9b800036b3651669c9d18d7f474c6ecbcb493680570736144161d1551174e4875092656161d611eb7579ff688539896972176fab7c987a047ebaa4ef455de20ad9f6e33efe95a759bf826ea5b048a9999b6c473b36298bb3aa09149008199e62c1a8d5a0ba9d3c69137bbec462d674870fa9104f576a6540f0a8582dea350d3b480f8de7cf0e2686d92545226f34ea90ac4f7ea367e556ec902d15b31dfab0dd4931cc0f4b6e5832ab1ccff1c1610716a0528310ffc19d46222d9c5bf2333da2a7d3233889723fb33fe3ceddeaf68adbb313a08b91d86d9c85bcc44b1f3c109fbd3c068306cecd90cb1600c432de905d0f5edd75b1d6b017141a9590045bfb8d90edb150ed56f8c3afcec98c5ba6fcd2532c930e0efe592c234b2b043cfb39418e511f5c84ca61ba1f354f9a2be9890d4ba1b281cdaeb1431246ff31d4f38b9cf2d43f8fc9f31308593d4ef55314db330bdf7ba068f8dc56872d5855866ca11aa6e400b56c6af2322aeb789fb9fc2225480caa61797665b224a13e99c25168ce666ed277e3101bb10b15fc9689a91a361bee13137e4272973e70bc3ddc15f7f9b4a4e03f80d90768cd78ea6b61738f3fb21f942d0db4a6f2d3656e41cab6b04857f7d14d734d3abd36f9cd81b156ea438cb3395227e47797891e4de0c8d36914f0098053646cdf976697acd68d53708ef83f949ecc14e884ea58bc3cc1f61ad55cd62010c2ddf86057c0318b3f5628ad56b32aa94381ace20216653a08f071f6276eba2ef5364645b6f5495c932559fbbc3d7b55cb82e42889b5dfbccabf373848f27aec1e7ea93cfc30855a05362bcd997833d3ecbfbb292cc84f8429731066b30c062f158f629638049caf91e5286c63dd6457cc928f43940c308a14ae8382c7bd6e1c379b61db3c1409b3d34bbadae5d61a5f006d148a6ba00541f46ba3f43cff2d01a9159c3229ad267c7675af93560bd026690c8ca171e208e284ffe650e897b05eba4a1dba6e9229c1184f3dcff1684728b7d89e3b658f27b7c6ce9222531a9b08504e6b40bcde30bd25b36405646ebcf848bb496fc48c4abad13e20c9b0b43ed00d14479391aa5a8d9dc90cbb37efe72fe26"}, &(0x7f0000000040), 0x400) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "250000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "80ffffff0000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x1000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x12000000, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000010000090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="1d3cfd621ddb4317d009632b3554712574931a6dbc1d9677e0147c6adf66610e85ac80ba9dc7b21e35d4e02d0c208d58e96062bbf7", 0x35, 0x800, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 20:31:28 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "5c0000000000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x2000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000020000090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="1d3cfd621ddb4317d009632b3554712574931a6dbc1d9677e0147c6adf66610e85ac80ba9dc7b21e35d4e02d0c208d58e96062bbf7", 0x35, 0x800, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x3000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "8d0000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000200000090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="1d3cfd621ddb4317d009632b3554712574931a6dbc1d9677e0147c6adf66610e85ac80ba9dc7b21e35d4e02d0c208d58e96062bbf7", 0x35, 0x800, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000300000000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x4000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000100090010000000001000"}) 20:31:28 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000500000000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x5000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000200090010000000001000"}) 20:31:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, "80000002c76060e500"}) 20:31:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "550500000000000000090010000000001000"}) 20:31:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x6000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000300090010000000001000"}) 20:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 0: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x7000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000600000000000000090010000000001000"}) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000400090010000000001000"}) 20:31:29 executing program 0: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000500090010000000001000"}) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000700000000000000090010000000001000"}) 20:31:29 executing program 0: ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000600090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000900000000000000090010000000001000"}) 20:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x9000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000700090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000a00000000000000090010000000001000"}) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xa000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000800090010000000001000"}) 20:31:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xb000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000900090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000b00000000000000090010000000001000"}) 20:31:29 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000a00090010000000001000"}) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xc000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000c00000000000000090010000000001000"}) 20:31:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xd000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000d00000000000000090010000000001000"}) 20:31:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000b00090010000000001000"}) 20:31:29 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000000c0)=0x8) 20:31:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) 20:31:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000e00000000000000090010000000001000"}) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xe000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000c00090010000000001000"}) 20:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "550500000000000000090010000000001000"}) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x10000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "df0e00000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000d00090010000000001000"}) 20:31:30 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0xffff88811e8ad518, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x11000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001100000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000e00090010000000001000"}) 20:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001200000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000001000090010000000001000"}) 20:31:30 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x12000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000001100090010000000001000"}) 20:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001c00000000000000090010000000001000"}) 20:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x3, 0x3}, 0x8) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000044) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x25000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000001200090010000000001000"}) 20:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "002500000000000000090010000000001000"}) 20:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x3, 0x3}, 0x8) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x2000044) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x12000000, 0x0, "000000000000000000090010000000001000"}) 20:31:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000002500090010000000001000"}) 20:31:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x5c000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:31 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "004000000000000000090010000000001000"}) 20:31:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @broadcast}]}) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000300)="770f324bb40f3316cbe2228f2a6500000000f5f87d", 0x15, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$revoke(0x3, r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x56002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x0, 0xfffffffffffffffe) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x42, {0x2, 0x4e21, @remote}, 'bridge0\x00'}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="6e520882a9b988e7b4ec4c7ba3d0f326100dc180c0460116b4db967413b9f56f1a49e11b5df525713d822c1ce0d3f7367f236ed93941dc549e6c928784f619678959a516ea432427c32a068c829b02e96a09334528a3c8daab1ba3f1b34286eb88e89fd05028f99d0cb4", 0x6a, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000100)={r5}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x280000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f00000002c0)={0xfab8, 0x3d80}) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r8 = syz_open_pts(r6, 0x0) ioctl$TCSETSF(r8, 0x5418, 0x0) 20:31:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000004000090010000000001000"}) 20:31:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "055500000000000000090010000000001000"}) 20:31:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xff000000, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000005c00090010000000001000"}) 20:31:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "005c00000000000000090010000000001000"}) 20:31:31 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000008000090010000000001000"}) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "008d00000000000000090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x202, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r4) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r5 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r5, 0x5418, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0x6}}, 0x30) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0x7, 0x3, [0x401, 0xffff, 0xc10, 0x3, 0xffff], 0x859}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0edf00000000000000090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000000ffffff8000090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x403, 0x0, 0x0, 0x4, 0xb, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) accept4$ax25(r2, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @null, @rose, @netrom, @bcast, @remote, @null, @rose]}, &(0x7f0000000080)=0x48, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x7, [@datasec={0xe, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x891d, 0x6}, {0x5, 0x7f, 0x101}, {0x3, 0xfffffff9, 0x1}, {0x2, 0x3f, 0x3}], "fbb340"}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000480)=""/243, 0x5f, 0xf3, 0x1}, 0x20) fcntl$notify(r4, 0x402, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r5, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000001c0)={[{0x41, 0x7, 0x1, 0x7, 0x2, 0xca, 0x1, 0x80, 0x1f, 0x8, 0x9, 0x4, 0x20b}, {0x3, 0x0, 0x3, 0x3, 0x10, 0x6, 0x0, 0x2, 0x80, 0xff, 0x1, 0x5, 0x8000}, {0x7fff, 0x3, 0x9, 0x1, 0x40, 0x4, 0x7f, 0x40, 0xad, 0x2, 0x4, 0x4, 0xffffffffffff8000}], 0x89cf}) preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5418, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r6, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00ff00000000000000090010000000001000"}) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000000000edf00090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000002000000000000090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x3f, 0x4) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000000fffffdfd00090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000010000000000090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') ioctl$TCSETSF(r1, 0x5418, 0x0) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000000000ffe00090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000020000000000090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffffffffffff0000, 0x40401) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000000000000ff00090010000000001000"}) 20:31:32 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000030000000000090010000000001000"}) 20:31:32 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000000ffffffff00090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xd8}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcd1, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x54}}, 0x4000014) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x4, 0x20, 0x5, 0x8, 0x6, "cfa429c795273b28795d03d870212f7a37a30a"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000300)=[0x4, 0x3], 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000040)={0x3, 0x3, 0x58, 0x4, 0x6, 0x40eb}) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000000)) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, "000000000000000000090010000000001000"}) 20:31:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = semget(0x1, 0x3, 0x0) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000000)=""/13) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5418, 0x0) 20:31:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000200000000000000090010000000001000"}) 20:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000040000000000090010000000001000"}) 20:31:33 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000050000000000090010000000001000"}) 20:31:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000030000000000090010000000001000"}) 20:31:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000300000000000000090010000000001000"}) 20:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x2000000, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000400000000000000090010000000001000"}) 20:31:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000060000000000090010000000001000"}) 20:31:33 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x48, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000500000000000000090010000000001000"}) 20:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000050000000000090010000000001000"}) 20:31:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000070000000000090010000000001000"}) 20:31:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x8d00, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd, 0x0, "000000000000000000090010000000001000"}) 20:31:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000600000000000000090010000000001000"}) 20:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000080000000000090010000000001000"}) 20:31:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:34 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x4c, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe, 0x0, "000000000000000000090010000000001000"}) 20:31:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000700000000000000090010000000001000"}) 20:31:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='w', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x3, 0xffffffff, 0x7f, 0x7f, 0x3, 0x4}) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='\x00', r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$reject(0x13, r3, 0x0, 0x6, r6) 20:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000090000000000090010000000001000"}) 20:31:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10, 0x0, "000000000000000000090010000000001000"}) 20:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000800000000000000090010000000001000"}) 20:31:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000a0000000000090010000000001000"}) 20:31:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000090000000000090010000000001000"}) 20:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:34 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x68, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000900000000000000090010000000001000"}) 20:31:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x0, "000000000000000000090010000000001000"}) 20:31:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe, 0x0, "000000000000000000090010000000001000"}) 20:31:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000b0000000000090010000000001000"}) 20:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x1c00, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000c0000000000090010000000001000"}) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000a00000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:35 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x6c, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = dup2(r1, r0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x6d, 0x0, 0x0, 0x0, 0x4, "80000002c76060e500"}) r3 = syz_open_pts(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000000000061124000000000009500000000000000dbcb547d0c43b393c383af29ddb64ab56ecc3db16e2db5e25028b8a931c7c4dc07f01c9a2f9a2405141abeadb1210c2b9b10927b6a39"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TCSETSF(r3, 0x5409, 0x0) uselib(&(0x7f0000000000)='./file0\x00') 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000d0000000000090010000000001000"}) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x25, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000b00000000000000090010000000001000"}) 20:31:35 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x306, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000e0000000000090010000000001000"}) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000c00000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:31:35 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x74, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000100000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000d00000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x8001, 0x8, 0xfff, 0xf, 0xb, "def4b94fd3f9b689aa2f046fb09cf2892ea5b3"}) 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000110000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000e00000000000000090010000000001000"}) 20:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0xc00, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:35 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x7a, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x600, 0x0, "000000000000000000090010000000001000"}) 20:31:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001000000000000000090010000000001000"}) 20:31:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000120000000000090010000000001000"}) 20:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, r2, 0x703, 0x0, 0x0, {0x15}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xd8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a, 0x0, 0x201}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0xd8}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x32, 0x8002}) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r10, &(0x7f00000017c0), 0x1d2, 0x0) tee(r9, r10, 0x2, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r11 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r11, 0x5418, 0x0) 20:31:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:36 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, 0x0) 20:31:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x700, 0x0, "000000000000000000090010000000001000"}) 20:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001100000000000000090010000000001000"}) 20:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10, "000000000000000000090010000000001000"}) 20:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000001c0000000000090010000000001000"}) 20:31:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x900, 0x0, "000000000000000000090010000000001000"}) 20:31:36 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xe1, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001200000000000000090010000000001000"}) 20:31:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000250000000000090010000000001000"}) 20:31:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa00, 0x0, "000000000000000000090010000000001000"}) 20:31:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "002500000000000000090010000000001000"}) [ 768.821393][T32552] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 769.371428][T32552] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 769.371441][T32552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.371450][T32552] usb 5-1: Product: syz [ 769.371485][T32552] usb 5-1: Manufacturer: syz [ 769.371494][T32552] usb 5-1: SerialNumber: syz [ 769.421881][T32552] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 770.011423][T32552] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 770.422163][ T3960] usb 5-1: USB disconnect, device number 2 20:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000400000000000090010000000001000"}) 20:31:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb00, 0x0, "000000000000000000090010000000001000"}) 20:31:38 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, 0x0) 20:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "001200000000000000090010000000001000"}) 20:31:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "005c00000000000000090010000000001000"}) 20:31:38 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x1af, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000005550000000000090010000000001000"}) 20:31:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000003000000000000090010000000001000"}) 20:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) 20:31:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc00, 0x0, "000000000000000000090010000000001000"}) 20:31:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000005c0000000000090010000000001000"}) 20:31:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000005000000000000090010000000001000"}) [ 771.051349][T32552] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 771.058350][T32552] ath9k_htc: Failed to initialize the device [ 771.088743][ T3960] usb 5-1: ath9k_htc: USB layer deinitialized 20:31:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5c00, 0x0, "000000000000000000090010000000001000"}) [ 771.471258][ T3960] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 772.081247][ T3960] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 772.090324][ T3960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.098592][ T3960] usb 5-1: Product: syz [ 772.102923][ T3960] usb 5-1: Manufacturer: syz [ 772.107562][ T3960] usb 5-1: SerialNumber: syz [ 772.151473][ T3960] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 772.811174][ T3960] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 773.231913][ T12] usb 5-1: USB disconnect, device number 3 20:31:41 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5409, 0x0) 20:31:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd00, 0x0, "000000000000000000090010000000001000"}) 20:31:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000006000000000000090010000000001000"}) 20:31:41 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x300, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "ffffff800000000000090010000000001000"}) 20:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x20802, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000080)) ioctl$TCSETSF(r1, 0x5418, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) 20:31:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "ffffff810000000000090010000000001000"}) 20:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x5, 0x0, "000000000000000000090010000000001000"}) 20:31:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe00, 0x0, "000000000000000000090010000000001000"}) 20:31:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000007000000000000090010000000001000"}) 20:31:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "ffffff820000000000090010000000001000"}) [ 773.851175][ T3960] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 773.860543][ T3960] ath9k_htc: Failed to initialize the device [ 773.880700][ T12] usb 5-1: ath9k_htc: USB layer deinitialized 20:31:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xc883, 0x0, 0x8, 0x9, 0x14, "58624d091074866250008a1000"}) syz_open_pts(0xffffffffffffffff, 0x0) [ 774.261111][ T12] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 774.851092][ T12] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 774.860135][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.868416][ T12] usb 5-1: Product: syz [ 774.872687][ T12] usb 5-1: Manufacturer: syz [ 774.877257][ T12] usb 5-1: SerialNumber: syz [ 774.921457][ T12] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 775.531058][ T12] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 775.951876][ T17] usb 5-1: USB disconnect, device number 4 20:31:43 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) 20:31:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1100, 0x0, "000000000000000000090010000000001000"}) 20:31:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000009000000000000090010000000001000"}) 20:31:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000008d0000000000090010000000001000"}) 20:31:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xc883, 0x0, 0x8, 0x9, 0x14, "58624d091074866250008a1000"}) syz_open_pts(0xffffffffffffffff, 0x0) 20:31:43 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x500, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xc883, 0x0, 0x8, 0x9, 0x14, "58624d091074866250008a1000"}) syz_open_pts(0xffffffffffffffff, 0x0) 20:31:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1200, 0x0, "000000000000000000090010000000001000"}) 20:31:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000edf0000000000090010000000001000"}) 20:31:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000a000000000000090010000000001000"}) [ 776.571027][ T12] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 776.577896][ T12] ath9k_htc: Failed to initialize the device [ 776.603450][ T17] usb 5-1: ath9k_htc: USB layer deinitialized 20:31:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "fffffdfd0000000000090010000000001000"}) 20:31:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2500, 0x0, "000000000000000000090010000000001000"}) [ 776.971009][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 777.490979][ T17] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 777.500062][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.508059][ T17] usb 5-1: Product: syz [ 777.512234][ T17] usb 5-1: Manufacturer: syz [ 777.516818][ T17] usb 5-1: SerialNumber: syz [ 777.561276][ T17] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 778.130935][ T17] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 778.552904][ T9665] usb 5-1: USB disconnect, device number 5 20:31:46 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200202, 0x0) 20:31:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xc883, 0x0, 0x8, 0x9, 0x14, "58624d091074866250008a1000"}) 20:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000b000000000000090010000000001000"}) 20:31:46 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x600, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000ff0000000000090010000000001000"}) 20:31:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c00, 0x0, "000000000000000000090010000000001000"}) 20:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000c000000000000090010000000001000"}) 20:31:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "fdfdffff0000000000090010000000001000"}) 20:31:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff00, 0x0, "000000000000000000090010000000001000"}) 20:31:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) syz_open_dev$ttys(0xc, 0x2, 0x1) 20:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000d000000000000090010000000001000"}) [ 779.210819][ T17] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 779.219698][ T17] ath9k_htc: Failed to initialize the device 20:31:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000, 0x0, "000000000000000000090010000000001000"}) [ 779.253192][ T9665] usb 5-1: ath9k_htc: USB layer deinitialized [ 779.650783][ T9665] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 780.250834][ T9665] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 780.259879][ T9665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.268082][ T9665] usb 5-1: Product: syz [ 780.272254][ T9665] usb 5-1: Manufacturer: syz [ 780.276820][ T9665] usb 5-1: SerialNumber: syz [ 780.322231][ T9665] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 780.930764][ T9665] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 781.351216][ T12] usb 5-1: USB disconnect, device number 6 20:31:49 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) 20:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3d) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x8, 0x2, 0x2, 0x9, "b12ac4e0f240bf0475a93cfbe6f0a81003b35c"}) 20:31:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "80ffffff0000000000090010000000001000"}) 20:31:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000000, 0x0, "000000000000000000090010000000001000"}) 20:31:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00000e000000000000090010000000001000"}) 20:31:49 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x700, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "81ffffff0000000000090010000000001000"}) 20:31:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3000000, 0x0, "000000000000000000090010000000001000"}) 20:31:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00df0e000000000000090010000000001000"}) 20:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f00000001c0)="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", 0x154) 20:31:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000, 0x0, "000000000000000000090010000000001000"}) 20:31:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r3, &(0x7f00000017c0), 0x1d2, 0x0) [ 782.011934][ T9665] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 782.018848][ T9665] ath9k_htc: Failed to initialize the device [ 782.045973][ T12] usb 5-1: ath9k_htc: USB layer deinitialized [ 782.430640][ T12] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 783.000631][ T12] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.009736][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.018211][ T12] usb 5-1: Product: syz [ 783.022679][ T12] usb 5-1: Manufacturer: syz [ 783.027345][ T12] usb 5-1: SerialNumber: syz [ 783.070859][ T12] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.700614][ T12] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.110937][ T9665] usb 5-1: USB disconnect, device number 7 20:31:52 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 20:31:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00fe0f000000000000090010000000001000"}) 20:31:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5000000, 0x0, "000000000000000000090010000000001000"}) 20:31:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "82ffffff0000000000090010000000001000"}) 20:31:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='net/ip6_flowlabel\x00') 20:31:52 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x900, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000011000000000000090010000000001000"}) 20:31:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 20:31:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000010000090010000000001000"}) 20:31:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6000000, 0x0, "000000000000000000090010000000001000"}) [ 784.730684][ T12] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 784.750684][ T12] ath9k_htc: Failed to initialize the device 20:31:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) 20:31:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000012000000000000090010000000001000"}) [ 784.776563][ T9665] usb 5-1: ath9k_htc: USB layer deinitialized [ 785.150489][ T9665] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 785.750473][ T9665] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 785.759557][ T9665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.767632][ T9665] usb 5-1: Product: syz [ 785.771821][ T9665] usb 5-1: Manufacturer: syz [ 785.776418][ T9665] usb 5-1: SerialNumber: syz [ 785.820835][ T9665] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 786.500474][ T9665] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.702716][ T17] usb 5-1: USB disconnect, device number 8 20:31:54 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 20:31:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000020000090010000000001000"}) 20:31:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7000000, 0x0, "000000000000000000090010000000001000"}) 20:31:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000020000000000000090010000000001000"}) 20:31:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) ptrace$cont(0x18, r2, 0x0, 0x0) 20:31:54 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xa00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000, 0x0, "000000000000000000090010000000001000"}) 20:31:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000025000000000000090010000000001000"}) 20:31:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3d) 20:31:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000100090010000000001000"}) 20:31:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000040000000000000090010000000001000"}) 20:31:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000, 0x0, "000000000000000000090010000000001000"}) [ 787.530361][ T9665] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 787.546222][ T9665] ath9k_htc: Failed to initialize the device [ 787.557418][ T17] usb 5-1: ath9k_htc: USB layer deinitialized [ 787.920344][ T17] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 788.440337][ T17] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 788.449464][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.458009][ T17] usb 5-1: Product: syz [ 788.462666][ T17] usb 5-1: Manufacturer: syz [ 788.467352][ T17] usb 5-1: SerialNumber: syz [ 788.510678][ T17] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 789.080319][ T17] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 789.283770][T32552] usb 5-1: USB disconnect, device number 9 20:31:57 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 20:31:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) 20:31:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "00005c000000000000090010000000001000"}) 20:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000200090010000000001000"}) 20:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa000000, 0x0, "000000000000000000090010000000001000"}) 20:31:57 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xb00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb000000, 0x0, "000000000000000000090010000000001000"}) 20:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000300090010000000001000"}) 20:31:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) gettid() 20:31:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000edf000000000000090010000000001000"}) 20:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc000000, 0x0, "000000000000000000090010000000001000"}) 20:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000400090010000000001000"}) [ 790.090234][ T17] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 790.097102][ T17] ath9k_htc: Failed to initialize the device [ 790.120243][T32552] usb 5-1: ath9k_htc: USB layer deinitialized [ 790.470221][T32552] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 790.990188][T32552] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 790.999280][T32552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.007772][T32552] usb 5-1: Product: syz [ 791.012174][T32552] usb 5-1: Manufacturer: syz [ 791.016740][T32552] usb 5-1: SerialNumber: syz [ 791.060592][T32552] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 791.630151][T32552] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 791.832224][ T3930] usb 5-1: USB disconnect, device number 10 20:31:59 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) 20:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:31:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000ffe000000000000090010000000001000"}) 20:31:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd000000, 0x0, "000000000000000000090010000000001000"}) 20:31:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000500090010000000001000"}) 20:31:59 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xc00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:31:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000600090010000000001000"}) 20:31:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe000000, 0x0, "000000000000000000090010000000001000"}) 20:31:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:31:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000ff000000000000090010000000001000"}) 20:31:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000700090010000000001000"}) 20:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) [ 792.650093][T32552] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 792.658109][T32552] ath9k_htc: Failed to initialize the device [ 792.671401][ T3930] usb 5-1: ath9k_htc: USB layer deinitialized 20:32:00 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) 20:32:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000800090010000000001000"}) 20:32:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000020000000000090010000000001000"}) 20:32:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10000000, 0x0, "000000000000000000090010000000001000"}) 20:32:00 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xd00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000200000000000090010000000001000"}) 20:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11000000, 0x0, "000000000000000000090010000000001000"}) 20:32:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000900090010000000001000"}) 20:32:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12000000, 0x0, "000000000000000000090010000000001000"}) 20:32:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000100000000090010000000001000"}) 20:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) pipe2(&(0x7f0000000000), 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:00 executing program 4: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) 20:32:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000a00090010000000001000"}) 20:32:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000200000000090010000000001000"}) 20:32:00 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xe00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:32:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x25000000, 0x0, "000000000000000000090010000000001000"}) 20:32:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000300000000090010000000001000"}) 20:32:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000b00090010000000001000"}) 20:32:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c000000, 0x0, "000000000000000000090010000000001000"}) 20:32:01 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000400000000090010000000001000"}) 20:32:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) 20:32:01 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f0000000100)={[{0xae, 0x4e00, "5da318c927c5894f4d8537e5f1351525a2f5fcc544cdb84e024e672a3ea94ccd1f4dd52dc0b5a756dcb791432a11993f7cb5c087fe9f129a711bb954bf4b95b7cb9848e3a9016df52131e4b23cb846ecfe8672cf2bbe9052bf58b845840c73f6491eb28b1b02bd03a08e01d9ce7436d893da8dd363bfeadd785a9d736e95827340b895ca7fa472367f05c58ea85cf2803f827a8074beffdf4f1b53fb02b79c0baf5a12b082d445d628cadf90a4f6"}, {0xb8, 0x4e00, "5e93e145fd662bb7b94fa78727e058e3063b2255824b939d1d743af6b2126280f4a6ee62f7f702ab92a245165d78a1c9e8dce4ca272ee276686cfaf13298996dcd51ae4f460bc2b8d140a9f9ab6ecc1d4d56a1625191cc763ff5020620d9d54ea484cfbe67718523e68ead2c506218d810e0d704950edad5e14586d09ba4771bb2fbb3de283c8bf2e1fb5ef85406b29159f2484569c5e91087c8daba098c30556a37415f5e016ee7ff664decb25071960e0c44fc10c59245"}]}) 20:32:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "000000000000000000090010000000001000"}) 20:32:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000c00090010000000001000"}) 20:32:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000500000000090010000000001000"}) 20:32:01 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000440)=0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0xf00, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="1c", 0x1}]) dup3(r2, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 20:32:01 executing program 0: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f0000000480)=""/136, 0x88}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0) [ 794.060010][ T1366] ================================================================== [ 794.068093][ T1366] BUG: KCSAN: data-race in n_tty_receive_char_inline / n_tty_receive_char_special [ 794.077256][ T1366] [ 794.079569][ T1366] write to 0xffffc90005dc5000 of 8 bytes by task 8252 on cpu 0: [ 794.087180][ T1366] n_tty_receive_char_special+0xd83/0x3a70 [ 794.092964][ T1366] n_tty_receive_buf_common+0x196c/0x1e70 [ 794.098655][ T1366] n_tty_receive_buf+0x2b/0x40 [ 794.103408][ T1366] tty_ioctl+0x8e3/0xfd0 [ 794.107634][ T1366] __se_sys_ioctl+0xc9/0x130 [ 794.112209][ T1366] __x64_sys_ioctl+0x3f/0x50 [ 794.116783][ T1366] do_syscall_64+0x51/0xb0 [ 794.121187][ T1366] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 794.127054][ T1366] [ 794.129376][ T1366] read to 0xffffc90005dc5000 of 8 bytes by task 1366 on cpu 1: [ 794.136901][ T1366] n_tty_receive_char_inline+0x26d/0x680 [ 794.142514][ T1366] n_tty_receive_buf_common+0x18fa/0x1e70 [ 794.148212][ T1366] n_tty_receive_buf2+0x2e/0x40 [ 794.153042][ T1366] tty_ldisc_receive_buf+0x61/0xf0 [ 794.158130][ T1366] tty_port_default_receive_buf+0x54/0x80 [ 794.163828][ T1366] flush_to_ldisc+0x1b5/0x2b0 [ 794.168488][ T1366] process_one_work+0x3e1/0x9a0 [ 794.173319][ T1366] worker_thread+0x665/0xbe0 [ 794.177891][ T1366] kthread+0x20d/0x230 [ 794.181940][ T1366] ret_from_fork+0x1f/0x30 [ 794.186328][ T1366] [ 794.188633][ T1366] Reported by Kernel Concurrency Sanitizer on: [ 794.194754][ T1366] CPU: 1 PID: 1366 Comm: kworker/u4:0 Not tainted 5.8.0-rc6-syzkaller #0 [ 794.203128][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.213157][ T1366] Workqueue: events_unbound flush_to_ldisc [ 794.218946][ T1366] ================================================================== [ 794.227021][ T1366] Kernel panic - not syncing: panic_on_warn set ... [ 794.233576][ T1366] CPU: 1 PID: 1366 Comm: kworker/u4:0 Not tainted 5.8.0-rc6-syzkaller #0 [ 794.241953][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.251982][ T1366] Workqueue: events_unbound flush_to_ldisc [ 794.257757][ T1366] Call Trace: [ 794.261029][ T1366] dump_stack+0x10f/0x19d [ 794.265339][ T1366] panic+0x207/0x64a [ 794.269328][ T1366] ? vprintk_emit+0x44a/0x4f0 [ 794.273974][ T1366] kcsan_report+0x684/0x690 [ 794.278456][ T1366] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 794.283971][ T1366] ? n_tty_receive_char_inline+0x26d/0x680 [ 794.289744][ T1366] ? n_tty_receive_buf_common+0x18fa/0x1e70 [ 794.295603][ T1366] ? n_tty_receive_buf2+0x2e/0x40 [ 794.300596][ T1366] ? tty_ldisc_receive_buf+0x61/0xf0 [ 794.305850][ T1366] ? tty_port_default_receive_buf+0x54/0x80 [ 794.311710][ T1366] ? flush_to_ldisc+0x1b5/0x2b0 [ 794.316533][ T1366] ? process_one_work+0x3e1/0x9a0 [ 794.321525][ T1366] ? worker_thread+0x665/0xbe0 [ 794.326261][ T1366] ? kthread+0x20d/0x230 [ 794.330479][ T1366] ? ret_from_fork+0x1f/0x30 [ 794.335075][ T1366] ? finish_task_switch+0x8b/0x270 [ 794.340161][ T1366] ? __rcu_read_unlock+0x4b/0x260 [ 794.345160][ T1366] ? __rcu_read_unlock+0x4b/0x260 [ 794.350153][ T1366] kcsan_setup_watchpoint+0x453/0x4d0 [ 794.355495][ T1366] ? __rcu_read_unlock+0x4b/0x260 [ 794.360489][ T1366] ? __rcu_read_unlock+0x4b/0x260 [ 794.365482][ T1366] n_tty_receive_char_inline+0x26d/0x680 [ 794.371083][ T1366] n_tty_receive_buf_common+0x18fa/0x1e70 [ 794.376794][ T1366] ? xas_find_marked+0x5c2/0x6b0 [ 794.381703][ T1366] n_tty_receive_buf2+0x2e/0x40 [ 794.386522][ T1366] ? n_tty_write_wakeup+0x30/0x30 [ 794.391514][ T1366] tty_ldisc_receive_buf+0x61/0xf0 [ 794.396594][ T1366] tty_port_default_receive_buf+0x54/0x80 [ 794.402281][ T1366] flush_to_ldisc+0x1b5/0x2b0 [ 794.406950][ T1366] process_one_work+0x3e1/0x9a0 [ 794.411771][ T1366] worker_thread+0x665/0xbe0 [ 794.416330][ T1366] ? finish_task_switch+0x8b/0x270 [ 794.421421][ T1366] ? process_one_work+0x9a0/0x9a0 [ 794.426416][ T1366] kthread+0x20d/0x230 [ 794.430456][ T1366] ? process_one_work+0x9a0/0x9a0 [ 794.435542][ T1366] ? kthread_blkcg+0x80/0x80 [ 794.440108][ T1366] ret_from_fork+0x1f/0x30 [ 794.445836][ T1366] Kernel Offset: disabled [ 794.450141][ T1366] Rebooting in 86400 seconds..