040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:43 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:43 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 14:33:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7fff, 0xfff, 0x26, 0x0, 0x12, "0758163beb7e3ba4"}) r1 = syz_open_pts(r0, 0x701080) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x28, 0x9, 0x1ff, 0x327f, 0x10}}) r2 = syz_open_pts(r0, 0x4100) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2eb) 14:33:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x7, 0x8}) (async) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x4e86c0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x7f, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfd, 0x80, 0xfff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x7f, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfd, 0x80, 0xfff}) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x7f, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0xfd, 0x80, 0xfff}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:33:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "137e8eec9bb7dba9"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "b7a55d13aef481976c19807e1b8dea15cba403"}) 14:33:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7fff, 0xfff, 0x26, 0x0, 0x12, "0758163beb7e3ba4"}) (async) r1 = syz_open_pts(r0, 0x701080) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x28, 0x9, 0x1ff, 0x327f, 0x10}}) (async) r2 = syz_open_pts(r0, 0x4100) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2eb) 14:33:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 14:33:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_pts(r0, 0x402) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)) ioctl$KDSETLED(r3, 0x4b32, 0xfffffffffffffc86) 14:33:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 14:33:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7fff, 0xfff, 0x26, 0x0, 0x12, "0758163beb7e3ba4"}) r1 = syz_open_pts(r0, 0x701080) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x28, 0x9, 0x1ff, 0x327f, 0x10}}) r2 = syz_open_pts(r0, 0x4100) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2eb) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x7fff, 0xfff, 0x26, 0x0, 0x12, "0758163beb7e3ba4"}) (async) syz_open_pts(r0, 0x701080) (async) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x28, 0x9, 0x1ff, 0x327f, 0x10}}) (async) syz_open_pts(r0, 0x4100) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000040)) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x2eb) (async) 14:33:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000000)) 14:33:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_alloc_da_blocks\x00'}, 0x10) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x9, 0x6, 0x9, 0x6, 0x18, "06eac34428a19eb9eed37318389f6b1e904505"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000000c0)=0x1) 14:33:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:47 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="048b8dee22138028f4f4827ff26c20b4e6ba033fa8e99d9749c38d6a6199e0de828b007b2d2afea24ac61ac806e2841fbb6d2746394ee1a1ab99d7ab9a0f7a8434d0b5f8c8b7dd3b1343c70e9d30a38a6731e7f738411582a5f84927c831c8b795125b2592d638a0173204a4368135ade27b3e57f58de1bc214502deabc6f5e8d558b2d9b8dc7b05fc72c567a21eba9819950732afb8c0ac8dba89b89c300515d2567ae6cdaa5f040790a452aaa2f3d5765f91229c82b9358f002a6b8c801bf85f159b7cafd1bded9944096693e3e04217d0830e47fb8ebcd2efd35afc5926129bec8edeb24bed760d6ebee732a0bfe3d5bd0282") 14:33:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="048b8dee22138028f4f4827ff26c20b4e6ba033fa8e99d9749c38d6a6199e0de828b007b2d2afea24ac61ac806e2841fbb6d2746394ee1a1ab99d7ab9a0f7a8434d0b5f8c8b7dd3b1343c70e9d30a38a6731e7f738411582a5f84927c831c8b795125b2592d638a0173204a4368135ade27b3e57f58de1bc214502deabc6f5e8d558b2d9b8dc7b05fc72c567a21eba9819950732afb8c0ac8dba89b89c300515d2567ae6cdaa5f040790a452aaa2f3d5765f91229c82b9358f002a6b8c801bf85f159b7cafd1bded9944096693e3e04217d0830e47fb8ebcd2efd35afc5926129bec8edeb24bed760d6ebee732a0bfe3d5bd0282") 14:33:47 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="048b8dee22138028f4f4827ff26c20b4e6ba033fa8e99d9749c38d6a6199e0de828b007b2d2afea24ac61ac806e2841fbb6d2746394ee1a1ab99d7ab9a0f7a8434d0b5f8c8b7dd3b1343c70e9d30a38a6731e7f738411582a5f84927c831c8b795125b2592d638a0173204a4368135ade27b3e57f58de1bc214502deabc6f5e8d558b2d9b8dc7b05fc72c567a21eba9819950732afb8c0ac8dba89b89c300515d2567ae6cdaa5f040790a452aaa2f3d5765f91229c82b9358f002a6b8c801bf85f159b7cafd1bded9944096693e3e04217d0830e47fb8ebcd2efd35afc5926129bec8edeb24bed760d6ebee732a0bfe3d5bd0282") 14:33:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) syz_open_pts(r1, 0x654002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) syz_open_pts(r1, 0x654002) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:48 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88180) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001100)={0x9, 0x4, 0x1000, &(0x7f0000000100)="2c2f0282e44259990dc8d31f97d779519ba9ab0e313042a54d0ebca7827761ecffb5dff390ca00aa864f43c558de33b0f303131f83288fc944c7f56491a2be7d65b2c788266c3832c82901405e9d6e96e91059c297a4ed5a13fddb5ba5bf5027d00d0b136129177865eb211f3b7794eeb5b4c3e6c88703d1af0fa488fc9501144b4dc4e15e49c971596023cbab53dfd59d91363fcfa81783e55606ce12b208f9880b3c619b83eca99ff95758cc4351e39dcc637636a4d869633c603c6aae0dfc87caef24739c16575a3d2c95a2835ed2d6569ce9a0e75552588ad9306a6ff88484434dd888fad010ce2ebfc8137f97205e097e96786d74cd685788ffcccc33a1136a111abaead4c3ea334396f1bca9fd783059ad0ccbf2a1c97c7c95748dcd40200eb3b75da85b36a6b3f7d5f72a4328d53eb9032e996dd45da9447ef72a551478a62ee638177c478ff59920c05f7c80a0a3e988d8730ec7e97381b559d4623194f940ce200053512bdcf3cad9dce7cba245251f26da380c4cdafc908abd43ed3d0b05151099f0fe7a86889360b9f31cb691c7a6fd7a024369e8e1662f4e9fe100ef6d74552787ec6f1ce9a1662b1c96993ff7b678034eab800826d15efdf3cbc78bae7d2bb839892f2ed84954bbc5cd27371e98e0b9180d83d71589008a0ec5684a499a77d997927f0cb91891099d6363b01ead770b2542ae2db4ba56ed69945d9f61605635e889d2ec4b1e9532f7ecc9c6a4a57fb82935557e2d0b685b950a1f18633f1423fcad1f3efdce62406cc8cbfe484422c118402d1743721956c6c7a4a383e60df34ce1e73ba453496cbba04db87a25ae0591d4512725f9a197b4a9afa226cdcb310c1b8fbd92188cd225fedb400872fe62a6a15fe88376413bc9e7808239b5ea2685be5b8f9f546ebe6e37f1502a893e9f6235c570eb19361f3658ce7e19ed1335adca6c6a283f049ee589f159b1041942829bea4a788f61b753eda3a55358df907cb397a2286149f3eca8808a7176042f89e899d4b6d4de55d0101bec197ce1aa2b716da7a2c0dde060ab569e8a19438e5d7de986dbcbca9903256fa012ba3063b5c43c068680fda8d10761c11598052e9f4cc53329b6cda32e7fb7b9ea1742960f83728114cf8ec62e6b60bc02042769765437f96f673e5ac4f00c19d6d03ff3d2e76fecdf57f2b07725d02239fb5381c1b5386f3a701f7c0ecf0a5fd2341083c87b0794bd16b54b952cda08503299bdd3d6980b5307a65912450d8ef8651a5a984c5557bd7ba085639e253a85674f57fbe267a00e967fc4d2e6dd203663a0bbe6f22a5f90ab79b39fd6fcb706f16021fc963eed1f821367cf79833128d2056d94ad77de15516c4982f633c9c47933179dc88d9332b21f8de129b385a08110f42d046f2167178dd17287a1e29216f7e4ed945a4e0ed20f7cc1619ac313e040ca7acc99d32841f7e7309d6566568bbe7e0e36cd62d8e57ef17398920f3e41513eb8cf7b9e7c7d72927056b6d552cbd15ba3935b880a155a9d8c96b6aa5779ddbffcf661f0110071dbbe28a12bc64ddc6536811423a736455c44d4c432838f303c0a94a1848ecfa31669d795ae0552ed39b81dfa359f25714b55b4453e486555956af31495dab5471222de4455d31a26329ac56398cad6d2674d0741a920925b9c39e21d0bf358023a641f9f5845e468318f381a505832432d5d4e792285d1236d3d8b54d006ac543865abb98ba32634ab0ef495fb54568c353003786c7eae9fb8d5f8582de8a1718dc4d37ade0fdf21722af3745a3b9e36c42a4005bbcfa64ba4ae5afe838e1370f405b2bb4cc82c23c2666417126289f84bd4d442b9bf351b3a31a5d8f6c421d86b99f32304854370da2651a331725ad342a38b42cf513475fccd103bfe48e7f5bb48e23441c39a073a3ce57c3cbbdc9a75012dc8b3e5f6b1922a72879aa4a5de1663a696dacb88bed088d0c7ca3a5c72d195209180c647e8fdbd2b9f0e042eec9fb7b67047426fcfcceaa2ec84fc190f0c022ff71b26120ef81a0ab243f0bc86498c1d297ba474141d517252577c12d410096f7f718c556731ad96cdd8670d7dd85a3757ca541e8ef743d597a7d8ad05677e7239b1f0be80cdf8644b5277f5dcefd3563dfdd4ce069b9b3c9867c467654373a2f3b042af9a086555520506b552d69a26f80bad30c8473aec481e05a27a406e88e4e31ecd99b76fdd422c63ced27b41079d0632f24db803bf390ba8e3aeba954d79c48695389ede95730b49002c46c9446ed5e548186390275f4ad05864b71de3a6482103648207d6b8a47eb3c3ca1266941f3ea474c0c8f7d55f7f239652aff5b5d51b1cc6769f036e4348adeee3284cf5e34b97a28b9118b3a9245fcb78366d60c7c0202eccc24c92fe846ef5ce34a45abd69037844792f2d5a793518cb1e5050ac0bd5b01eb1f2f6e0271f293ee89f1d84c47a8f204fa8cb6dfed959d38d9f769f2fa9b4f9ea586b725c1fbf2846c3c80dcc16f11b935cfd1529495c29f715ff5e902f6a407db8488cbfc6a2ca6312fa3895abe129417fa5ab384ae2af2514487edcd19e05d38ebd4fca5adadfec2814880a5379a8ab04d99683ef03027eb9741bb5d2ab22b15bec22ad1970738d0f2c88a3a708629153f0aea97fc45687ce003d7b31ecc7be8faaed5d414d696ad82f6f7444c6cbe71ee81b2e76fe989e542053555adfa666a1ed9a80588e3046d2fa3b188cf7ecc84235e19e1cef916f6a1b4717c093709ccc16fc91191a145b6baf2461c85b6bb13f884eda1fe3f6fbfd5740b41a95a2b700c9d2ff584b7b71b52b1c35c9a539ef78bd313d9af1bf5e7a1fe4ccac774c4ceeb7d09ceb79108afee7b80ffe759f9cd6dc688b6c2cc2573ddeee1fdb0f0b25469fedd2b093e8472190a3d3a44dbbb2cf10c59f94d7ac39e284878efddc8fc00e570cb9b6233de77cde9c9c6bc8e2db6b3696fcd0c1595225da04478b20720cf757508c5fdfd659bcb748eabc6d465f4ac3b089125de41580c06f383db06eb7e459f664fb565f7c7fdaad6e437927b306adaf8fd882bcf24ebc4e3d0dfb35a82a4a4be900f13fa03c5b5246a213e265a0ac967d2f12237ebf9680d1502bd6823c4d7ee1ca62b8d6dd4001902f232497fb17e755f5d138f702b3d028c64b62416ae406029eeaf55d8f1c96e429db5d9a8c6049f596aafa71278a4638fb40443d5dbb05de2b7d190b545d6a7b6f380965ff98db306763af7eebc5a8d93eca38eb2ed561d6803a6066b1fb47f2981f883b53a01922ea7bb23997ce9c7984c3feada8b037e5c8d2c04b576748011e1d2b378b7c55e61289b0dd5d1c0e465165b23a46dd92b6bcf8071c1a32a71b38a7b4ce090c809ae889d6ec581b487854fcebffa8d682772cddc0f710b9561a1966f1ed5d8f914146ab7b73c5feb67e0c494cb67156780a6ab86ee406d7c6a2b7b6a73a82c1ce3bec0370f914581125f1c5c53e52c259b0eea2a033ab483928dab3bc2972ebf7fea520e987d61bbb327df6e1b341e97529a25f3b1027722715ee9133812986127d003789497de371f0c4cf41fe8826e1a284c7f0cd6c62a2d330e80887733f5a22cebdec84279c752a0fdfd4d67cfc2af44a7cbf1a2d0f277034a97c77737db081b977365dbef2b062873bd6890426a0726d66ed6764b303651ebdb2766bdaedd2d788313a6a3b34f5796b691aee5c18405f2214aec4162c0cbcf0018917ae68ffe27f5045fa0952822a44cdfa6ef7df302dd0d0f87cfceeecc50fafbb106e75164fd816a37c974853f6a92600456a4847648492f852619a2246ee24b8ec075349cbc40a94bf0b1e52c329c29e91d24d2d1bc35c2cb15d42cd9338240f01034c6c0ed3b720f31a8077d8486aa183694ff354049d69618489ffaba4aae861f1794dab5e528acd76af3511243a5dcc756f126f40d7c5a4d0291304a735e1ab1fa410b5a746b063ec34f2fe066a44d5f22024848794cac4282ca54e3377d0ed645120c68273c2cdfe37eebc97ebe75b7a7f4f6bafd5c57a54d7d93de5d563ea4e1c371d68d814f1abecfea563fb103270b9194ff1938698d5b7a42d82d069b3ca8c7fa40ea0ff746cef6ad7f4db305e7884e93a42e5024142fbeba1b37f219a8819c9ace00a68c6197572b0c3bd586b47533ee910236d0bc598667122e0b27c9b505ad11461ef1460a8ec88f8296b957fbe0f41d3e125c7662657f977f7ccab116c35b7f2b0b547f9d596ca7e37cde6847a7849cfcbc7da49349addca36c83014aa959ed078626718029648f85b1c3fd9fbe4061a435962941866ebb85ebc1f9ab15c16df39ec1db6f51bd8c9e588a404cf92b255daf1f89d140ea6bb2fdd2fccf0c6456e0e6be5805ba99c30e7b8ba628df37f02939b34f5132680ef18156d6df88086f4f852a8eb459ba97fe45d8acbf1a0fe0d354477947e1de7aeea6e508c9387d73c75ba220dffc68402584d65ddbfd7fc6428ce0e9cdd2314546c4fad0ef93e6170a0a4f4f1a48326783c84473bfa87309a476e1cca7e9430633a2832591a2bc71b4a8ea940ba12d1db3ccf0f94dcaf7de5c32505406d64dc89824019fe7ea08e9219dc2f1ae8509cc77266c38a429a0687ea2db136e69ba57a39473b5c9bca506072475f229d2b4304ca7c32785c0f1a31c8cac4023b49846db147249222c7a811af026481e6dc8fae56ef8f6cc7cc20720bea495f838853fdd9e78bf071de666a76ce0c7814ed56115cb3477ec045cae2d870ef6e7f074e461848aa33b03952d18c6011e42a254abb4ce48add8067c05eb99d23d2ff4942de618f7d2edba64845be9931ab867c2351f3c06070b1180e6b073ae34fb24efafbd346b1b6fd855a6f27f6cc468b99bbff3bc7ca2d5e65ed36361af8cbcbe268fbdb26d3637217ef08af391a09c924f72b746d99eb72691c5aa1e36360e4e895a244ef999c1481bd1ee43792f5ab4459b8bae0b99ee8b8e274945b1e2b058a031be80deedc54ef7a11f0b04626a8965e63d2a58f8f9b84da74ce7e0cf8890e4d24b7471783d32e237b21dd2a6defc341aed946c6e2a1649b893676688ad8e053877b0201fca27fbed02753e41ef54e068bcbbf6b0668bbad313251184012f2b78dd98cc7f2145f1643454089f104c800a9635722a618b653962beff42a4a16dda8786c7e3c399647fa4ad65318edd813276705944dc18efc2336b63745b92d38532f228c5137f6871cd6ecba3ef94e7ee1b48da93faa7c87ee0b5cebe06c0b88d314a835c2ade459e688de063e6674624d5965f2c4037125254d26cd9826b0d3e29ac4f92c734aa69215c4f0632668ebedefaacd587310e6e6ecf3d46f19bf98c50867efb3dd49298318884dc3ae2c0240a02f48e864848ac2800d7bc5bbd9fa998b04ffa9bb62a0250377bec70a5ae98af4c6dcf4325013e7a1271d97d2cb4dc4eef245458230f7b565669151db74a7c6ee3e8c4396a907a8fdd989cab99bc840d3071c07d0b91c1f789174b56c56f782090c0524012e90de0e0943c43a8936b1f088ea456ec1c702988f70db06dac5349707d846085a0952e59435d7a140d6ec0ff2f5062b27f873f1422f4c33103e940676a14d9702d85f8dc55b3a454795972a5ec15978fd4e144f1c401605b7c7d5b79f86b52a6e431284abb00688a853c3ddd794cd6b4cb6e3be7ed254154902c6a2fb35aa4581b5adccf914a2b12063be34a161cadece800ddcb9395f09d4bfd38dd2954d18ca7f5f9d115418a51728de677392bb00538d39fc9a16"}) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) r2 = syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x17) ioctl$TCSBRKP(r2, 0x5425, 0x8000000000000001) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001140)={0x7ff, 0x915f, 0x7ff, 0xffff, 0xb, "fdc3ba7aaeca218f"}) 14:33:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "137e8eec9bb7dba9"}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x7, 0x0, 0x4, 0x0, 0x0, "b7a55d13aef481976c19807e1b8dea15cba403"}) 14:33:48 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xa, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x4, 0x6, 0x3}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x2c, 0x6, &(0x7f0000000440)}) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/177}) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r5 = syz_open_pts(r4, 0x608040) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x9, 0x9, 0x8001, 0x3, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r5, 0x5425, 0x4) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x4, 0x6, 0x3}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x2c, 0x6, &(0x7f0000000440)}) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/177}) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r5 = syz_open_pts(r4, 0x608040) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x9, 0x9, 0x8001, 0x3, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r5, 0x5425, 0x4) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x4, 0x6, 0x3}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000240)={0x2c, 0x6, &(0x7f0000000440)}) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/177}) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r5 = syz_open_pts(r4, 0x608040) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x9, 0x9, 0x8001, 0x3, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r5, 0x5425, 0x4) 14:33:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) syz_open_pts(r1, 0x654002) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xa, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xa, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000010c0)={0x1, 0x1000, &(0x7f00000000c0)=""/4096}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xa, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005c0c0)={{0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffff7, 0xff, 0x1ff, 0x1, 0x18, 0x0, 0x7, 0x7f, 0xffff, 0xb200}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005d0c0)={{0x0, 0x4, 0x4, 0x591, 0x7, 0x7ff, 0x7f, 0x6, 0xffff8583, 0x6, 0x1000, 0x7f, 0xbc3, 0x4, 0x77e}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e0c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005e2c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e6c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e049dcb150eafb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005f6c0)={0x7f80000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "2794a9ccb99f00"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000606c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r8}], 0x3, "b53e9def07a958"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000616c0)={{0x0, 0x4, 0x7fffffff, 0xcf, 0x3, 0x9f5f, 0x9, 0xacc, 0x2, 0x600, 0xfffffffd, 0x3, 0x4, 0x8, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000626c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000628c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "e9a3da24255a4f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000638c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063ac0)={0x152f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4, r5}, {r6, r7}, {r10}, {}, {0x0, r11}, {r13}, {r14}, {}, {}, {r15, r16}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x40, "59f9f6fd98d417"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3fe, 0x3, 0x7ffe, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005c0c0)={{0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffff7, 0xff, 0x1ff, 0x1, 0x18, 0x0, 0x7, 0x7f, 0xffff, 0xb200}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005d0c0)={{0x0, 0x4, 0x4, 0x591, 0x7, 0x7ff, 0x7f, 0x6, 0xffff8583, 0x6, 0x1000, 0x7f, 0xbc3, 0x4, 0x77e}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e0c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005e2c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e4c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e6c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e049dcb150eafb"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005f6c0)={0x7f80000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "2794a9ccb99f00"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000606c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r8}], 0x3, "b53e9def07a958"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000616c0)={{0x0, 0x4, 0x7fffffff, 0xcf, 0x3, 0x9f5f, 0x9, 0xacc, 0x2, 0x600, 0xfffffffd, 0x3, 0x4, 0x8, 0x5}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000626c0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000628c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "e9a3da24255a4f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000638c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063ac0)={0x152f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4, r5}, {r6, r7}, {r10}, {}, {0x0, r11}, {r13}, {r14}, {}, {}, {r15, r16}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x40, "59f9f6fd98d417"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3fe, 0x3, 0x7ffe, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40000) 14:33:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005c0c0)={{0x0, 0x0, 0x0, 0x0, 0x3f, 0xfffffffffffffff7, 0xff, 0x1ff, 0x1, 0x18, 0x0, 0x7, 0x7f, 0xffff, 0xb200}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000005d0c0)={{0x0, 0x4, 0x4, 0x591, 0x7, 0x7ff, 0x7f, 0x6, 0xffff8583, 0x6, 0x1000, 0x7f, 0xbc3, 0x4, 0x77e}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e0c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005e2c0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005e4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e6c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e049dcb150eafb"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005f6c0)={0x7f80000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "2794a9ccb99f00"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000606c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r8}], 0x3, "b53e9def07a958"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000616c0)={{0x0, 0x4, 0x7fffffff, 0xcf, 0x3, 0x9f5f, 0x9, 0xacc, 0x2, 0x600, 0xfffffffd, 0x3, 0x4, 0x8, 0x5}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000626c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000628c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "e9a3da24255a4f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000638c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063ac0)={0x152f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4, r5}, {r6, r7}, {r10}, {}, {0x0, r11}, {r13}, {r14}, {}, {}, {r15, r16}, {}, {}, {}, {}, {}, {}, {0x0, r17}], 0x40, "59f9f6fd98d417"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3fe, 0x3, 0x7ffe, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40000) (rerun: 64) 14:33:50 executing program 2: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40000) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40000) (async) 14:33:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x76002) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 14:33:51 executing program 2: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:33:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x2, 0x5, 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 14:33:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x2, 0x5, 0x0, 0x0) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 14:33:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x76002) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 2: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/27}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x2, 0x5, 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 14:33:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "000000000000ffff"}) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x400000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x1f, 0xe5, 0x5, 0x3, 0xf1, "72ad0b320454ee4d489e52fee307bed5c91322", 0x79, 0x2}) 14:33:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "000000000000ffff"}) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x400000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x1f, 0xe5, 0x5, 0x3, 0xf1, "72ad0b320454ee4d489e52fee307bed5c91322", 0x79, 0x2}) 14:33:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x2, 0x5, 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 14:33:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r2, 0x121000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3ff, 0x8, 0x7, 0x7, 0x2}}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = getpid() prlimit64(r4, 0xb, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r4) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r5 = syz_open_pts(r2, 0x10000) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x4, 0x101, 0x20, 0x4, 0x16, "eb7e9f1e6d520a05"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:33:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "000000000000ffff"}) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x400000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x1f, 0xe5, 0x5, 0x3, 0xf1, "72ad0b320454ee4d489e52fee307bed5c91322", 0x79, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "000000000000ffff"}) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x400000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x1f, 0xe5, 0x5, 0x3, 0xf1, "72ad0b320454ee4d489e52fee307bed5c91322", 0x79, 0x2}) (async) 14:33:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40015) 14:33:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40015) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40015) (async) 14:33:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x40015) 14:33:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x3e, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4acc56f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x2, 0x400, 0x9, 0x8001, 0xc, "00f4ffffff000008"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/230) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ptrace(0x8, r4) 14:33:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2826a7cc, 0xf8d4, 0x3f, 0x3, 0xa2, "f3865f0595d1591373b78766477b927410291c", 0x400, 0x200}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0x53, 0x0, &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2826a7cc, 0xf8d4, 0x3f, 0x3, 0xa2, "f3865f0595d1591373b78766477b927410291c", 0x400, 0x200}) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0x53, 0x0, &(0x7f0000000080)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x3, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x8001, 0x95bf, 0x8, 0x1, 0x3, "fd403745b681c0f7"}) write$sysctl(r3, &(0x7f0000000100)='1\x00', 0x2) 14:33:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) r4 = getpid() prlimit64(r4, 0xb, &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 64) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r4) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) r5 = syz_open_pts(r2, 0x10000) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x4, 0x101, 0x20, 0x4, 0x16, "eb7e9f1e6d520a05"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:33:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = getpid() prlimit64(r4, 0xb, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r4) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r5 = syz_open_pts(r2, 0x10000) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x4, 0x101, 0x20, 0x4, 0x16, "eb7e9f1e6d520a05"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:33:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bb00000000d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x3e, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4acc56f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x2, 0x400, 0x9, 0x8001, 0xc, "00f4ffffff000008"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/230) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ptrace(0x8, r4) 14:33:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x2826a7cc, 0xf8d4, 0x3f, 0x3, 0xa2, "f3865f0595d1591373b78766477b927410291c", 0x400, 0x200}) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0x53, 0x0, &(0x7f0000000080)}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bb00000000d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bb00000000d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:33:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x3e, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4acc56f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x2, 0x400, 0x9, 0x8001, 0xc, "00f4ffffff000008"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/230) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ptrace(0x8, r4) 14:33:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x3, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x8001, 0x95bf, 0x8, 0x1, 0x3, "fd403745b681c0f7"}) write$sysctl(r3, &(0x7f0000000100)='1\x00', 0x2) 14:33:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:33:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x3, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x8001, 0x95bf, 0x8, 0x1, 0x3, "fd403745b681c0f7"}) write$sysctl(r3, &(0x7f0000000100)='1\x00', 0x2) 14:33:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:33:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x1ff, 0x2a, 0x8, 0xad, 0x0, "dde256b84a56e1c7ec036db5335bcc0897866e", 0x400, 0x4}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x1ff, 0x2a, 0x8, 0xad, 0x0, "dde256b84a56e1c7ec036db5335bcc0897866e", 0x400, 0x4}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x1ff, 0x2a, 0x8, 0xad, 0x0, "dde256b84a56e1c7ec036db5335bcc0897866e", 0x400, 0x4}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:33:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x1ff, 0x2a, 0x8, 0xad, 0x0, "dde256b84a56e1c7ec036db5335bcc0897866e", 0x400, 0x4}) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bb00000000d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCGPTPEER(r3, 0x5441, 0x100000000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x80000001, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x593) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) 14:33:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCGPTPEER(r3, 0x5441, 0x100000000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x80000001, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x593) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) 14:33:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000200)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffff80, 0x80) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TCSBRKP(r2, 0x5425, 0x4) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) r5 = syz_open_pts(r1, 0x101100) ioctl$VT_ACTIVATE(r5, 0x5606, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)='#\xcb&#\x00'}, 0x30) 14:33:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000200)) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffff80, 0x80) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) (async) r5 = syz_open_pts(r1, 0x101100) ioctl$VT_ACTIVATE(r5, 0x5606, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)='#\xcb&#\x00'}, 0x30) 14:33:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async, rerun: 64) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (rerun: 64) ioctl$TIOCGPTPEER(r3, 0x5441, 0x100000000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x80000001, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x593) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) 14:33:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000200)) (async, rerun: 64) r2 = syz_open_pts(r0, 0x541080) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 64) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0xffffffffffffff80, 0x80) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$TCSBRKP(r2, 0x5425, 0x4) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) r5 = syz_open_pts(r1, 0x101100) ioctl$VT_ACTIVATE(r5, 0x5606, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140)='#\xcb&#\x00'}, 0x30) 14:33:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:55 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000300)=0xff) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x5, 0xfffffffd, 0x9, 0x2, 0x15, "328345a73f57269fc1f55e90d88358dc323e28"}) ioctl$TCSBRKP(r2, 0x5425, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000000c0)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4006001}, 0x4004014) 14:33:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14000}, 0x48000) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) 14:33:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) r2 = syz_open_pts(r0, 0x541080) (rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14000}, 0x48000) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) 14:33:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14000}, 0x48000) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14000}, 0x48000) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000000c0)) (async) 14:33:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000300)=0xff) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x5, 0xfffffffd, 0x9, 0x2, 0x15, "328345a73f57269fc1f55e90d88358dc323e28"}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000000c0)) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4006001}, 0x4004014) 14:33:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000300)=0xff) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x5, 0xfffffffd, 0x9, 0x2, 0x15, "328345a73f57269fc1f55e90d88358dc323e28"}) ioctl$TCSBRKP(r2, 0x5425, 0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000000c0)) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4006001}, 0x4004014) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000300)=0xff) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x5, 0xfffffffd, 0x9, 0x2, 0x15, "328345a73f57269fc1f55e90d88358dc323e28"}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4006001}, 0x4004014) (async) 14:33:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x101, 0x1000, 0x401}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x101, 0x1000, 0x401}}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x101, 0x1000, 0x401}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3f, 0x5d60, 0x1b, "3300a0b065f5ac3b6f0000000000000000b300"}) ioctl$TCSBRKP(r2, 0x5425, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0x9, "dd6e3c1e885327e7"}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3f, 0x5d60, 0x1b, "3300a0b065f5ac3b6f0000000000000000b300"}) ioctl$TCSBRKP(r2, 0x5425, 0x2) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0x9, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3f, 0x5d60, 0x1b, "3300a0b065f5ac3b6f0000000000000000b300"}) ioctl$TCSBRKP(r2, 0x5425, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0x9, "dd6e3c1e885327e7"}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x84800) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3f, 0x5d60, 0x1b, "3300a0b065f5ac3b6f0000000000000000b300"}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x2) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0x9, "dd6e3c1e885327e7"}) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x0, 0x40, 0x8001}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d5c, 0x1a, "220028b065f5bbf8c4ac3f6f00"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x7) (async) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xa) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xa) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xa) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:33:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:33:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xa) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0x8) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:33:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x0, 0x40, 0x8001}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d5c, 0x1a, "220028b065f5bbf8c4ac3f6f00"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSBRKP(r0, 0x5425, 0x7) (async) syz_open_pts(r0, 0x4000) (async) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:33:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x0, 0x40, 0x8001}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d5c, 0x1a, "220028b065f5bbf8c4ac3f6f00"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) 14:33:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6801, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) 14:33:59 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6801, 0x0) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:33:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$TCSBRKP(r2, 0x5425, 0x4) (rerun: 64) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000000c0)) 14:34:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6801, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0x100) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x2, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x6801, 0x0) (async) ioctl$VT_ACTIVATE(r3, 0x5606, 0x100) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:00 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDSETLED(r7, 0x4b32, 0xd80) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) r3 = syz_open_pts(0xffffffffffffffff, 0x309080) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x2, 0x3, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x48080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x400, 0x7, 0x0, 0x10}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) r3 = syz_open_pts(0xffffffffffffffff, 0x309080) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x2, 0x3, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:00 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDSETLED(r7, 0x4b32, 0xd80) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) (async) syz_open_pts(r3, 0x4000) (async) syz_open_pts(r3, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r6, 0x5425, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) (async) ioctl$KDSETLED(r7, 0x4b32, 0xd80) (async) 14:34:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:01 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) r3 = syz_open_pts(0xffffffffffffffff, 0x309080) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x2, 0x3, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) (async) syz_open_pts(0xffffffffffffffff, 0x309080) (async) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x2, 0x3, 0x81}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) (async) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x48080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x400, 0x7, 0x0, 0x10}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:01 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) (async) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) (async) ioctl$KDSETLED(r7, 0x4b32, 0xd80) 14:34:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000100)='\x00') ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$KDADDIO(r2, 0x4b34, 0xffd) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000700800000008000000001480000e010670000012f9070ffffffffe0f1ff00891305ffffffff0a0101027f000001ffffffff8913ac1e0101e0000002443c2281640101010000d63c55c0608400097f00000100000069ffff00000000000004be7f000001000000070000000000009f60014414e1e1ffff66f4642e0546088f5c2375499fc387ffff000100007f000101000000084424c68300000000000000806401010100000004ac1414bb0000f754ac1414bb000000017209e0c4a5dcf56dec891f3ae00000020a0101006401010100000000e0000802e0000002ff"]}) 14:34:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x48080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x3, 0x400, 0x7, 0x0, 0x10}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000100)='\x00') (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$KDADDIO(r2, 0x4b34, 0xffd) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000700800000008000000001480000e010670000012f9070ffffffffe0f1ff00891305ffffffff0a0101027f000001ffffffff8913ac1e0101e0000002443c2281640101010000d63c55c0608400097f00000100000069ffff00000000000004be7f000001000000070000000000009f60014414e1e1ffff66f4642e0546088f5c2375499fc387ffff000100007f000101000000084424c68300000000000000806401010100000004ac1414bb0000f754ac1414bb000000017209e0c4a5dcf56dec891f3ae00000020a0101006401010100000000e0000802e0000002ff"]}) 14:34:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfdff, 0x400, 0x9, 0x8001, 0x15, "dd6e3c1e885327e7"}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000015) 14:34:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfdff, 0x400, 0x9, 0x8001, 0x15, "dd6e3c1e885327e7"}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000015) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfdff, 0x400, 0x9, 0x8001, 0x15, "dd6e3c1e885327e7"}) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000015) (async) 14:34:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x301000, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000100)='\x00') (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$KDADDIO(r2, 0x4b34, 0xffd) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000700800000008000000001480000e010670000012f9070ffffffffe0f1ff00891305ffffffff0a0101027f000001ffffffff8913ac1e0101e0000002443c2281640101010000d63c55c0608400097f00000100000069ffff00000000000004be7f000001000000070000000000009f60014414e1e1ffff66f4642e0546088f5c2375499fc387ffff000100007f000101000000084424c68300000000000000806401010100000004ac1414bb0000f754ac1414bb000000017209e0c4a5dcf56dec891f3ae00000020a0101006401010100000000e0000802e0000002ff"]}) (rerun: 64) 14:34:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfdff, 0x400, 0x9, 0x8001, 0x15, "dd6e3c1e885327e7"}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000015) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfdff, 0x400, 0x9, 0x8001, 0x15, "dd6e3c1e885327e7"}) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000015) (async) 14:34:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) 14:34:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x9, 0x8004, 0x14, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0x79, &(0x7f00000000c0)=""/121}) 14:34:03 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) (async) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) (async) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) 14:34:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x9, 0x8004, 0x14, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0x79, &(0x7f00000000c0)=""/121}) 14:34:04 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) (async) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x9, 0x8004, 0x14, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0x79, &(0x7f00000000c0)=""/121}) 14:34:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) 14:34:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x9, 0x8004, 0x14, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0x79, &(0x7f00000000c0)=""/121}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x9, 0x8004, 0x14, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0x79, &(0x7f00000000c0)=""/121}) (async) 14:34:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$TCSBRKP(r0, 0x5425, 0xcd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x719, 0x4, 0xde, 0xfd7, 0x15, "9c1b9452e2726a79"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xccf, 0x2, 0x9, 0x80000000, 0x3, "88bfc33b55422d89deec299f47c944496cd2d9", 0x1, 0x1}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x5, 0xffff, 0x2, 0x800, 0x10, "ae7c2ad54ed9f9e3"}) 14:34:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x6, 0x400, 0x9, 0x8041, 0x12}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = syz_open_pts(r0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) (async) ioctl$TCSBRKP(r0, 0x5425, 0xcd) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) (async, rerun: 64) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x719, 0x4, 0xde, 0xfd7, 0x15, "9c1b9452e2726a79"}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xccf, 0x2, 0x9, 0x80000000, 0x3, "88bfc33b55422d89deec299f47c944496cd2d9", 0x1, 0x1}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x5, 0xffff, 0x2, 0x800, 0x10, "ae7c2ad54ed9f9e3"}) 14:34:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x6, 0x400, 0x9, 0x8041, 0x12}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (rerun: 64) 14:34:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x6, 0x400, 0x9, 0x8041, 0x12}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x6, 0x400, 0x9, 0x8041, 0x12}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000200)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) (async) ioctl$TCSBRKP(r0, 0x5425, 0xcd) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x719, 0x4, 0xde, 0xfd7, 0x15, "9c1b9452e2726a79"}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0xccf, 0x2, 0x9, 0x80000000, 0x3, "88bfc33b55422d89deec299f47c944496cd2d9", 0x1, 0x1}) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x5, 0xffff, 0x2, 0x800, 0x10, "ae7c2ad54ed9f9e3"}) 14:34:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x480000) syz_open_pts(r3, 0x4000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) 14:34:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff4d) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x89, 0xe9, 0x1b, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) 14:34:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xc) 14:34:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) r3 = syz_open_pts(r2, 0x480000) syz_open_pts(r3, 0x4000) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (rerun: 32) 14:34:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff4d) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x89, 0xe9, 0x1b, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff4d) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x89, 0xe9, 0x1b, 0x8}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) 14:34:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x480000) syz_open_pts(r3, 0x4000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) syz_open_pts(r2, 0x480000) (async) syz_open_pts(r3, 0x4000) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) 14:34:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff4d) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x89, 0xe9, 0x1b, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) 14:34:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0xfffe, 0x2ff4, 0x3ff, 0x8000, 0x14, "28d1fe55187ac3f5"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "009e3200"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:05 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000200)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair(0xf, 0x800, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2502000000764952730100000214000100fc0000000000000000000005000600040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 14:34:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async, rerun: 32) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (rerun: 32) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0xfffe, 0x2ff4, 0x3ff, 0x8000, 0x14, "28d1fe55187ac3f5"}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "009e3200"}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:05 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async, rerun: 64) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000200)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socketpair(0xf, 0x800, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2502000000764952730100000214000100fc0000000000000000000005000600040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 14:34:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:06 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000200)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair(0xf, 0x800, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2502000000764952730100000214000100fc0000000000000000000005000600040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000200)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socketpair(0xf, 0x800, 0x3ff, &(0x7f0000000080)) (async) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2502000000764952730100000214000100fc0000000000000000000005000600040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) 14:34:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) syz_open_dev$ttys(0xc, 0x2, 0x1) 14:34:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 14:34:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 64) r2 = syz_open_pts(r0, 0x541080) (async, rerun: 64) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000100)={0xfffe, 0x2ff4, 0x3ff, 0x8000, 0x14, "28d1fe55187ac3f5"}) (async, rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 64) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "009e3200"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) 14:34:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xfc9, 0x0, 0xc1f, 0x6, "a4ee1986fcea281b"}) 14:34:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x3) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000180)) ioctl$TCSBRKP(r0, 0x5425, 0x4) 14:34:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x3) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000100)) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000180)) ioctl$TCSBRKP(r0, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000140)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x3) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000180)) (async) ioctl$TCSBRKP(r0, 0x5425, 0x4) (async) 14:34:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000140)) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x3) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000100)) (async, rerun: 64) syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000180)) (async) ioctl$TCSBRKP(r0, 0x5425, 0x4) 14:34:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TCSBRKP(r3, 0x5425, 0x3) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xfc9, 0x0, 0xc1f, 0x6, "a4ee1986fcea281b"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xfc9, 0x0, 0xc1f, 0x6, "a4ee1986fcea281b"}) (async) 14:34:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xfc9, 0x0, 0xc1f, 0x6, "a4ee1986fcea281b"}) 14:34:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) 14:34:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) r2 = syz_open_pts(r0, 0x541080) (rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0x20, 0xffff0001, 0x200}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x2, 0x1, 0x80, 0xb7, 0x6, "4763f4d65fb83fc2"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0x20, 0xffff0001, 0x200}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x2, 0x1, 0x80, 0xb7, 0x6, "4763f4d65fb83fc2"}) (async, rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (rerun: 64) 14:34:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000100)={0x20, 0xffff0001, 0x200}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x2, 0x1, 0x80, 0xb7, 0x6, "4763f4d65fb83fc2"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/196) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x15d60, 0xc, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0xed1, 0x7ff, 0xf, 0x4, 0x4}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x9, 0x1, 0x5, 0x8, 0xa, "3499466ebfbf40b8"}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000140)={{@local, 0x8000}, 0x1, 0x2, 0x0, 0x7}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0xff) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 14:34:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/196) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x15d60, 0xc, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0xed1, 0x7ff, 0xf, 0x4, 0x4}}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x9, 0x1, 0x5, 0x8, 0xa, "3499466ebfbf40b8"}) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000140)={{@local, 0x8000}, 0x1, 0x2, 0x0, 0x7}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0xff) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 14:34:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/196) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x15d60, 0xc, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0xed1, 0x7ff, 0xf, 0x4, 0x4}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x9, 0x1, 0x5, 0x8, 0xa, "3499466ebfbf40b8"}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000140)={{@local, 0x8000}, 0x1, 0x2, 0x0, 0x7}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0xff) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) syz_open_pts(0xffffffffffffffff, 0x0) (async) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000180)=""/196) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x15d60, 0xc, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0xed1, 0x7ff, 0xf, 0x4, 0x4}}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000300)={0x9, 0x1, 0x5, 0x8, 0xa, "3499466ebfbf40b8"}) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x40042, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000140)={{@local, 0x8000}, 0x1, 0x2, 0x0, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) (async) ioctl$KDSETLED(r6, 0x4b32, 0xff) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) (async) 14:34:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x0, 0x4}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x0, 0x4}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x0, 0x4}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x0, 0x4}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:09 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) 14:34:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x1, 0x9, 0x10001}) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x4, 0x7, 0x4, 0x5}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 0: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x1, 0x9, 0x10001}) (async) r2 = syz_open_pts(r0, 0x4000) (async) r3 = syz_open_pts(r0, 0x541080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x4, 0x7, 0x4, 0x5}) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 0: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x1, 0x9, 0x10001}) (async) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x4, 0x7, 0x4, 0x5}) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/32) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_ACTIVATE(r0, 0x5606, 0xff) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:11 executing program 0: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) (async) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) (async) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:11 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair(0x25, 0x5, 0x1ff, 0x0) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x7, 0x100, 0x7d93, 0x2, 0x0, "ef103d9d0c22e6cf77b2f141bb6c84d864004d", 0x7, 0xdd0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:11 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair(0x25, 0x5, 0x1ff, 0x0) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x7, 0x100, 0x7d93, 0x2, 0x0, "ef103d9d0c22e6cf77b2f141bb6c84d864004d", 0x7, 0xdd0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socketpair(0x25, 0x5, 0x1ff, 0x0) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x7, 0x100, 0x7d93, 0x2, 0x0, "ef103d9d0c22e6cf77b2f141bb6c84d864004d", 0x7, 0xdd0}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) 14:34:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:11 executing program 2: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair(0x25, 0x5, 0x1ff, 0x0) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x7, 0x100, 0x7d93, 0x2, 0x0, "ef103d9d0c22e6cf77b2f141bb6c84d864004d", 0x7, 0xdd0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socketpair(0x25, 0x5, 0x1ff, 0x0) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x7, 0x100, 0x7d93, 0x2, 0x0, "ef103d9d0c22e6cf77b2f141bb6c84d864004d", 0x7, 0xdd0}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) 14:34:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000100)) (async) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/32) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x20009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x95, 0x7, 0x2, 0xffffff81, 0x6, "2c5ce0aaaa36fa489f5b661e0b707b5c46fed4"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x400, 0x7, 0x3ff, 0x1}}) 14:34:12 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x95, 0x7, 0x2, 0xffffff81, 0x6, "2c5ce0aaaa36fa489f5b661e0b707b5c46fed4"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x400, 0x7, 0x3ff, 0x1}}) 14:34:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x95, 0x7, 0x2, 0xffffff81, 0x6, "2c5ce0aaaa36fa489f5b661e0b707b5c46fed4"}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x400, 0x7, 0x3ff, 0x1}}) 14:34:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x90000) ioctl$KDADDIO(r1, 0x4b34, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 14:34:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) r2 = syz_open_pts(r0, 0x541080) (rerun: 32) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (rerun: 32) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x20009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x90000) ioctl$KDADDIO(r1, 0x4b34, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 14:34:13 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x20009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) 14:34:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x4, 0x3}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x5d60, 0x18, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDADDIO(r1, 0x4b34, 0xb3e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) syz_open_pts(r4, 0x82400) 14:34:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x4, 0x3}) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) (async) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x5d60, 0x18, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KDADDIO(r1, 0x4b34, 0xb3e) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) syz_open_pts(r4, 0x82400) 14:34:13 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:13 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x4, 0x3}) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) r2 = syz_open_pts(r1, 0x4000) (async, rerun: 64) r3 = syz_open_pts(r1, 0x541080) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x5d60, 0x18, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (rerun: 64) ioctl$KDADDIO(r1, 0x4b34, 0xb3e) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) syz_open_pts(r4, 0x82400) 14:34:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = syz_open_pts(0xffffffffffffffff, 0x90000) ioctl$KDADDIO(r1, 0x4b34, 0x2) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) 14:34:14 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:14 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/171}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 14:34:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 14:34:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) (async) r2 = syz_open_pts(r0, 0x4000) (async) r3 = syz_open_pts(r0, 0x541080) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) 14:34:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 14:34:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 14:34:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) (async) 14:34:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:15 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) 14:34:15 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/168}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) 14:34:15 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) 14:34:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0xffff, 0x3ff, 0x10000000, 0xff, 0x6, "97f9528835c87677b7b74ba2a49e99754488ac"}) 14:34:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/168}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/168}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0xffff, 0x3ff, 0x10000000, 0xff, 0x6, "97f9528835c87677b7b74ba2a49e99754488ac"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0xffff, 0x3ff, 0x10000000, 0xff, 0x6, "97f9528835c87677b7b74ba2a49e99754488ac"}) (async) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0xffff, 0x3ff, 0x10000000, 0xff, 0x6, "97f9528835c87677b7b74ba2a49e99754488ac"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0xffff, 0x3ff, 0x10000000, 0xff, 0x6, "97f9528835c87677b7b74ba2a49e99754488ac"}) (async) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x77, 0x200000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x2040) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4}) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x77, 0x200000) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x2040) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4}) 14:34:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/168}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:16 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x16) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:16 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:16 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x16) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x16) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x16) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x16) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:17 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 0: syz_open_dev$sg(&(0x7f0000000040), 0x77, 0x200000) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x2, 0x2040) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000140)) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4}) 14:34:17 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:17 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1}) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x40) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 14:34:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:18 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = syz_open_pts(r0, 0x40) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) 14:34:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1}) (rerun: 32) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000000c0)=0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250100000034000180060005004e21000008000700", @ANYRES32=r7, @ANYBLOB="060005004e2200000800060006000000050002000900000008000300ac1414aa4c00018014000400fc00000000000000000000000000000114000400fe88000000000000000000000000000105000200040000000500020009000000050002000600000005000200c40000004000018014000400fc000000000000000000000000000000060005004e210000050002000500000008000300e0000002080006000200000008000700", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16], 0xd4}}, 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:18 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000000c0)=0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250100000034000180060005004e21000008000700", @ANYRES32=r7, @ANYBLOB="060005004e2200000800060006000000050002000900000008000300ac1414aa4c00018014000400fc00000000000000000000000000000114000400fe88000000000000000000000000000105000200040000000500020009000000050002000600000005000200c40000004000018014000400fc000000000000000000000000000000060005004e210000050002000500000008000300e0000002080006000200000008000700", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16], 0xd4}}, 0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) (async) 14:34:18 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:18 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) 14:34:18 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000100)={0x5, 0x12f, 0x0, 0x1c0000000000000, 0x3f}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:18 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x40) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) syz_open_pts(r0, 0x40) (async) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) (async) 14:34:19 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000100)={0x5, 0x12f, 0x0, 0x1c0000000000000, 0x3f}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000100)={0x5, 0x12f, 0x0, 0x1c0000000000000, 0x3f}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:19 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000100)={0x5, 0x12f, 0x0, 0x1c0000000000000, 0x3f}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:19 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:19 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000000c0)=0x1) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf250100000034000180060005004e21000008000700", @ANYRES32=r7, @ANYBLOB="060005004e2200000800060006000000050002000900000008000300ac1414aa4c00018014000400fc00000000000000000000000000000114000400fe88000000000000000000000000000105000200040000000500020009000000050002000600000005000200c40000004000018014000400fc000000000000000000000000000000060005004e210000050002000500000008000300e0000002080006000200000008000700", @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES16], 0xd4}}, 0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:19 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:20 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 2: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 2: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) r2 = syz_open_pts(r0, 0x541080) (rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 2: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x3) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x3e, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x3e, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x3e, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:20 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:21 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:21 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) r4 = syz_open_pts(r0, 0xc0000) syz_open_pts(r4, 0x301802) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$KDSETLED(r5, 0x4b32, 0x1ff) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4f77) 14:34:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:22 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:22 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:22 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (rerun: 64) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) 14:34:22 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x4000) (async) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:22 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) (async) r4 = syz_open_pts(r0, 0xc0000) syz_open_pts(r4, 0x301802) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async, rerun: 32) ioctl$KDSETLED(r5, 0x4b32, 0x1ff) (async, rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4f77) 14:34:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="5ec7180e8f80c5eb53514a547b0d63c4ca59cf31da5fa37b8ac97410d7db52093a47df245b9fe0d8c0f47093efbd63165b585a2cf81dcac3881cee3faeb9c4d05582fe1fb5780626d6895db3bb7ecbabdd4a34b244349d47c2765b03ba0a089c393092ff3849ec3dbcdecb092da66aaf1059bf6239d3f9a3e838bf7aae42545f92e1ee4a66b7b73a686c3459481118539dcf5ac1b7255e77ae0ca280d5afb36d352cd2c4fe008bf9607f3d5f220dc58e2c99bd0584c15ae948a39016315a00e318051c8ad8680a183fa1", 0xca}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = syz_open_pts(0xffffffffffffffff, 0x80000) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r4) 14:34:23 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="5ec7180e8f80c5eb53514a547b0d63c4ca59cf31da5fa37b8ac97410d7db52093a47df245b9fe0d8c0f47093efbd63165b585a2cf81dcac3881cee3faeb9c4d05582fe1fb5780626d6895db3bb7ecbabdd4a34b244349d47c2765b03ba0a089c393092ff3849ec3dbcdecb092da66aaf1059bf6239d3f9a3e838bf7aae42545f92e1ee4a66b7b73a686c3459481118539dcf5ac1b7255e77ae0ca280d5afb36d352cd2c4fe008bf9607f3d5f220dc58e2c99bd0584c15ae948a39016315a00e318051c8ad8680a183fa1", 0xca}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = syz_open_pts(0xffffffffffffffff, 0x80000) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="5ec7180e8f80c5eb53514a547b0d63c4ca59cf31da5fa37b8ac97410d7db52093a47df245b9fe0d8c0f47093efbd63165b585a2cf81dcac3881cee3faeb9c4d05582fe1fb5780626d6895db3bb7ecbabdd4a34b244349d47c2765b03ba0a089c393092ff3849ec3dbcdecb092da66aaf1059bf6239d3f9a3e838bf7aae42545f92e1ee4a66b7b73a686c3459481118539dcf5ac1b7255e77ae0ca280d5afb36d352cd2c4fe008bf9607f3d5f220dc58e2c99bd0584c15ae948a39016315a00e318051c8ad8680a183fa1", 0xca}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) syz_open_pts(0xffffffffffffffff, 0x80000) (async) getpid() (async) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r4) (async) 14:34:23 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) (async) r4 = syz_open_pts(r0, 0xc0000) syz_open_pts(r4, 0x301802) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async, rerun: 32) ioctl$KDSETLED(r5, 0x4b32, 0x1ff) (rerun: 32) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4f77) 14:34:23 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000051840)={{0x0, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0xf5, 0x53bc, 0x0, 0xc000, 0x7, 0x81, 0x0, 0x9, 0x4, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052840)={{0x0, 0xf7, 0x9, 0x2, 0x5, 0x5, 0x3ff, 0xfffffffe, 0x0, 0xfffffff9, 0x8, 0x40, 0x3f, 0xdb5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053840)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x92, "d9bf68edb88f6d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054840)={{0x0, 0xfffffffffffffffe, 0xe169, 0x1, 0x5, 0x6, 0x2, 0x80, 0x7, 0x0, 0x5, 0x39ae961d, 0x5, 0x101, 0x14}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c40)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "9ed2906cd24d04"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "f2c659f6c3baa9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000057c40)={{0x0, 0xfe73, 0x6, 0x2, 0x401, 0x0, 0x9, 0x7, 0x9, 0x3, 0x0, 0xfb9, 0x7f, 0x20, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058c40)={{0x0, 0x3ff, 0x7, 0x4, 0x6, 0x5, 0x0, 0x8001, 0xa0000000, 0x5c, 0x9, 0x8, 0xa8, 0x7f, 0x9bd}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005a240)={{0x0, 0x0, 0x9, 0x33e3e87f, 0x84d, 0x6, 0x1, 0x40, 0x2, 0x65f, 0x6, 0x5, 0x0, 0x80, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "252de0365342ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0xa6fc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "78c6db609c66cd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d440)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {r9}, {r10, r11}, {}, {0x0, r12}, {r13}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}], 0x40, "87d059dad0cb1c"}) 14:34:24 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000000c0)="5ec7180e8f80c5eb53514a547b0d63c4ca59cf31da5fa37b8ac97410d7db52093a47df245b9fe0d8c0f47093efbd63165b585a2cf81dcac3881cee3faeb9c4d05582fe1fb5780626d6895db3bb7ecbabdd4a34b244349d47c2765b03ba0a089c393092ff3849ec3dbcdecb092da66aaf1059bf6239d3f9a3e838bf7aae42545f92e1ee4a66b7b73a686c3459481118539dcf5ac1b7255e77ae0ca280d5afb36d352cd2c4fe008bf9607f3d5f220dc58e2c99bd0584c15ae948a39016315a00e318051c8ad8680a183fa1", 0xca}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = syz_open_pts(0xffffffffffffffff, 0x80000) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000200)=r4) 14:34:24 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:24 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000051840)={{0x0, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0xf5, 0x53bc, 0x0, 0xc000, 0x7, 0x81, 0x0, 0x9, 0x4, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052840)={{0x0, 0xf7, 0x9, 0x2, 0x5, 0x5, 0x3ff, 0xfffffffe, 0x0, 0xfffffff9, 0x8, 0x40, 0x3f, 0xdb5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053840)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x92, "d9bf68edb88f6d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054840)={{0x0, 0xfffffffffffffffe, 0xe169, 0x1, 0x5, 0x6, 0x2, 0x80, 0x7, 0x0, 0x5, 0x39ae961d, 0x5, 0x101, 0x14}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c40)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "9ed2906cd24d04"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "f2c659f6c3baa9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000057c40)={{0x0, 0xfe73, 0x6, 0x2, 0x401, 0x0, 0x9, 0x7, 0x9, 0x3, 0x0, 0xfb9, 0x7f, 0x20, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058c40)={{0x0, 0x3ff, 0x7, 0x4, 0x6, 0x5, 0x0, 0x8001, 0xa0000000, 0x5c, 0x9, 0x8, 0xa8, 0x7f, 0x9bd}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005a240)={{0x0, 0x0, 0x9, 0x33e3e87f, 0x84d, 0x6, 0x1, 0x40, 0x2, 0x65f, 0x6, 0x5, 0x0, 0x80, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "252de0365342ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0xa6fc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "78c6db609c66cd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d440)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {r9}, {r10, r11}, {}, {0x0, r12}, {r13}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}], 0x40, "87d059dad0cb1c"}) 14:34:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000051840)={{0x0, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0xf5, 0x53bc, 0x0, 0xc000, 0x7, 0x81, 0x0, 0x9, 0x4, 0x7}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052840)={{0x0, 0xf7, 0x9, 0x2, 0x5, 0x5, 0x3ff, 0xfffffffe, 0x0, 0xfffffff9, 0x8, 0x40, 0x3f, 0xdb5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053840)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x92, "d9bf68edb88f6d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054840)={{0x0, 0xfffffffffffffffe, 0xe169, 0x1, 0x5, 0x6, 0x2, 0x80, 0x7, 0x0, 0x5, 0x39ae961d, 0x5, 0x101, 0x14}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055a40)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c40)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "9ed2906cd24d04"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "f2c659f6c3baa9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000057c40)={{0x0, 0xfe73, 0x6, 0x2, 0x401, 0x0, 0x9, 0x7, 0x9, 0x3, 0x0, 0xfb9, 0x7f, 0x20, 0x5}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058c40)={{0x0, 0x3ff, 0x7, 0x4, 0x6, 0x5, 0x0, 0x8001, 0xa0000000, 0x5c, 0x9, 0x8, 0xa8, 0x7f, 0x9bd}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059e40)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005a240)={{0x0, 0x0, 0x9, 0x33e3e87f, 0x84d, 0x6, 0x1, 0x40, 0x2, 0x65f, 0x6, 0x5, 0x0, 0x80, 0x401}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "252de0365342ec"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0xa6fc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "78c6db609c66cd"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d440)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {r9}, {r10, r11}, {}, {0x0, r12}, {r13}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}], 0x40, "87d059dad0cb1c"}) 14:34:24 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000051840)={{0x0, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0xf5, 0x53bc, 0x0, 0xc000, 0x7, 0x81, 0x0, 0x9, 0x4, 0x7}}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052840)={{0x0, 0xf7, 0x9, 0x2, 0x5, 0x5, 0x3ff, 0xfffffffe, 0x0, 0xfffffff9, 0x8, 0x40, 0x3f, 0xdb5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053840)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x92, "d9bf68edb88f6d"}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054840)={{0x0, 0xfffffffffffffffe, 0xe169, 0x1, 0x5, 0x6, 0x2, 0x80, 0x7, 0x0, 0x5, 0x39ae961d, 0x5, 0x101, 0x14}}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055a40)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c40)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "9ed2906cd24d04"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "f2c659f6c3baa9"}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000057c40)={{0x0, 0xfe73, 0x6, 0x2, 0x401, 0x0, 0x9, 0x7, 0x9, 0x3, 0x0, 0xfb9, 0x7f, 0x20, 0x5}}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058c40)={{0x0, 0x3ff, 0x7, 0x4, 0x6, 0x5, 0x0, 0x8001, 0xa0000000, 0x5c, 0x9, 0x8, 0xa8, 0x7f, 0x9bd}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005a240)={{0x0, 0x0, 0x9, 0x33e3e87f, 0x84d, 0x6, 0x1, 0x40, 0x2, 0x65f, 0x6, 0x5, 0x0, 0x80, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "252de0365342ec"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0xa6fc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "78c6db609c66cd"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d440)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {r9}, {r10, r11}, {}, {0x0, r12}, {r13}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}], 0x40, "87d059dad0cb1c"}) 14:34:24 executing program 1: modify_ldt$read(0x0, &(0x7f00000001c0)=""/232, 0xe8) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0xd, 0x1a, '3\x00'}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/46}) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:24 executing program 1: modify_ldt$read(0x0, &(0x7f00000001c0)=""/232, 0xe8) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0xd, 0x1a, '3\x00'}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/46}) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:24 executing program 1: modify_ldt$read(0x0, &(0x7f00000001c0)=""/232, 0xe8) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0xd, 0x1a, '3\x00'}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/46}) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) modify_ldt$read(0x0, &(0x7f00000001c0)=""/232, 0xe8) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0xd, 0x1a, '3\x00'}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/46}) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x401) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:24 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x401) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x401) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:25 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:25 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000051840)={{0x0, 0x3, 0x8000000000000000, 0x9, 0x8000000000000000, 0xf5, 0x53bc, 0x0, 0xc000, 0x7, 0x81, 0x0, 0x9, 0x4, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000052840)={{0x0, 0xf7, 0x9, 0x2, 0x5, 0x5, 0x3ff, 0xfffffffe, 0x0, 0xfffffff9, 0x8, 0x40, 0x3f, 0xdb5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053840)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x92, "d9bf68edb88f6d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000054840)={{0x0, 0xfffffffffffffffe, 0xe169, 0x1, 0x5, 0x6, 0x2, 0x80, 0x7, 0x0, 0x5, 0x39ae961d, 0x5, 0x101, 0x14}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000055a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055c40)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "9ed2906cd24d04"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056c40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "f2c659f6c3baa9"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000057c40)={{0x0, 0xfe73, 0x6, 0x2, 0x401, 0x0, 0x9, 0x7, 0x9, 0x3, 0x0, 0xfb9, 0x7f, 0x20, 0x5}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058c40)={{0x0, 0x3ff, 0x7, 0x4, 0x6, 0x5, 0x0, 0x8001, 0xa0000000, 0x5c, 0x9, 0x8, 0xa8, 0x7f, 0x9bd}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059e40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005a240)={{0x0, 0x0, 0x9, 0x33e3e87f, 0x84d, 0x6, 0x1, 0x40, 0x2, 0x65f, 0x6, 0x5, 0x0, 0x80, 0x401}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b240)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "252de0365342ec"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005c240)={0xa6fc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "78c6db609c66cd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005d240)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005d440)={0x200, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r8}, {r9}, {r10, r11}, {}, {0x0, r12}, {r13}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}], 0x40, "87d059dad0cb1c"}) 14:34:25 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='2\x00', 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x16, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x78) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) ioctl$KIOCSOUND(r3, 0x4b2f, 0xfffffffffffffc00) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:25 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:25 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) 14:34:26 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) 14:34:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x0, 0x12, "83f4249e87230d0a"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='2\x00', 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='2\x00', 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) (async) 14:34:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000540)={0x1d2, 0x17, &(0x7f0000000140)}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000580)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x2000009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbe0250100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) (async) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000540)={0x1d2, 0x17, &(0x7f0000000140)}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000580)) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x2000009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 64) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbe0250100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (rerun: 64) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000000c0)) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x400002, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000540)={0x1d2, 0x17, &(0x7f0000000140)}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000580)) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x2000009, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbe0250100000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:26 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:26 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) 14:34:26 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:26 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='2\x00', 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:26 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:27 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x10) 14:34:27 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x10) 14:34:27 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x10) 14:34:27 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000001280)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x89) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001240)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001040)={0x0}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x85) ioctl$TCGETA(r5, 0x5405, &(0x7f00000012c0)) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{r4, 0x875eb76cb, 0x0, 0x1, 0x9, 0xfff, 0xf3c, 0x5, 0x7, 0x1, 0x4, 0x5, 0x10000, 0x3b, 0x10000}}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000001300)={0x1, 0x2, 0x6, 0x6, 0x3, "37cfdffc35f31e40"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:27 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000001280)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x89) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001240)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001040)={0x0}) (async) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x85) ioctl$TCGETA(r5, 0x5405, &(0x7f00000012c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{r4, 0x875eb76cb, 0x0, 0x1, 0x9, 0xfff, 0xf3c, 0x5, 0x7, 0x1, 0x4, 0x5, 0x10000, 0x3b, 0x10000}}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000001300)={0x1, 0x2, 0x6, 0x6, 0x3, "37cfdffc35f31e40"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:27 executing program 0: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000001280)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x89) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001240)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001040)={0x0}) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x85) ioctl$TCGETA(r5, 0x5405, &(0x7f00000012c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{r4, 0x875eb76cb, 0x0, 0x1, 0x9, 0xfff, 0xf3c, 0x5, 0x7, 0x1, 0x4, 0x5, 0x10000, 0x3b, 0x10000}}) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f0000001300)={0x1, 0x2, 0x6, 0x6, 0x3, "37cfdffc35f31e40"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:27 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x58a4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x100000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x8, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x284202, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x60) 14:34:27 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) 14:34:27 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) (async) [ 1198.151264] sp0: Synchronizing with TNC 14:34:27 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:27 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x58a4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x100000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x8, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x284202, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x60) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x58a4) (async) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x100000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x8, 0x1}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x284202, 0x0) (async) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x60) (async) 14:34:27 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:28 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) [ 1199.054353] sp0: Synchronizing with TNC 14:34:29 executing program 0: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x58a4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x100000) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) (async) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x8, 0x1}) (async, rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) (async, rerun: 32) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x284202, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x60) 14:34:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x1e9, 0x1, &(0x7f0000000540)}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000500)={0x5, 0x1, 0x40, 0x5d60, 0xb, "330080010000004000010aff066e9ffbac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000004c0)={0x1ce, 0x1d, &(0x7f00000000c0)}) 14:34:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x1e9, 0x1, &(0x7f0000000540)}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000500)={0x5, 0x1, 0x40, 0x5d60, 0xb, "330080010000004000010aff066e9ffbac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000004c0)={0x1ce, 0x1d, &(0x7f00000000c0)}) 14:34:29 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:29 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)={0x1e9, 0x1, &(0x7f0000000540)}) (async, rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000500)={0x5, 0x1, 0x40, 0x5d60, 0xb, "330080010000004000010aff066e9ffbac3f6f"}) (rerun: 64) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000004c0)={0x1ce, 0x1d, &(0x7f00000000c0)}) (rerun: 32) 14:34:29 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000000, 0x1, 0x40, 0x429, 0x1a, "3300a0b065f5bbf8010000003c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:29 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:29 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000000, 0x1, 0x40, 0x429, 0x1a, "3300a0b065f5bbf8010000003c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000000, 0x1, 0x40, 0x429, 0x1a, "3300a0b065f5bbf8010000003c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) [ 1200.411906] sp0: Synchronizing with TNC 14:34:30 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) 14:34:30 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000000, 0x1, 0x40, 0x429, 0x1a, "3300a0b065f5bbf8010000003c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x8000000, 0x1, 0x40, 0x429, 0x1a, "3300a0b065f5bbf8010000003c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 64) r2 = syz_open_pts(r0, 0x541080) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:30 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:30 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ffffffc) socket$inet6_udp(0xa, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_usbip_server_init(0x3) write$usbip_server(r4, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x8}, {0x200}}, 0x30) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)=0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6c, 0x40, 0x2f}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0xa2faa0d754524954, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f00000000c0)={0x88, 0x11, &(0x7f0000000840)}) 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x0, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1200.618054] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1200.623975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1200.690660] vhci_hcd vhci_hcd.0: Device attached 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1200.720320] vhci_hcd: connection closed [ 1200.731291] vhci_hcd: stop threads [ 1200.739020] vhci_hcd: release socket [ 1200.757037] vhci_hcd: disconnect device 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:30 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x7) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ffffffc) socket$inet6_udp(0xa, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_usbip_server_init(0x3) write$usbip_server(r4, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x8}, {0x200}}, 0x30) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)=0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6c, 0x40, 0x2f}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0xa2faa0d754524954, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f00000000c0)={0x88, 0x11, &(0x7f0000000840)}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x7) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ffffffc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) syz_usbip_server_init(0x3) (async) write$usbip_server(r4, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x8}, {0x200}}, 0x30) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)=0x1) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6c, 0x40, 0x2f}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0xa2faa0d754524954, 0x0) (async) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f00000000c0)={0x88, 0x11, &(0x7f0000000840)}) (async) 14:34:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1201.505657] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1201.511559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1201.547144] vhci_hcd vhci_hcd.0: Device attached 14:34:31 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x7) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x7ffffffc) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_usbip_server_init(0x3) write$usbip_server(r4, &(0x7f00000001c0)=@ret_unlink={{0x4, 0x8, 0x0, 0x0, 0x8}, {0x200}}, 0x30) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000100)=0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x6c, 0x40, 0x2f}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0xa2faa0d754524954, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f00000000c0)={0x88, 0x11, &(0x7f0000000840)}) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1201.578322] vhci_hcd: connection closed [ 1201.578518] vhci_hcd: stop threads [ 1201.591788] vhci_hcd: release socket [ 1201.635191] vhci_hcd: disconnect device [ 1201.680861] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(110) [ 1201.686858] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1201.700679] vhci_hcd vhci_hcd.0: Device attached [ 1202.071034] usb 9-1: new high-speed USB device number 3 using vhci_hcd 14:34:31 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x2009, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:31 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:31 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) [ 1202.230927] vhci_hcd: connection reset by peer [ 1202.248464] vhci_hcd: stop threads [ 1202.256399] vhci_hcd: release socket [ 1202.270529] vhci_hcd: disconnect device 14:34:31 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = syz_open_pts(r2, 0x100) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000005c540)={{0x0, 0x3f, 0x7643, 0x1f, 0x7fff, 0x9, 0x6, 0x80000000, 0x532, 0xe2, 0x7, 0xc3, 0x2d4f, 0x71d, 0x7}}) ioctl$KDADDIO(r2, 0x4b34, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005d540)={0x2cce, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "b2d85756b45d5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e540)={0x4b3c714c, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "6d94bfc4eef7af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000005f540)={{0x0, 0x9, 0x20, 0x5, 0xffffffffffffff80, 0x100, 0x10000, 0x9, 0x3f, 0x60, 0xb4a7, 0x3, 0x5, 0x4, 0x1f}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000060540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000061740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000061940)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "ebd97a841bdbe6"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000062940)={{0x0, 0x7f, 0x9, 0x7f, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0xfffffffa, 0x1f, 0x516, 0x8, 0x98, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000063940)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "fb411c035abd31"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064940)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5, r6}, {r7}, {}, {0x0, r8}, {}, {0x0, r9}, {0x0, r10}, {}, {}, {r11, r12}], 0x0, "7bfefa6a2db814"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x58a4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x100000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000140)={0x8, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x7) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x284202, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x60) [ 1202.702094] sp0: Synchronizing with TNC 14:34:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x2009, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:32 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x30) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:32 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) 14:34:32 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x7ff, 0x1f}) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x8000, 0x0, 0x567, 0xf801, 0x1b, "92e495432a1378b8"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x81) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000180)) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) 14:34:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x7ff, 0x1f}) (async) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x8000, 0x0, 0x567, 0xf801, 0x1b, "92e495432a1378b8"}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x81) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000180)) (rerun: 32) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xa0000) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) 14:34:32 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x7ff, 0x1f}) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x8000, 0x0, 0x567, 0xf801, 0x1b, "92e495432a1378b8"}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x81) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000180)) (rerun: 32) 14:34:32 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x2009, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:33 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:33 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:33 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:33 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) (async) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:33 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) (async) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:33 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfffe, 0x0, 0x9, 0x7ffd, 0xd, "d51b3c1ee2c33b0a"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:34 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) (async) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) (async, rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfffe, 0x0, 0x9, 0x7ffd, 0xd, "d51b3c1ee2c33b0a"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000000c0)) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 64) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xfffe, 0x0, 0x9, 0x7ffd, 0xd, "d51b3c1ee2c33b0a"}) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$TCSBRKP(r3, 0x5425, 0x4) (rerun: 32) 14:34:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:34 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xb, 0xfffffffe, 0xcbe7, 0x5d60, 0x6, "31d602ac3f6f0000008dcc00"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000000c0)={{@my=0x1, 0x7fff}, 0xfffffffffffff094, 0x4, 0x8, 0x5}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2500000000140000000000000200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) 14:34:35 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:35 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x200) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1009, 0x2, 0x41, 0x5d60, 0x1a, "330015d73c2ea73812046f000000000600"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0xfffffff7, 0x9, 0x6, 0x8, 0x0, "57d802988a74f237dd2ab941dd8090e8afb872"}) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 64) r2 = syz_open_pts(r0, 0x541080) (rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1009, 0x2, 0x41, 0x5d60, 0x1a, "330015d73c2ea73812046f000000000600"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0xfffffff7, 0x9, 0x6, 0x8, 0x0, "57d802988a74f237dd2ab941dd8090e8afb872"}) (async) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) (async, rerun: 32) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) (rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xb, 0xfffffffe, 0xcbe7, 0x5d60, 0x6, "31d602ac3f6f0000008dcc00"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000000c0)={{@my=0x1, 0x7fff}, 0xfffffffffffff094, 0x4, 0x8, 0x5}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2500000000140000000000000200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) 14:34:35 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1009, 0x2, 0x41, 0x5d60, 0x1a, "330015d73c2ea73812046f000000000600"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0xfffffff7, 0x9, 0x6, 0x8, 0x0, "57d802988a74f237dd2ab941dd8090e8afb872"}) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1009, 0x2, 0x41, 0x5d60, 0x1a, "330015d73c2ea73812046f000000000600"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0xfffffff7, 0x9, 0x6, 0x8, 0x0, "57d802988a74f237dd2ab941dd8090e8afb872"}) (async) getpid() (async) prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) (async) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:35 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xb, 0xfffffffe, 0xcbe7, 0x5d60, 0x6, "31d602ac3f6f0000008dcc00"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000000c0)={{@my=0x1, 0x7fff}, 0xfffffffffffff094, 0x4, 0x8, 0x5}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2500000000140000000000000200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) 14:34:35 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:35 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x1009, 0x2, 0x41, 0x5d60, 0x1a, "330015d73c2ea73812046f000000000600"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0xfffffff7, 0x9, 0x6, 0x8, 0x0, "57d802988a74f237dd2ab941dd8090e8afb872"}) r4 = getpid() prlimit64(r4, 0xa, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:35 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:36 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="6f29d8c6c23cb31d932f0e695c0ac2178f3cc0865cbb943986a12ff92790f599cc7ffe9f8a7a747133ae32e6ff4d2db6b69fd0a7639e1ee2d1969ca9eba7e90233eda4aca7dce50ee7079b7fcb57b3d918f68eeaecb14b071f99ebeda4c3c1e057f090f254801e58e0b8074246f866695d8883f12a17d8179a9fe843d71d2c3cae3c1f1943d293822a1e3d7e7f9480cdebe929e049276eeb15585fbf0444c1408ee788be7e", 0xa5}) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8000000000000001) 14:34:36 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0xb, 0xfffffffe, 0xcbe7, 0x5d60, 0x6, "31d602ac3f6f0000008dcc00"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000000c0)={{@my=0x1, 0x7fff}, 0xfffffffffffff094, 0x4, 0x8, 0x5}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf2500000000140000000000000200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x840) 14:34:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="6f29d8c6c23cb31d932f0e695c0ac2178f3cc0865cbb943986a12ff92790f599cc7ffe9f8a7a747133ae32e6ff4d2db6b69fd0a7639e1ee2d1969ca9eba7e90233eda4aca7dce50ee7079b7fcb57b3d918f68eeaecb14b071f99ebeda4c3c1e057f090f254801e58e0b8074246f866695d8883f12a17d8179a9fe843d71d2c3cae3c1f1943d293822a1e3d7e7f9480cdebe929e049276eeb15585fbf0444c1408ee788be7e", 0xa5}) (async) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8000000000000001) 14:34:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="6f29d8c6c23cb31d932f0e695c0ac2178f3cc0865cbb943986a12ff92790f599cc7ffe9f8a7a747133ae32e6ff4d2db6b69fd0a7639e1ee2d1969ca9eba7e90233eda4aca7dce50ee7079b7fcb57b3d918f68eeaecb14b071f99ebeda4c3c1e057f090f254801e58e0b8074246f866695d8883f12a17d8179a9fe843d71d2c3cae3c1f1943d293822a1e3d7e7f9480cdebe929e049276eeb15585fbf0444c1408ee788be7e", 0xa5}) (async, rerun: 32) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (rerun: 32) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8000000000000001) [ 1207.220798] vhci_hcd: vhci_device speed not set 14:34:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:36 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:37 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:37 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xffff) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x81, 0x3, 0x5}) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:37 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:34:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xffff) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x81, 0x3, 0x5}) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$KDSETLED(r4, 0x4b32, 0xffff) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x81, 0x3, 0x5}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xffff) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x81, 0x3, 0x5}) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) (async) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$KDSETLED(r4, 0x4b32, 0xffff) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000100)={0x81, 0x3, 0x5}) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000100)={'binder1\x00'}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:37 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x5, 0x1d, &(0x7f00000000c0)}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000500)=0x90000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000540)) 14:34:38 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:38 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:38 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:38 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x5, 0x1d, &(0x7f00000000c0)}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000500)=0x90000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000540)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x5, 0x1d, &(0x7f00000000c0)}) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000500)=0x90000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000540)) (async) 14:34:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x5, 0x1d, &(0x7f00000000c0)}) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000500)=0x90000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000540)) 14:34:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x2, 0xfe00, 0x15f, 0x3f, 0x4, "0bcc56fc23984150"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:38 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:38 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) (async) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) (async, rerun: 64) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (rerun: 64) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:39 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x2, 0xfe00, 0x15f, 0x3f, 0x4, "0bcc56fc23984150"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:39 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:39 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x400, 0xebd0, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) 14:34:39 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:39 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x400, 0xebd0, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4000) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) 14:34:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:39 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x400, 0xebd0, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x4000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) 14:34:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:39 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x101, 0x1f, 0x3, 0x6, "301af6def4fc1a1d"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffff0001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:39 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x2, 0xfe00, 0x15f, 0x3f, 0x4, "0bcc56fc23984150"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x2, 0xfe00, 0x15f, 0x3f, 0x4, "0bcc56fc23984150"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:40 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:40 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x20, 0x9c, 0xff80}) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x20, 0x9c, 0xff80}) (async) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x20, 0x9c, 0xff80}) (async) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:40 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x101, 0x1f, 0x3, 0x6, "301af6def4fc1a1d"}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffff0001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:40 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:40 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000140)) r3 = syz_open_pts(r2, 0x541880) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x70, 0x11, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x387, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:41 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x101, 0x1f, 0x3, 0x6, "301af6def4fc1a1d"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffff0001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x101, 0x1f, 0x3, 0x6, "301af6def4fc1a1d"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffff0001) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000140)) (async) r3 = syz_open_pts(r2, 0x541880) (async) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x70, 0x11, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x387, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:41 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:41 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 32) syz_open_pts(r0, 0x541080) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000100)={0x1}) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000140)) r3 = syz_open_pts(r2, 0x541880) (async) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r4) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000100)={0x9, 0x1, 0x40, 0x70, 0x11, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x387, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000100)={0x1}) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:41 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000100)={0x1}) 14:34:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:42 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:42 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:42 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) (async) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:42 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_pts(r2, 0x414140) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0x0, 0x7bb}) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) ioctl$TCSBRKP(r4, 0x5425, 0x4) 14:34:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) r3 = syz_open_pts(r2, 0x414140) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) (async) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0x0, 0x7bb}) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$TCSBRKP(r4, 0x5425, 0x4) 14:34:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:42 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:42 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_pts(r2, 0x414140) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0x0, 0x7bb}) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) ioctl$TCSBRKP(r4, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r2, 0x414140) (async) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000100)) (async) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0x0, 0x7bb}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000140)) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$TCSBRKP(r4, 0x5425, 0x4) (async) 14:34:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:43 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3a) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0xc002, 0xf, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x1) 14:34:43 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x1) 14:34:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x1) 14:34:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000140)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000100)={0x7ff, 0xa5, 0xff}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x5e, 0x7, 0x7, 0x2, 0x19, "0ece9159073ee2d2658b2e069866dbf895879b"}) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r4, 0x5425, 0x4) 14:34:43 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:43 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) r1 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:43 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000140)) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000100)={0x7ff, 0xa5, 0xff}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x5e, 0x7, 0x7, 0x2, 0x19, "0ece9159073ee2d2658b2e069866dbf895879b"}) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r4, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000140)) (async) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000100)={0x7ff, 0xa5, 0xff}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x5e, 0x7, 0x7, 0x2, 0x19, "0ece9159073ee2d2658b2e069866dbf895879b"}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r4, 0x5425, 0x4) (async) 14:34:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3a) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0xc002, 0xf, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3a) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0xc002, 0xf, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:44 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) syz_open_pts(r0, 0x525080) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 5: syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:44 executing program 5: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x40801) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) r1 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) (async) r1 = syz_open_pts(r0, 0x541080) (async) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3a) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0xc002, 0xf, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:44 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000140)) (async) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000100)={0x7ff, 0xa5, 0xff}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x5e, 0x7, 0x7, 0x2, 0x19, "0ece9159073ee2d2658b2e069866dbf895879b"}) (async) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r4, 0x5425, 0x4) 14:34:44 executing program 5: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) syz_open_pts(r0, 0x525080) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) 14:34:44 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4800) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:44 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:44 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:45 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:45 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:45 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4800) r2 = syz_open_pts(r0, 0x525080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$dri(0xffffffffffffffff, 0x2, 0x40801) 14:34:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:45 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) r1 = syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x5, 0x3, 0x13, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/56}) ioctl$TCSBRKP(r1, 0x5425, 0x4) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x8, 0x0, 0x8, 0x3, 0x9, "63d9ff6d9cbeefca"}) 14:34:45 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x40801) 14:34:45 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async, rerun: 64) r2 = syz_open_pts(r0, 0x541080) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd}) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:45 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) (async) 14:34:45 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) 14:34:45 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) r1 = syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x5, 0x3, 0x13, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/56}) ioctl$TCSBRKP(r1, 0x5425, 0x4) (async) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x8, 0x0, 0x8, 0x3, 0x9, "63d9ff6d9cbeefca"}) 14:34:45 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) 14:34:45 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) r1 = syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xffff, 0x3ff, 0x5, 0x3, 0x13, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/56}) (async, rerun: 64) ioctl$TCSBRKP(r1, 0x5425, 0x4) (async, rerun: 64) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x8, 0x0, 0x8, 0x3, 0x9, "63d9ff6d9cbeefca"}) 14:34:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x4080) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xd48e, 0xff61, 0x5, 0x3ff, 0x2, "ebc8f6afa4516dd1"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r5}) 14:34:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) 14:34:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001040)={&(0x7f0000000040)=[0x81, 0xd0f, 0x3ff, 0x7f, 0x5, 0x1000, 0x7f, 0x3c, 0x80000000, 0x53cd, 0x7, 0x9, 0x1ff, 0x3, 0x4, 0x7f, 0x7ff, 0x3f, 0x1, 0x5, 0x7fffffff, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3, 0x2, 0xe00000, 0x2, 0x1, 0x9, 0x4, 0xffffffff, 0x3, 0x5, 0x7, 0x100, 0x3, 0x80000001, 0x754dd7e0, 0xfacd, 0x1, 0x0, 0x0, 0x100, 0x8, 0x937, 0xf24, 0x9, 0x6, 0x7ff, 0x4, 0x4, 0x1ff, 0x0, 0xa08, 0xa82, 0xffffff27, 0x1b9, 0x2, 0x2, 0x1f, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x2, 0x9, 0x8001, 0x9, 0x618752c8, 0x80000000, 0x57, 0xffffffff, 0x6, 0x80000001, 0x101, 0x9, 0x51c, 0x9, 0x293e, 0x80000001, 0x401, 0x6, 0x7, 0x39b, 0x3, 0x2, 0xfff, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x3, 0x5, 0x9, 0xff, 0x7, 0x6, 0x8000, 0x7, 0x200, 0x8, 0x1ff, 0x8000, 0x7, 0x80000001, 0x9, 0xf1, 0x6921, 0xf4310d3, 0xfe000000, 0x5, 0x0, 0x5, 0x1, 0x1, 0x3, 0x3ff, 0x5, 0x3, 0x1000, 0x6, 0x7ff, 0x3f, 0x81, 0x354a, 0x8, 0x1, 0x85, 0x81, 0x0, 0xc, 0x9, 0x6, 0x20, 0x80000000, 0x4, 0xfffffff8, 0x4, 0x1000, 0x4, 0x6, 0x7, 0x1, 0x10001, 0x0, 0x8, 0x4, 0xffffff34, 0x6, 0x9d, 0xffffff9b, 0xa5c, 0x81, 0x4, 0xcca, 0xffff, 0x7a1, 0x6, 0xfff, 0x3f, 0xfffffffc, 0x400, 0xf92, 0x8, 0x2, 0x8, 0x5, 0x9, 0x8, 0xc73, 0x5, 0x1, 0x9e6, 0x10001, 0x3, 0xfffffffe, 0x471, 0x1, 0x2, 0x100, 0x5, 0x3, 0x7fff, 0xffff, 0x8, 0x8, 0x8, 0xffff, 0x9, 0x40, 0xd0, 0x800, 0x20, 0x4, 0xffffffff, 0xffff, 0x1, 0xfffff800, 0xfff, 0x7ff, 0x7, 0x1, 0x42b8, 0x7, 0x4, 0x10001, 0x6, 0x4, 0xde, 0x5, 0x2, 0x8000, 0x4, 0x400, 0xf5, 0x8, 0x3, 0x1f, 0x10001, 0x2, 0x5, 0x200, 0x3ff6, 0x8, 0x7, 0xed5, 0x20, 0x8, 0x7, 0x5, 0x1, 0x9, 0x52, 0x8, 0x0, 0xfff, 0xfffffff9, 0x2, 0x400, 0x5, 0x0, 0x80000001, 0x3, 0x4, 0xbb2a, 0xfa6, 0x81, 0x0, 0x0, 0x4, 0x1ff, 0x6, 0x3, 0x1, 0x1ff, 0x8, 0xfffffffd, 0x8000, 0x5, 0xffff, 0x3b, 0x6, 0x7fffffff, 0x3ff, 0x100, 0xe8, 0x8000, 0x401, 0x97, 0x1, 0x80000001, 0x10001, 0x2, 0x4800000, 0x8, 0x2, 0x7, 0x7a5f29ee, 0x9, 0x1ff, 0x2, 0x4, 0xc32, 0xf34, 0x9, 0x8, 0x6, 0x9, 0x13, 0x3, 0x7ff, 0x6, 0xfffffffe, 0x8, 0x1ff, 0xff, 0x10001, 0x4, 0x695, 0x8, 0x101, 0x6, 0x4, 0x7, 0xffff, 0xf43, 0x8, 0x3, 0x82e0, 0x80000001, 0x8, 0x3, 0x80000000, 0x8, 0x5, 0xaf, 0x3, 0x1f, 0xbba, 0x8, 0xfffffffb, 0x1, 0x3, 0x4, 0x909, 0x401, 0x0, 0x5, 0xfffffffa, 0x3ff000, 0x4, 0x1, 0x8, 0x231, 0x7, 0x3, 0x6, 0x7fff, 0x6, 0xc000000, 0x5, 0x6752d20d, 0x9, 0xfffffffb, 0x12000000, 0x20, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0xe28, 0x80000001, 0x4, 0xe805, 0x9190, 0xfe, 0x5fdf8271, 0x80000000, 0x3, 0xc5, 0x9, 0x9, 0x10000, 0x46ec, 0xa68, 0x5, 0xef71, 0x11fc, 0x3, 0x4, 0x9, 0x648a, 0xe6f7, 0x4, 0x7, 0x80, 0x9, 0x6, 0x20000, 0x3, 0x7, 0x4, 0x8, 0x101, 0x761bdba4, 0x10001, 0x4, 0x7fff, 0x6, 0x7, 0x3f, 0x1000, 0x10000, 0xffffffff, 0x80, 0xac0, 0x8000, 0x1000, 0x0, 0x8000, 0xde86, 0x81, 0x2, 0xf4b, 0x2, 0x7, 0x8, 0x4b2c, 0x4, 0x1ff, 0x4, 0x4, 0xfffff92a, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x5, 0xfff, 0x0, 0x81, 0x83, 0x10001, 0x9, 0x800, 0x8000, 0x6, 0xfff, 0xfffffffe, 0x3, 0x1000, 0x0, 0x5, 0x2, 0x3d, 0x100, 0x7, 0x8001, 0x16, 0x0, 0x5, 0x8, 0x0, 0x7f, 0x5, 0x7ff, 0x7, 0x8, 0x2, 0x0, 0x8, 0x9, 0x200, 0x1, 0x0, 0x64e6, 0x1, 0x80000001, 0x0, 0xfda, 0x9, 0x3, 0x5, 0x7, 0x7, 0x37, 0x100000, 0x8, 0x5, 0x6, 0xcf18, 0xff30, 0x80000000, 0x6, 0x1, 0x6, 0x0, 0x2, 0x91, 0x20, 0x1, 0x1, 0x3, 0x7, 0x4, 0x1, 0x8, 0xfffffffe, 0x1, 0x6, 0x80000000, 0x3, 0x80000001, 0x4, 0x3, 0x7ff, 0xfffffffa, 0x3, 0x8, 0x4, 0xdd, 0x7ff, 0x8000, 0x7ff, 0x40, 0x0, 0x9b6, 0x401, 0x0, 0x6, 0x6, 0xffff, 0x9, 0x0, 0x4, 0x80, 0x2, 0x0, 0x2, 0x0, 0x40, 0x81, 0x7c9f, 0x0, 0xfffffffd, 0x6, 0x2, 0x101, 0x20, 0x7fff, 0xfbb6, 0x94, 0xffff, 0x8, 0x8, 0x3, 0x200, 0xf2a, 0x3, 0xff, 0x921, 0x7f, 0x0, 0x7fff80, 0x401, 0x800, 0x7, 0x2060, 0xd02, 0x3fb6, 0x1ff, 0x8, 0x3, 0x9, 0x9, 0x81, 0x6, 0xfff, 0x4, 0x0, 0xfffffff9, 0x8, 0x7fffffff, 0xffffffff, 0x3, 0x3, 0x3d1, 0xfffff076, 0x0, 0x0, 0x8, 0x1, 0x2, 0x4, 0x6, 0x67e4, 0x5, 0x75, 0x29, 0x6, 0x8, 0x39800ed6, 0x9, 0x0, 0x101, 0x4, 0x7, 0x1311, 0xfffffffd, 0x65, 0x80000001, 0xffffff00, 0x5, 0xa5, 0x6, 0x17, 0x9, 0x2, 0x5, 0x9, 0x40, 0xffffffff, 0x0, 0x9, 0x96b6, 0x1, 0x71, 0x3ff, 0x101, 0x41d5, 0x27, 0x100, 0x4, 0xfe3, 0x4, 0x1, 0x4, 0x3, 0x4, 0x8, 0x200, 0x7, 0x20, 0xffffff24, 0xba, 0x4, 0x1000, 0x2, 0x633c, 0x6, 0x4, 0xb07, 0x2, 0x2, 0x7b248952, 0x4, 0x7, 0xfffffc00, 0x7, 0x4, 0x9, 0x8, 0x8, 0x9e, 0x10000, 0x5, 0x9, 0x20, 0x33df, 0x1f, 0xc7c, 0xdd33, 0x4, 0x9, 0xd5, 0x1, 0x401, 0x3, 0x3, 0x0, 0x7f, 0x4, 0x5, 0x2, 0x40, 0x8, 0xbfd9, 0x59, 0x80, 0x4, 0x7, 0x10000, 0xe9e, 0x5, 0x1000, 0xffff6da6, 0x241d, 0x81, 0x3, 0x8000, 0x1f, 0x6, 0x5, 0xc0000000, 0x8, 0x80, 0x8, 0x1200, 0x3, 0x0, 0xfcec, 0xfffffffb, 0x80000000, 0x624, 0x1, 0xfffffc01, 0x7, 0x80000001, 0x80000000, 0x7, 0x5, 0x5, 0x2, 0x30c, 0x400, 0xffffffff, 0x3, 0xd73, 0x20, 0x1, 0x47aa, 0x200, 0x9, 0x4, 0x5, 0x49, 0x6, 0x3, 0x3f, 0x0, 0x8001, 0xff, 0x1, 0x2, 0xdeba, 0x9, 0x9, 0x401, 0x2, 0x7f, 0x80000000, 0x9, 0xffff8dd8, 0x8, 0x100, 0x2, 0x2, 0xb9, 0x4, 0x2, 0x7, 0x80000000, 0x401, 0x9, 0x1, 0x7, 0x5, 0x8, 0x40, 0x91c, 0x0, 0x6, 0x8, 0xff, 0x3, 0xffff, 0x7f, 0x0, 0x9, 0x4, 0x8, 0x21, 0x6, 0x7, 0x7, 0x7, 0x1, 0xe158, 0x6, 0x0, 0x3, 0x5, 0x6, 0xff0f, 0x5, 0x2, 0x401, 0x2, 0x2, 0xfffff001, 0x6, 0x200, 0x11, 0xfffffff9, 0x0, 0xbf1, 0xa6b7, 0x2, 0x6, 0xfffeffff, 0x8000, 0x400, 0x7fffffff, 0x8001, 0x0, 0x8, 0x13, 0x7, 0x7fff, 0x0, 0x8001, 0x4, 0x7, 0x1, 0x80000001, 0x1, 0xffff, 0x1000, 0xffff2ee2, 0x7, 0x5, 0xb424, 0x8, 0xffffffff, 0x3b, 0x9, 0xfffffc01, 0x1, 0x3, 0x9, 0x400, 0x4, 0x6, 0x4, 0x9, 0x4, 0x893, 0x8, 0x1f, 0x401, 0x1, 0x9, 0x401, 0x4, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xba, 0x80000001, 0x2, 0x101, 0x7fffffff, 0x5, 0x7ff, 0xa94, 0x0, 0x3, 0x1, 0x3ff, 0x4, 0x1f, 0x9, 0xc07, 0x634, 0x8, 0x9, 0x3, 0x63, 0x6, 0x9, 0x6, 0xff, 0xd9e, 0x6, 0x5, 0x5, 0x0, 0xfff, 0x9, 0x7, 0xfff, 0x1, 0x1, 0x40, 0xfffffffe, 0x9, 0xffffffff, 0x4, 0x0, 0x4, 0x9, 0x3f, 0x6, 0x0, 0x7, 0x4, 0x5, 0x80000000, 0x3, 0xb589, 0x6, 0x2, 0x5, 0x8, 0x6, 0xa01c, 0x8, 0x3, 0x5, 0x326b, 0x800, 0x6b, 0xfffffffe, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0xffffffff, 0xeb1, 0x4, 0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x8000, 0x5, 0x3f, 0x5649, 0x8, 0x19c, 0x7447, 0x2, 0x3, 0x3, 0x0, 0x80000000, 0x5, 0x100, 0x9, 0x4b, 0x7, 0xffff, 0x53, 0x7fff, 0x8, 0x8, 0x676, 0xffffffff, 0x57, 0x1, 0x80, 0x5, 0x7fffffff, 0x10, 0x8000, 0x6, 0x2a, 0x4, 0x80, 0x3, 0x3ff, 0xfffffff7, 0x7, 0x4, 0x0, 0xf19b, 0x6, 0x3e, 0xbb61, 0x3, 0xfffff000, 0x10001, 0xad, 0x81, 0x0, 0x1, 0x59a, 0x7, 0x0, 0x7, 0x4d1, 0x7d1c, 0x4, 0x7, 0x1a, 0x8685, 0x9e0b, 0x1, 0x0, 0x2, 0x4, 0x5, 0x85, 0x9, 0x7, 0x4, 0x800, 0x8000, 0xfffffff8, 0x8000, 0x401, 0xffffffff, 0x20c, 0x7f, 0x401, 0x80, 0x7fff, 0x7, 0x6f, 0x2, 0x100, 0x3, 0x8001, 0x8, 0x2, 0x31c2, 0xfffffffa, 0xdf, 0x9, 0x2], 0x3aa31b90a20c25c6, 0x400, 0x4}) (async) 14:34:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) 14:34:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:46 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) 14:34:46 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:46 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x4080) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xd48e, 0xff61, 0x5, 0x3ff, 0x2, "ebc8f6afa4516dd1"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r5}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) (async) syz_open_pts(r0, 0x4080) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) (async) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xd48e, 0xff61, 0x5, 0x3ff, 0x2, "ebc8f6afa4516dd1"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)) (async) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r5}) (async) 14:34:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400a01, 0x0) r2 = syz_open_pts(r1, 0x20002) ioctl$TIOCSIG(r2, 0x40045436, 0xa) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x2ab4) 14:34:46 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) 14:34:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x4080) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xd48e, 0xff61, 0x5, 0x3ff, 0x2, "ebc8f6afa4516dd1"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) ioctl$TCSBRKP(r3, 0x5425, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r5}) 14:34:46 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:46 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400a01, 0x0) r2 = syz_open_pts(r1, 0x20002) ioctl$TIOCSIG(r2, 0x40045436, 0xa) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x2ab4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400a01, 0x0) (async) syz_open_pts(r1, 0x20002) (async) ioctl$TIOCSIG(r2, 0x40045436, 0xa) (async) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x2ab4) (async) 14:34:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400a01, 0x0) r2 = syz_open_pts(r1, 0x20002) ioctl$TIOCSIG(r2, 0x40045436, 0xa) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x2ab4) 14:34:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x800) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x10001, 0x9, 0x5d60, 0x7, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x2, 0x101, 0x1f, 0x3, 0x6, "301af6def4fc1a1d"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffff0001) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:47 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x4080) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) (async) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xd48e, 0xff61, 0x5, 0x3ff, 0x2, "ebc8f6afa4516dd1"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000001c0)) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000180)={r5}) 14:34:47 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) (async) 14:34:47 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) (async) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) (async) 14:34:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x5, 0x6, 0xb3f}) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x5, 0x6, 0xb3f}) (rerun: 32) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x20000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = syz_open_pts(r2, 0x60a000) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x18, "ddee3c1ee982782e"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:47 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000000c0)={0x5, 0x6, 0xb3f}) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:34:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x20000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = syz_open_pts(r2, 0x60a000) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x18, "ddee3c1ee982782e"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x20000) (async) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) syz_open_pts(r2, 0x60a000) (async) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x18, "ddee3c1ee982782e"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:48 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:48 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) 14:34:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x20000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = syz_open_pts(r2, 0x60a000) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x18, "ddee3c1ee982782e"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x20000) (async) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r1, 0x4000) (async) syz_open_pts(r1, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) syz_open_pts(r2, 0x60a000) (async) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x18, "ddee3c1ee982782e"}) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x80000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x80000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x20, 0xd, &(0x7f0000000040)}) 14:34:48 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 32) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async, rerun: 64) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x20, 0xd, &(0x7f0000000040)}) (rerun: 64) 14:34:48 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:48 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000000c0)={0x7f, 0x7ff, 0x6, 0xa486, 0x10, "09c3b6b319100020"}) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000280)) 14:34:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0x20, 0xd, &(0x7f0000000040)}) 14:34:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x28040, 0x0) r2 = syz_open_pts(r1, 0x101400) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x48, 0x5, 0x20000040, 0xffff, 0x17, "3302000069060000000000000000800072e600"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x28040, 0x0) (rerun: 64) r2 = syz_open_pts(r1, 0x101400) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x48, 0x5, 0x20000040, 0xffff, 0x17, "3302000069060000000000000000800072e600"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:49 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:49 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:49 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:49 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x28040, 0x0) r2 = syz_open_pts(r1, 0x101400) (async) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x48, 0x5, 0x20000040, 0xffff, 0x17, "3302000069060000000000000000800072e600"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:49 executing program 3: ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 14:34:49 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:49 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:49 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x1f, 0x4, 0x5, "07b1ff2ef3fc4b01"}) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x119841) r3 = syz_open_pts(r0, 0x4000) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$KDSETLED(r2, 0x4b32, 0x3ff) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x4) 14:34:50 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0x0, 0x4}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:50 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:50 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x1f, 0x4, 0x5, "07b1ff2ef3fc4b01"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) (async) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x1f, 0x4, 0x5, "07b1ff2ef3fc4b01"}) (async) 14:34:50 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:50 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x119841) (async, rerun: 64) r3 = syz_open_pts(r0, 0x4000) (async, rerun: 64) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$KDSETLED(r2, 0x4b32, 0x3ff) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$TCSBRKP(r5, 0x5425, 0x4) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x1af, 0x16, &(0x7f00000000c0)}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:50 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x20, 0x7, 0x9, 0xa761, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x82, 0x5, "42c1ae"}, @lsrr={0x83, 0x7, 0x75, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x8, [{@remote, 0x3f}]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffff, 0x10}, {0xffe0}, {0x1, 0xfff1}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x80) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:51 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:51 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x1f, 0x4, 0x5, "07b1ff2ef3fc4b01"}) 14:34:51 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_pts(r1, 0x119841) r3 = syz_open_pts(r0, 0x4000) r4 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$KDSETLED(r2, 0x4b32, 0x3ff) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_pts(r1, 0x119841) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$KDSETLED(r2, 0x4b32, 0x3ff) (async) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) (async) ioctl$TCSBRKP(r5, 0x5425, 0x4) (async) 14:34:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80) 14:34:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:51 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) ioctl$TCSBRKP(r2, 0x5425, 0x4) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80) (async) 14:34:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:52 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x9, 0xfc9, 0x0, 0xc1f, 0x6, "a4ee1986fcea281b"}) 14:34:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x80) 14:34:52 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) 14:34:52 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x5, 0x1, 0x41, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x5, 0x1, 0x41, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x5, 0x1, 0x41, 0x6, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:52 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) 14:34:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = getpid() ptrace(0x10, r1) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x2, 0x9, 0x1}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:53 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) (async) 14:34:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) 14:34:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32) r1 = getpid() (rerun: 32) ptrace(0x10, r1) r2 = syz_open_pts(r0, 0x4000) (async) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:53 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000200)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair(0xf, 0x800, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdbdf2502000000764952730100000214000100fc0000000000000000000005000600040000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 14:34:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/133}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:53 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:54 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x10001, 0x7, 0x1844, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x4}, 0x48) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) 14:34:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:54 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = getpid() ptrace(0x10, r1) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = getpid() ptrace(0x10, r1) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) getpid() (async) ptrace(0x10, r1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r3, 0x5425, 0x4) (async) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/133}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/133}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/133}) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = getpid() ptrace(0x10, r1) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000000c0)={0x5, 0x5, 0x2, 0xfffffffffffff52e, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x13, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_pts(r0, 0x200) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000004c0)={0x16f, 0xd, &(0x7f00000000c0)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00') sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000006a00000427bd7020fcdbdf25f9ffffff0000000004000b000400090004000b0004000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x871) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:54 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) r3 = syz_open_pts(0xffffffffffffffff, 0x309080) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x2, 0x3, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:54 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:54 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDSETLED(r7, 0x4b32, 0xd80) 14:34:54 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c200, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/106}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:55 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDSETLED(r7, 0x4b32, 0xd80) 14:34:55 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032cbd7000fbdbdf2502000000040005000400050008000b00", @ANYRES32=r2, @ANYBLOB="c7e07e2face29dcb32292085267cb26984a13bbff201bca50f02419e9a6bbbf638f85ee510eda6d1d8c4e4b66bc5d744706325f186b73392552e7e8ab3497e1758b24b1a654053a9fdb0637fe627cdce28fed83dd274a27c14170422d15c4efc1e06d20deaa9c5b98166a43cd873880d90e7cd9f1d0b3c3dd3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000180)={0x14f, 0x1b, &(0x7f0000000440)}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0cfd5b6b6f2909b629a1189f3db077c5546c122a5d2c0bbf3dd3101549ebfaa8a730e2cc27b53881642533760e4fc3efc3cab14ce6fa4b151481cd3606bf8d818ff9d4b375e7f62c00c93a14d8a6ea4a4ebb8dfc9993178e79496678b067c4b65ee5adc1dfaac0645c19eb0101021dc5512f3de6583a4120ca4a7a9dbb2fa8dcf3054508a0253a948e0000000000000000", @ANYRES16=r0, @ANYBLOB="00022cbd7000fddbdf25020000000800080064010100060001004e23000008000b00", @ANYRES32=r4, @ANYBLOB="050002000a00258f"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805) r5 = syz_open_pts(r3, 0x4000) r6 = syz_open_pts(r3, 0x541080) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r6, 0x5425, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDSETLED(r7, 0x4b32, 0xd80) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x0, 0x40, 0x8001}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d5c, 0x1a, "220028b065f5bbf8c4ac3f6f00"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x7) r1 = syz_open_pts(r0, 0x4000) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x0, 0x7}) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xf, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x4, 0x0, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c200, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/106}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:55 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:55 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c200, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/106}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)) ioctl$TCSBRKP(r2, 0x5425, 0x7) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x1000, 0x200, 0x6, 0xffffff00, 0x12, "e1fb5b7e5e458b9209d9e4e69ea93ca6d6d622"}) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)) ioctl$TCSBRKP(r2, 0x5425, 0x7) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x1000, 0x200, 0x6, 0xffffff00, 0x12, "e1fb5b7e5e458b9209d9e4e69ea93ca6d6d622"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)) (async) ioctl$TCSBRKP(r2, 0x5425, 0x7) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x1000, 0x200, 0x6, 0xffffff00, 0x12, "e1fb5b7e5e458b9209d9e4e69ea93ca6d6d622"}) (async) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f00000000c0)) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)) (async, rerun: 32) ioctl$TCSBRKP(r2, 0x5425, 0x7) (rerun: 32) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000100)={0x1000, 0x200, 0x6, 0xffffff00, 0x12, "e1fb5b7e5e458b9209d9e4e69ea93ca6d6d622"}) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_pts(r0, 0x4000) (async) syz_open_pts(r0, 0x541080) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}) (async) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSBRKP(r2, 0x5425, 0x4) (async) 14:34:56 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ioctl$TIOCGPTPEER(r3, 0x5441, 0x100000000) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x80000001, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x593) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x17) 14:34:56 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x3, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x8001, 0x95bf, 0x8, 0x1, 0x3, "fd403745b681c0f7"}) write$sysctl(r3, &(0x7f0000000100)='1\x00', 0x2) 14:34:56 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x65, 0x0, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:56 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x5fb080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x6, 0x19, "0020000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x0, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:56 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x81, 0x0, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x84800) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = getpid() prlimit64(r4, 0xb, &(0x7f0000000140), &(0x7f0000000180)) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r4) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r5 = syz_open_pts(r2, 0x10000) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x4, 0x101, 0x20, 0x4, 0x16, "eb7e9f1e6d520a05"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x5fb080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x6, 0x19, "0020000100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:57 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:58 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 14:34:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006e240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "004a55a550f160"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006f240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006f440)={{0x0, 0x81, 0x80000001, 0x1, 0x1ff, 0xaa1, 0x8, 0x3ff, 0x90000000, 0x2, 0x2, 0x1, 0x4, 0x80, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000070440)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "68cf12b2ef5673"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000071440)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "82cf6bc8ba8244"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000072440)={{0x0, 0x1, 0x4, 0x0, 0x7, 0x8, 0x80000000, 0x63, 0xfffffd76, 0x4, 0x101, 0x81, 0x3, 0x4a8aed16, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073840)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xe5, "6c6181daa2b3ea"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000074840)={{0x0, 0x4, 0x1, 0x8000000000000001, 0x2, 0x2, 0x4, 0x3, 0x20, 0x81, 0x8, 0x8, 0x3, 0x3f, 0x101}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000075840)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "565710a80efa12"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000076a40)={{0x0, 0xfc9, 0x3ff, 0x97e, 0x1, 0x20, 0x8000000000000001, 0x0, 0x40, 0x4, 0x9, 0xc1ba, 0x2, 0x100000001, 0x3de}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "315dfe1179202c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000078e40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "153295eb65d6ac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079e40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {r4, r5}, {}, {}, {0x0, r17}, {}, {}, {}, {r8}, {}, {r10}, {}, {}, {r11}, {}, {r12}, {0x0, r14}, {r15}, {}, {r16}, {}, {}, {}, {r18}, {r19}, {0x0, r20}, {}, {r21, r22}, {}, {0x0, r24}], 0x2, "8711da3a407ec2"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:58 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:58 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x5fb080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) (async, rerun: 32) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x6, 0x19, "0020000100"}) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:34:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 14:34:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 14:34:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006e240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "004a55a550f160"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006f240)={0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006f440)={{0x0, 0x81, 0x80000001, 0x1, 0x1ff, 0xaa1, 0x8, 0x3ff, 0x90000000, 0x2, 0x2, 0x1, 0x4, 0x80, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000070440)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "68cf12b2ef5673"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000071440)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "82cf6bc8ba8244"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000072440)={{0x0, 0x1, 0x4, 0x0, 0x7, 0x8, 0x80000000, 0x63, 0xfffffd76, 0x4, 0x101, 0x81, 0x3, 0x4a8aed16, 0x3}}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073440)={0x0}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073640)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073840)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xe5, "6c6181daa2b3ea"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000074840)={{0x0, 0x4, 0x1, 0x8000000000000001, 0x2, 0x2, 0x4, 0x3, 0x20, 0x81, 0x8, 0x8, 0x3, 0x3f, 0x101}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000075840)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "565710a80efa12"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000076a40)={{0x0, 0xfc9, 0x3ff, 0x97e, 0x1, 0x20, 0x8000000000000001, 0x0, 0x40, 0x4, 0x9, 0xc1ba, 0x2, 0x100000001, 0x3de}}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "315dfe1179202c"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078a40)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000078e40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "153295eb65d6ac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079e40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {r4, r5}, {}, {}, {0x0, r17}, {}, {}, {}, {r8}, {}, {r10}, {}, {}, {r11}, {}, {r12}, {0x0, r14}, {r15}, {}, {r16}, {}, {}, {}, {r18}, {r19}, {0x0, r20}, {}, {r21, r22}, {}, {0x0, r24}], 0x2, "8711da3a407ec2"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:58 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 14:34:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3e, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000040)) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000240)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e1f79054000"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x100, 0x147c400, 0x2, 0x6}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSETLED(r5, 0x4b32, 0x7) ioctl$KDADDIO(r3, 0x4b34, 0x2) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) 14:34:58 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006e240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "004a55a550f160"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006f240)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006f440)={{0x0, 0x81, 0x80000001, 0x1, 0x1ff, 0xaa1, 0x8, 0x3ff, 0x90000000, 0x2, 0x2, 0x1, 0x4, 0x80, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000070440)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "68cf12b2ef5673"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000071440)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "82cf6bc8ba8244"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000072440)={{0x0, 0x1, 0x4, 0x0, 0x7, 0x8, 0x80000000, 0x63, 0xfffffd76, 0x4, 0x101, 0x81, 0x3, 0x4a8aed16, 0x3}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073440)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073840)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xe5, "6c6181daa2b3ea"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000074840)={{0x0, 0x4, 0x1, 0x8000000000000001, 0x2, 0x2, 0x4, 0x3, 0x20, 0x81, 0x8, 0x8, 0x3, 0x3f, 0x101}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000075840)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "565710a80efa12"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000076a40)={{0x0, 0xfc9, 0x3ff, 0x97e, 0x1, 0x20, 0x8000000000000001, 0x0, 0x40, 0x4, 0x9, 0xc1ba, 0x2, 0x100000001, 0x3de}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "315dfe1179202c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078a40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000078e40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "153295eb65d6ac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079e40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {r4, r5}, {}, {}, {0x0, r17}, {}, {}, {}, {r8}, {}, {r10}, {}, {}, {r11}, {}, {r12}, {0x0, r14}, {r15}, {}, {r16}, {}, {}, {}, {r18}, {r19}, {0x0, r20}, {}, {r21, r22}, {}, {0x0, r24}], 0x2, "8711da3a407ec2"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006e240)={0x7, [], 0x1, "004a55a550f160"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006f240)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000006f440)={{0x0, 0x81, 0x80000001, 0x1, 0x1ff, 0xaa1, 0x8, 0x3ff, 0x90000000, 0x2, 0x2, 0x1, 0x4, 0x80, 0x9}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000070440)={0x10001, [], 0x7, "68cf12b2ef5673"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000071440)={0x8000, [], 0x6, "82cf6bc8ba8244"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000072440)={{0x0, 0x1, 0x4, 0x0, 0x7, 0x8, 0x80000000, 0x63, 0xfffffd76, 0x4, 0x101, 0x81, 0x3, 0x4a8aed16, 0x3}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073440)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000073640)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073840)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0xe5, "6c6181daa2b3ea"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000074840)={{0x0, 0x4, 0x1, 0x8000000000000001, 0x2, 0x2, 0x4, 0x3, 0x20, 0x81, 0x8, 0x8, 0x3, 0x3f, 0x101}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000075840)={0x7fffffff, [], 0x6, "565710a80efa12"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000076a40)={{0x0, 0xfc9, 0x3ff, 0x97e, 0x1, 0x20, 0x8000000000000001, 0x0, 0x40, 0x4, 0x9, 0xc1ba, 0x2, 0x100000001, 0x3de}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000077a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x3, "315dfe1179202c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078a40)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078c40)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000078e40)={0x4, [], 0x0, "153295eb65d6ac"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000079e40)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3}, {r4, r5}, {}, {}, {0x0, r17}, {}, {}, {}, {r8}, {}, {r10}, {}, {}, {r11}, {}, {r12}, {0x0, r14}, {r15}, {}, {r16}, {}, {}, {}, {r18}, {r19}, {0x0, r20}, {}, {r21, r22}, {}, {0x0, r24}], 0x2, "8711da3a407ec2"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:34:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="e6997638d804f56dd995dd51cdf5d6b026125ee9da902df4d562dc914c6549040e72ff2a14951d00f4c4f1d5ebef45dbfdff2690eaa73ea058f27002095ba195c29361fdace471b64ec54248ff4c86c57671e181415de69cdd4f9be78ff5c3079b5ca2fc6e1c358ab1f0db20657cfc24e1fcee8629ee5c7c366eb42efe5d98d791ec8bda5bd614af8c473d42089e792bdb16ba348e91e10fe853ca1db0e80f2a3919e3139b3a63d2d0e2c8053c006e9185244fcc6816ebdb414bdac5e0b0041d6d561194dbe4f7f99c79e6ad89baeadecd21820950e5232add341f8b43a486564c7e99ee915195142ab4784fda9c3305df40") r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0xffff, 0x1f, 0xfffa, 0x40, 0x0, "57526dad061f5161"}) 14:34:59 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 14:34:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_pts(r1, 0x4000) r3 = syz_open_pts(r1, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3e, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000040)) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000240)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e1f79054000"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x1d) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x100, 0x147c400, 0x2, 0x6}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSETLED(r5, 0x4b32, 0x7) ioctl$KDADDIO(r3, 0x4b34, 0x2) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) 14:34:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0x400000) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000080)) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0xe0d, 0xffffffff, 0x3ff, 0x101, 0x5, 0x6, 0x36, 0x10001, 0x0, 0x80, 0x3, 0x3, 0x7, 0x3}}) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:34:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async, rerun: 64) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="e6997638d804f56dd995dd51cdf5d6b026125ee9da902df4d562dc914c6549040e72ff2a14951d00f4c4f1d5ebef45dbfdff2690eaa73ea058f27002095ba195c29361fdace471b64ec54248ff4c86c57671e181415de69cdd4f9be78ff5c3079b5ca2fc6e1c358ab1f0db20657cfc24e1fcee8629ee5c7c366eb42efe5d98d791ec8bda5bd614af8c473d42089e792bdb16ba348e91e10fe853ca1db0e80f2a3919e3139b3a63d2d0e2c8053c006e9185244fcc6816ebdb414bdac5e0b0041d6d561194dbe4f7f99c79e6ad89baeadecd21820950e5232add341f8b43a486564c7e99ee915195142ab4784fda9c3305df40") r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0xffff, 0x1f, 0xfffa, 0x40, 0x0, "57526dad061f5161"}) 14:34:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="e6997638d804f56dd995dd51cdf5d6b026125ee9da902df4d562dc914c6549040e72ff2a14951d00f4c4f1d5ebef45dbfdff2690eaa73ea058f27002095ba195c29361fdace471b64ec54248ff4c86c57671e181415de69cdd4f9be78ff5c3079b5ca2fc6e1c358ab1f0db20657cfc24e1fcee8629ee5c7c366eb42efe5d98d791ec8bda5bd614af8c473d42089e792bdb16ba348e91e10fe853ca1db0e80f2a3919e3139b3a63d2d0e2c8053c006e9185244fcc6816ebdb414bdac5e0b0041d6d561194dbe4f7f99c79e6ad89baeadecd21820950e5232add341f8b43a486564c7e99ee915195142ab4784fda9c3305df40") r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0xffff, 0x1f, 0xfffa, 0x40, 0x0, "57526dad061f5161"}) 14:34:59 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000080)=""/4081) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000001080)={0x2, 0xcb3, 0x101, 0x3, 0x11, "ea4fb40fad39321279c4d73b49319d92d33118"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="e6997638d804f56dd995dd51cdf5d6b026125ee9da902df4d562dc914c6549040e72ff2a14951d00f4c4f1d5ebef45dbfdff2690eaa73ea058f27002095ba195c29361fdace471b64ec54248ff4c86c57671e181415de69cdd4f9be78ff5c3079b5ca2fc6e1c358ab1f0db20657cfc24e1fcee8629ee5c7c366eb42efe5d98d791ec8bda5bd614af8c473d42089e792bdb16ba348e91e10fe853ca1db0e80f2a3919e3139b3a63d2d0e2c8053c006e9185244fcc6816ebdb414bdac5e0b0041d6d561194dbe4f7f99c79e6ad89baeadecd21820950e5232add341f8b43a486564c7e99ee915195142ab4784fda9c3305df40") r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0xffff, 0x1f, 0xfffa, 0x40, 0x0, "57526dad061f5161"}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) (async) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) (async) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) (async) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="e6997638d804f56dd995dd51cdf5d6b026125ee9da902df4d562dc914c6549040e72ff2a14951d00f4c4f1d5ebef45dbfdff2690eaa73ea058f27002095ba195c29361fdace471b64ec54248ff4c86c57671e181415de69cdd4f9be78ff5c3079b5ca2fc6e1c358ab1f0db20657cfc24e1fcee8629ee5c7c366eb42efe5d98d791ec8bda5bd614af8c473d42089e792bdb16ba348e91e10fe853ca1db0e80f2a3919e3139b3a63d2d0e2c8053c006e9185244fcc6816ebdb414bdac5e0b0041d6d561194dbe4f7f99c79e6ad89baeadecd21820950e5232add341f8b43a486564c7e99ee915195142ab4784fda9c3305df40") (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0xffff, 0x1f, 0xfffa, 0x40, 0x0, "57526dad061f5161"}) (async) [ 1229.751662] sp0: Synchronizing with TNC 14:34:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x3d) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, "a9a55d13ae1082976c19807c1b8dea15cba403"}) 14:34:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:34:59 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:34:59 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:34:59 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x2, 0x81, 0x0, 0x3f, 0x8, "c2b028427839adea"}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/119}) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:00 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0xc, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:00 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:00 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x8001, 0x5, 0x9, 0x2, 0x3, "30250dfc235eb4f8e6f6cf9923bc43b29f4f58", 0x1, 0xc1c}) 14:35:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x2, 0x81, 0x0, 0x3f, 0x8, "c2b028427839adea"}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/119}) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:00 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETA(r2, 0x5406, &(0x7f00000000c0)={0x2, 0x81, 0x0, 0x3f, 0x8, "c2b028427839adea"}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/119}) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1230.628507] sp0: Synchronizing with TNC 14:35:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000400)) bind$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x1d, r0}, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSIG(r1, 0x40045436, 0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:35:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000400)) bind$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x1d, r0}, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSIG(r1, 0x40045436, 0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:35:00 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:00 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48280, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000400)) bind$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x1d, r0}, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCSIG(r1, 0x40045436, 0x15) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000000c0)) 14:35:01 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x8, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:35:01 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0x0, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:01 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:01 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:01 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:35:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 14:35:01 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:35:01 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 14:35:01 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) 14:35:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x7ffe, 0xd, "027845275384a0a9"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_pts(0xffffffffffffffff, 0x8000) r3 = syz_open_pts(0xffffffffffffffff, 0x400400) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) 14:35:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x0, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r1, 0x40000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x21a643, 0x0) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000001c0)=""/146) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0xff81, 0x8001, 0xd, "dd070400"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x7fff, 0x536, 0x3, 0x7, 0x1}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r3, 0x5425, 0x4) 14:35:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, 0x0) 14:35:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x7, 0x4, 0x436, 0xbb7, 0x4}}) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x7, 0x4, 0x436, 0xbb7, 0x4}}) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/145}) 14:35:02 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x7, 0x4, 0x436, 0xbb7, 0x4}}) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) 14:35:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x7, 0x4, 0x436, 0xbb7, 0x4}}) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:02 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:02 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1233.800168] sp0: Synchronizing with TNC 14:35:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x34802) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x101002) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000100)={0x5, 0x1000, 0x7, 0x9, 0xe000000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:03 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/59) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:03 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x0, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/59) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x34802) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x101002) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000100)={0x5, 0x1000, 0x7, 0x9, 0xe000000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x34802) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x101002) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000100)={0x5, 0x1000, 0x7, 0x9, 0xe000000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/59) (async) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x34802) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x101002) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000100)={0x5, 0x1000, 0x7, 0x9, 0xe000000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:03 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x101000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) 14:35:03 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x3d, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSBRKP(r1, 0x5425, 0x80) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:04 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_open_pts(r0, 0x101000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) 14:35:04 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:04 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0xf9d953b1754d1f8a) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000100)={0x0, 0x7f, 0x4}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x3, 0x5, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000080)) ioctl$KDADDIO(r2, 0x4b34, 0x4) 14:35:04 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1235.327706] sp0: Synchronizing with TNC 14:35:05 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x2, 0x40, 0x5d60, 0x19, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:05 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:05 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x8000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000140)={0x3f, 0x401, 0x4, 0x8, 0x80, "0028072a797e169ef5ae517623c4166eb07215", 0x100, 0xe4f}) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) ptrace(0x4207, 0xffffffffffffffff) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/4096}) syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x321660) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000100)={0x81, 0x9, 0x1, 0x1, 0xc, "42d06c7b33c9e92b"}) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:05 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:05 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:35:05 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x23e202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x18) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3, 0x7, 0x3e, 0x1, 0x10}}) 14:35:06 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b0c5f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:06 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:35:06 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x0) r1 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r1, 0x5425, 0x4) 14:35:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x23e202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x18) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3, 0x7, 0x3e, 0x1, 0x10}}) 14:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x5, 0x40, 0x10001, 0xfffffffd, 0xc, "8c3555a3a12849e4d0190ead85b05e1378a319"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:06 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1236.630727] sp0: Synchronizing with TNC 14:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x71, 0x5, 0x1, &(0x7f0000000040)) [ 1236.684812] sp0: Synchronizing with TNC 14:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x71, 0x5, 0x1, &(0x7f0000000040)) 14:35:06 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0xef2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) 14:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socketpair(0x71, 0x5, 0x1, &(0x7f0000000040)) 14:35:06 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1236.841822] sp0: Synchronizing with TNC 14:35:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x0, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="cb021721dbd690266ae527a9217f667ac125791f661d5b2c6de669e9fb95ffcd3d85003546a38b26ec05897c56fc66258f7cdaf5cc47024cc138a81d1038e0457e22c65cbd34de78989075054e977cf2f070459cce0e1652ae0d1a87b4eb2652a58cca092b8401a7b539deff8e2d473c2516233df47adb4ab6ee11d161dad84bb233c5b5889a75b00aca3f9f7582fc406b6c48") r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:07 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x4000) r3 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x7fffffff, 0x366, 0xfffff8a9}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000000c0)={0xfffa, 0x8, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x7fffffff, 0x366, 0xfffff8a9}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000000c0)={0xfffa, 0x8, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000000c0)={0x7fffffff, 0x366, 0xfffff8a9}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f00000000c0)={0xfffa, 0x8, 0x81}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r3) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x0, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1238.609269] sp0: Synchronizing with TNC 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x58, 0xc52d, 0x20, 0xd8b, 0x10, "cebc24e23030ec2c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:08 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xdef) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000140)) r5 = syz_open_pts(r1, 0x589b41) ioctl$VT_ACTIVATE(r5, 0x5606, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/59}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000440)={0x1000, 0x0, 0x5, "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"}) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f00000001c0)={0x10000, 0x1}) 14:35:08 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x58, 0xc52d, 0x20, 0xd8b, 0x10, "cebc24e23030ec2c"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:08 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x0, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x880) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d5d, 0x16, "33420d1de50000008800"}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x400000000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x8) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="c28e2afb72e2ba5731f8f97180febd7a41f904aec6b2936214425700f4134130300cb552fc324d19aec9164b91691412809f7e9c088aa37b762e4b94a7d7d67d916d74816fe9451c91d8c4b49b0012d5b19e714186e99e3707c92829c02c86f3c3803b44c8c36b7520afa4d3838306c401cc3b00e57fee951d4cd781f4a2123e776703b48a3e18dcd17dd59a61b086d263c60310f57ce374ea996fa1f1a8e7d95187f6", 0xa3}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:08 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:08 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1239.323109] sp0: Synchronizing with TNC 14:35:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xdef) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000140)) r5 = syz_open_pts(r1, 0x589b41) ioctl$VT_ACTIVATE(r5, 0x5606, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/59}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000440)={0x1000, 0x0, 0x5, "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"}) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r7, 0x0, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f00000001c0)={0x10000, 0x1}) 14:35:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1239.489290] sp0: Synchronizing with TNC 14:35:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000140)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_load_extent\x00', r3}, 0x10) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) 14:35:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1239.682069] sp0: Synchronizing with TNC 14:35:09 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/21) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) 14:35:09 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:09 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:09 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:09 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x80) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:09 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1240.248248] sp0: Synchronizing with TNC 14:35:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x0, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x80, 0x2, 0x17b, 0x401, 0x91, "83be38b89323cdb9c882cfc4ceb078b5e8cbcd", 0xfff, 0x8}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x80009, 0xadb, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0xfa, 0x80, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x80, 0x2, 0x17b, 0x401, 0x91, "83be38b89323cdb9c882cfc4ceb078b5e8cbcd", 0xfff, 0x8}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x80009, 0xadb, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0xfa, 0x80, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) [ 1240.454365] sp0: Synchronizing with TNC 14:35:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x80, 0x2, 0x17b, 0x401, 0x91, "83be38b89323cdb9c882cfc4ceb078b5e8cbcd", 0xfff, 0x8}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000180)={0x80009, 0xadb, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0xfa, 0x80, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:10 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:10 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000100)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0xfd, 0x81, 0x3}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000140)={0x8, 0x81, 0x9, 0xbc18, 0x0, "da970e794b6600be"}) 14:35:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:10 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, "a9a55d13ae1082976c19807c1b8dea15cba403"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) 14:35:10 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:10 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:10 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, "a9a55d13ae1082976c19807c1b8dea15cba403", 0x0, 0x9}) 14:35:11 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24040004) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x7, 0x1, 0x40, 0x5, 0xf, "eb45e3efbc640bc5"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) [ 1241.465259] sp0: Synchronizing with TNC 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) 14:35:11 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:11 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:11 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:11 executing program 5: getpid() r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e1cc02ee22435f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001440)={{r4, 0x7, 0x400, 0x3f, 0x4, 0x5, 0x6d, 0x0, 0x6, 0x7fff, 0x7, 0x0, 0x8000, 0x7, 0x2}}) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0xc96b, 0x3ff, 0x2}}) 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x7, 0x1f, 0x2}) 14:35:11 executing program 5: getpid() r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e1cc02ee22435f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001440)={{r4, 0x7, 0x400, 0x3f, 0x4, 0x5, 0x6d, 0x0, 0x6, 0x7fff, 0x7, 0x0, 0x8000, 0x7, 0x2}}) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0xc96b, 0x3ff, 0x2}}) 14:35:11 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0x0, 0x2b, 0xff07}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) ioctl$TCSBRKP(r2, 0x5425, 0x4) [ 1241.955696] sp0: Synchronizing with TNC 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r4, 0x0, 0x2, &(0x7f0000000140)='$\x00'}, 0x30) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:11 executing program 5: getpid() r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_pts(r0, 0x541080) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "e1cc02ee22435f"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001440)={{r4, 0x7, 0x400, 0x3f, 0x4, 0x5, 0x6d, 0x0, 0x6, 0x7fff, 0x7, 0x0, 0x8000, 0x7, 0x2}}) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x6, 0xc96b, 0x3ff, 0x2}}) 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r4, 0x0, 0x2, &(0x7f0000000140)='$\x00'}, 0x30) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:11 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:11 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000001c0)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r4, 0x0, 0x2, &(0x7f0000000140)='$\x00'}, 0x30) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:12 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:12 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000080)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a0b065f5bbf8556915d73c31d6c4ac3f6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSBRKP(r2, 0x5425, 0x4) 14:35:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r3, 0x0, 0x2, &(0x7f0000000140)='$\x00'}, 0x30) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSBRKP(r0, 0x5425, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1242.765532] sp0: Synchronizing with TNC 14:35:12 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 14:35:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:12 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1243.008389] FAULT_INJECTION: forcing a failure. [ 1243.008389] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.019803] CPU: 1 PID: 13332 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1243.026667] FAULT_INJECTION: forcing a failure. [ 1243.026667] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.027675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1243.027700] Call Trace: [ 1243.027714] dump_stack+0x1b2/0x281 [ 1243.027730] should_fail.cold+0x10a/0x149 [ 1243.058554] should_failslab+0xd6/0x130 [ 1243.062527] kmem_cache_alloc+0x40/0x3c0 [ 1243.066586] __sigqueue_alloc+0x1b8/0x3e0 [ 1243.070734] __send_signal+0x1a4/0x1260 [ 1243.074704] force_sig_info+0x263/0x410 [ 1243.078679] force_sig_info_fault.constprop.0+0x185/0x260 [ 1243.084218] ? is_prefetch.part.0+0x2f0/0x2f0 [ 1243.088712] ? is_prefetch.part.0+0x1ab/0x2f0 [ 1243.093210] ? pgtable_bad+0x110/0x110 [ 1243.097099] ? __mutex_unlock_slowpath+0x75/0x770 [ 1243.101936] ? __bad_area_nosemaphore+0x3f/0x2c0 14:35:12 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r1, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1243.106689] __bad_area_nosemaphore+0x1d6/0x2c0 [ 1243.111356] ? fput_many+0xe/0x140 [ 1243.114885] ? spurious_fault+0x3d6/0x640 [ 1243.119025] __do_page_fault+0x154/0xad0 [ 1243.123077] ? entry_SYSCALL_64_after_hwframe+0x56/0xbb [ 1243.128434] ? spurious_fault+0x640/0x640 [ 1243.132570] ? do_page_fault+0x60/0x500 [ 1243.136538] ? page_fault+0x2f/0x50 [ 1243.140157] page_fault+0x45/0x50 [ 1243.143600] RIP: bc583d40:0x7f99bc584300 [ 1243.147648] RSP: 03ff:ffffffffffffffff EFLAGS: 00000001 [ 1243.147668] CPU: 0 PID: 13323 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1243.160886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1243.170232] Call Trace: [ 1243.172814] dump_stack+0x1b2/0x281 [ 1243.176448] should_fail.cold+0x10a/0x149 [ 1243.180594] should_failslab+0xd6/0x130 [ 1243.184564] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1243.189230] gsmld_open+0x9e/0x7b0 [ 1243.192768] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1243.197005] tty_ldisc_open+0x6c/0xb0 [ 1243.200801] tty_set_ldisc+0x287/0x5d0 [ 1243.204683] tty_ioctl+0xa2a/0x1430 [ 1243.208306] ? tty_fasync+0x2c0/0x2c0 [ 1243.212103] ? proc_fail_nth_write+0x7b/0x180 [ 1243.216598] ? trace_hardirqs_on+0x10/0x10 [ 1243.220835] ? fsnotify+0x974/0x11b0 [ 1243.224542] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1243.229469] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1243.234479] ? SyS_write+0x1b7/0x210 [ 1243.238186] ? tty_fasync+0x2c0/0x2c0 [ 1243.241984] do_vfs_ioctl+0x75a/0xff0 [ 1243.245781] ? lock_acquire+0x170/0x3f0 [ 1243.249753] ? ioctl_preallocate+0x1a0/0x1a0 [ 1243.254158] ? __fget+0x265/0x3e0 14:35:12 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1243.257607] ? do_vfs_ioctl+0xff0/0xff0 [ 1243.261577] ? security_file_ioctl+0x83/0xb0 [ 1243.265982] SyS_ioctl+0x7f/0xb0 [ 1243.269344] ? do_vfs_ioctl+0xff0/0xff0 [ 1243.273314] do_syscall_64+0x1d5/0x640 [ 1243.277204] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1243.282629] RIP: 0033:0x7f0f3e1e9279 [ 1243.286332] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.294039] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1243.301303] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1243.308564] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.315826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.323091] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 14:35:13 executing program 4: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1243.483731] FAULT_INJECTION: forcing a failure. [ 1243.483731] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.494944] CPU: 0 PID: 13540 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1243.502823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1243.512170] Call Trace: [ 1243.514755] dump_stack+0x1b2/0x281 [ 1243.518385] should_fail.cold+0x10a/0x149 [ 1243.522533] should_failslab+0xd6/0x130 [ 1243.526505] kmem_cache_alloc+0x40/0x3c0 14:35:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1243.530567] __sigqueue_alloc+0x1b8/0x3e0 [ 1243.534715] __send_signal+0x1a4/0x1260 [ 1243.538689] force_sig_info+0x263/0x410 [ 1243.542668] force_sig_info_fault.constprop.0+0x185/0x260 [ 1243.548200] ? is_prefetch.part.0+0x2f0/0x2f0 [ 1243.552693] ? is_prefetch.part.0+0x1ab/0x2f0 [ 1243.557185] ? pgtable_bad+0x110/0x110 [ 1243.561071] ? __mutex_unlock_slowpath+0x75/0x770 [ 1243.565911] ? __bad_area_nosemaphore+0x3f/0x2c0 [ 1243.570664] __bad_area_nosemaphore+0x1d6/0x2c0 [ 1243.575330] ? fput_many+0xe/0x140 [ 1243.578865] ? spurious_fault+0x3d6/0x640 [ 1243.583020] __do_page_fault+0x154/0xad0 [ 1243.587084] ? entry_SYSCALL_64_after_hwframe+0x56/0xbb [ 1243.592442] ? spurious_fault+0x640/0x640 [ 1243.596583] ? do_page_fault+0x60/0x500 [ 1243.600554] ? page_fault+0x2f/0x50 [ 1243.604173] page_fault+0x45/0x50 [ 1243.607616] RIP: 1523dd40:0x7f0f1523e300 14:35:13 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:13 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 2) 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:13 executing program 4: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 2) 14:35:13 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:13 executing program 3: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x6, 0x100) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="6d3dd58d3963ef89a8bbc077013f764384fef9e6faa686088289e3a442a92432eaa799db123406dcd06d304decf4e1cd26d92dbb6f4ce708e1756f902607b6953cc1ad2791ee009e14502afc7c1915c5b87add3aa113f8b32e7b646566ab0be2607fe8261475aa572aa5b1ac32c58d98b7f1b6588c8b1e03cddad547b51dda4ccad36b4911efd8ba55211a3eb723d040302b47d02295193ff7bae951d3b2afb95aa92c1b74dddd68be83c55bffedf761a5f2419962ceb3cd2a2482cc82ef582d8e101c69a994aae5f55700142dd78102da0b3f1005", 0xd5}) 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1243.611666] RSP: 03ff:ffffffffffffffff EFLAGS: 00000001 [ 1243.853997] FAULT_INJECTION: forcing a failure. [ 1243.853997] name failslab, interval 1, probability 0, space 0, times 0 14:35:13 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', 0x0, 0x8}, 0xfffffd28) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x1, 0x78, &(0x7f0000000000)=""/120}) syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1243.901443] CPU: 0 PID: 13746 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1243.909339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1243.918688] Call Trace: [ 1243.921275] dump_stack+0x1b2/0x281 [ 1243.924902] should_fail.cold+0x10a/0x149 [ 1243.929053] should_failslab+0xd6/0x130 [ 1243.933030] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1243.937704] gsmld_open+0xe5/0x7b0 [ 1243.941243] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1243.945473] tty_ldisc_open+0x6c/0xb0 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) getpid() ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:13 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1243.949268] tty_set_ldisc+0x287/0x5d0 [ 1243.953157] tty_ioctl+0xa2a/0x1430 [ 1243.956782] ? tty_fasync+0x2c0/0x2c0 [ 1243.960577] ? proc_fail_nth_write+0x7b/0x180 [ 1243.965067] ? trace_hardirqs_on+0x10/0x10 [ 1243.969295] ? fsnotify+0x974/0x11b0 [ 1243.972999] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1243.977925] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1243.982937] ? SyS_write+0x1b7/0x210 [ 1243.986649] ? tty_fasync+0x2c0/0x2c0 [ 1243.990448] do_vfs_ioctl+0x75a/0xff0 [ 1243.994245] ? lock_acquire+0x170/0x3f0 [ 1243.998214] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.002620] ? __fget+0x265/0x3e0 [ 1244.006069] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.010039] ? security_file_ioctl+0x83/0xb0 [ 1244.014447] SyS_ioctl+0x7f/0xb0 [ 1244.017809] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.021797] do_syscall_64+0x1d5/0x640 [ 1244.025688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.030868] RIP: 0033:0x7f0f3e1e9279 [ 1244.034567] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.042270] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1244.049531] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1244.056800] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.064064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.071323] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 14:35:13 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:14 executing program 3: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x6, 0x100) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="6d3dd58d3963ef89a8bbc077013f764384fef9e6faa686088289e3a442a92432eaa799db123406dcd06d304decf4e1cd26d92dbb6f4ce708e1756f902607b6953cc1ad2791ee009e14502afc7c1915c5b87add3aa113f8b32e7b646566ab0be2607fe8261475aa572aa5b1ac32c58d98b7f1b6588c8b1e03cddad547b51dda4ccad36b4911efd8ba55211a3eb723d040302b47d02295193ff7bae951d3b2afb95aa92c1b74dddd68be83c55bffedf761a5f2419962ceb3cd2a2482cc82ef582d8e101c69a994aae5f55700142dd78102da0b3f1005", 0xd5}) (rerun: 32) 14:35:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', 0x0, 0x8}, 0xfffffd28) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x1, 0x78, &(0x7f0000000000)=""/120}) syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', 0x0, 0x8}, 0xfffffd28) (async) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x1, 0x78, &(0x7f0000000000)=""/120}) (async) syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (async) 14:35:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 3) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1244.523789] FAULT_INJECTION: forcing a failure. [ 1244.523789] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.548971] CPU: 1 PID: 14065 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1244.556863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1244.566207] Call Trace: [ 1244.568792] dump_stack+0x1b2/0x281 [ 1244.572427] should_fail.cold+0x10a/0x149 [ 1244.576576] should_failslab+0xd6/0x130 [ 1244.580550] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1244.585219] gsmld_open+0x151/0x7b0 [ 1244.588846] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1244.593081] tty_ldisc_open+0x6c/0xb0 [ 1244.596885] tty_set_ldisc+0x287/0x5d0 [ 1244.600774] tty_ioctl+0xa2a/0x1430 [ 1244.604395] ? tty_fasync+0x2c0/0x2c0 [ 1244.608200] ? proc_fail_nth_write+0x7b/0x180 [ 1244.612693] ? trace_hardirqs_on+0x10/0x10 [ 1244.616939] ? fsnotify+0x974/0x11b0 [ 1244.620652] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1244.625576] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1244.630589] ? SyS_write+0x1b7/0x210 [ 1244.634303] ? tty_fasync+0x2c0/0x2c0 [ 1244.638100] do_vfs_ioctl+0x75a/0xff0 [ 1244.641901] ? lock_acquire+0x170/0x3f0 [ 1244.645873] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.650280] ? __fget+0x265/0x3e0 [ 1244.653730] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.657704] ? security_file_ioctl+0x83/0xb0 [ 1244.662110] SyS_ioctl+0x7f/0xb0 [ 1244.665474] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.669446] do_syscall_64+0x1d5/0x640 [ 1244.673333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.678514] RIP: 0033:0x7f0f3e1e9279 [ 1244.682221] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.689927] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1244.697190] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1244.704454] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.711716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:35:14 executing program 3: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x6, 0x100) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="6d3dd58d3963ef89a8bbc077013f764384fef9e6faa686088289e3a442a92432eaa799db123406dcd06d304decf4e1cd26d92dbb6f4ce708e1756f902607b6953cc1ad2791ee009e14502afc7c1915c5b87add3aa113f8b32e7b646566ab0be2607fe8261475aa572aa5b1ac32c58d98b7f1b6588c8b1e03cddad547b51dda4ccad36b4911efd8ba55211a3eb723d040302b47d02295193ff7bae951d3b2afb95aa92c1b74dddd68be83c55bffedf761a5f2419962ceb3cd2a2482cc82ef582d8e101c69a994aae5f55700142dd78102da0b3f1005", 0xd5}) 14:35:14 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', 0x0, 0x8}, 0xfffffd28) (async) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x1, 0x78, &(0x7f0000000000)=""/120}) syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) 14:35:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 4) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1244.718979] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 14:35:14 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) 14:35:14 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="97caf798b15d427afe00472fefcac9fb40aca6f6bdf29d448fea2b1bd8b3dd847b508ff26b0edb374ac276f0249e281f609d15c75d7c7086472705342f8e08946383e3eb596dc1c5b091445fff39ac4d7090cd1d30", 0x55, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={r2, 0xf, &(0x7f0000000100)=""/15}) 14:35:14 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) [ 1244.852933] FAULT_INJECTION: forcing a failure. [ 1244.852933] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.919740] CPU: 0 PID: 14156 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1244.927634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1244.936980] Call Trace: [ 1244.939564] dump_stack+0x1b2/0x281 [ 1244.943188] should_fail.cold+0x10a/0x149 [ 1244.947334] ? gsm_activate_mux+0x224/0x2e0 [ 1244.951656] should_failslab+0xd6/0x130 [ 1244.955631] kmem_cache_alloc_trace+0x47/0x3d0 [ 1244.960209] gsm_dlci_alloc+0x46/0x460 [ 1244.964093] gsm_activate_mux+0x22e/0x2e0 [ 1244.968240] gsmld_open+0x4ed/0x7b0 [ 1244.971861] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1244.976102] tty_ldisc_open+0x6c/0xb0 [ 1244.979900] tty_set_ldisc+0x287/0x5d0 [ 1244.983786] tty_ioctl+0xa2a/0x1430 [ 1244.987408] ? tty_fasync+0x2c0/0x2c0 [ 1244.991202] ? proc_fail_nth_write+0x7b/0x180 [ 1244.995694] ? trace_hardirqs_on+0x10/0x10 [ 1244.999932] ? fsnotify+0x974/0x11b0 [ 1245.003638] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1245.008560] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1245.013571] ? SyS_write+0x1b7/0x210 [ 1245.017287] ? tty_fasync+0x2c0/0x2c0 [ 1245.021079] do_vfs_ioctl+0x75a/0xff0 [ 1245.024873] ? lock_acquire+0x170/0x3f0 [ 1245.028857] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.033264] ? __fget+0x265/0x3e0 [ 1245.036715] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.040683] ? security_file_ioctl+0x83/0xb0 [ 1245.045088] SyS_ioctl+0x7f/0xb0 [ 1245.048448] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.052416] do_syscall_64+0x1d5/0x640 [ 1245.056301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.061478] RIP: 0033:0x7f0f3e1e9279 [ 1245.065180] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.072924] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1245.080196] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1245.087459] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.094724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.101985] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 14:35:14 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:14 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) 14:35:14 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="97caf798b15d427afe00472fefcac9fb40aca6f6bdf29d448fea2b1bd8b3dd847b508ff26b0edb374ac276f0249e281f609d15c75d7c7086472705342f8e08946383e3eb596dc1c5b091445fff39ac4d7090cd1d30", 0x55, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={r2, 0xf, &(0x7f0000000100)=""/15}) 14:35:14 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 5) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:14 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:14 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) 14:35:14 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$FOU_CMD_GET(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) 14:35:14 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="97caf798b15d427afe00472fefcac9fb40aca6f6bdf29d448fea2b1bd8b3dd847b508ff26b0edb374ac276f0249e281f609d15c75d7c7086472705342f8e08946383e3eb596dc1c5b091445fff39ac4d7090cd1d30", 0x55, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000140)={r2, 0xf, &(0x7f0000000100)=""/15}) [ 1245.280685] FAULT_INJECTION: forcing a failure. [ 1245.280685] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.289097] FAULT_INJECTION: forcing a failure. [ 1245.289097] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.332198] CPU: 1 PID: 14424 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1245.340096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1245.349444] Call Trace: [ 1245.352028] dump_stack+0x1b2/0x281 [ 1245.355654] should_fail.cold+0x10a/0x149 [ 1245.359804] should_failslab+0xd6/0x130 [ 1245.363782] __kmalloc+0x2c1/0x400 [ 1245.367320] ? __kfifo_alloc+0xdc/0x240 [ 1245.371295] __kfifo_alloc+0xdc/0x240 [ 1245.375089] gsm_dlci_alloc+0xd4/0x460 [ 1245.378974] gsm_activate_mux+0x22e/0x2e0 [ 1245.383118] gsmld_open+0x4ed/0x7b0 [ 1245.386739] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1245.390970] tty_ldisc_open+0x6c/0xb0 [ 1245.394763] tty_set_ldisc+0x287/0x5d0 [ 1245.398645] tty_ioctl+0xa2a/0x1430 [ 1245.402263] ? tty_fasync+0x2c0/0x2c0 [ 1245.406054] ? proc_fail_nth_write+0x7b/0x180 [ 1245.410545] ? trace_hardirqs_on+0x10/0x10 [ 1245.414779] ? fsnotify+0x974/0x11b0 [ 1245.418485] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1245.423410] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1245.428419] ? SyS_write+0x1b7/0x210 [ 1245.432133] ? tty_fasync+0x2c0/0x2c0 [ 1245.435930] do_vfs_ioctl+0x75a/0xff0 [ 1245.439723] ? lock_acquire+0x170/0x3f0 [ 1245.443690] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.448096] ? __fget+0x265/0x3e0 [ 1245.451551] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.455538] ? security_file_ioctl+0x83/0xb0 [ 1245.459940] SyS_ioctl+0x7f/0xb0 [ 1245.463296] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.467271] do_syscall_64+0x1d5/0x640 [ 1245.471159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.476339] RIP: 0033:0x7f0f3e1e9279 14:35:15 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) [ 1245.480037] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.487737] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1245.494993] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1245.502254] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.509519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.516781] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 [ 1245.541799] CPU: 0 PID: 14414 Comm: syz-executor.5 Not tainted 4.14.290-syzkaller #0 [ 1245.549702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1245.559044] Call Trace: [ 1245.561628] dump_stack+0x1b2/0x281 [ 1245.565253] should_fail.cold+0x10a/0x149 [ 1245.569402] should_failslab+0xd6/0x130 [ 1245.573373] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1245.578041] gsmld_open+0x9e/0x7b0 [ 1245.581577] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1245.585820] tty_ldisc_open+0x6c/0xb0 [ 1245.589616] tty_set_ldisc+0x287/0x5d0 [ 1245.593504] tty_ioctl+0xa2a/0x1430 [ 1245.597127] ? tty_fasync+0x2c0/0x2c0 [ 1245.600923] ? proc_fail_nth_write+0x7b/0x180 [ 1245.605411] ? trace_hardirqs_on+0x10/0x10 [ 1245.609643] ? fsnotify+0x974/0x11b0 [ 1245.613347] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1245.618273] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1245.623282] ? SyS_write+0x1b7/0x210 [ 1245.626992] ? tty_fasync+0x2c0/0x2c0 [ 1245.630787] do_vfs_ioctl+0x75a/0xff0 [ 1245.634584] ? lock_acquire+0x170/0x3f0 [ 1245.638556] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.642961] ? __fget+0x265/0x3e0 [ 1245.646411] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.650379] ? security_file_ioctl+0x83/0xb0 [ 1245.654785] SyS_ioctl+0x7f/0xb0 [ 1245.658147] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.662117] do_syscall_64+0x1d5/0x640 [ 1245.666008] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.671187] RIP: 0033:0x7f9446696279 [ 1245.674889] RSP: 002b:00007f944500b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.682592] RAX: ffffffffffffffda RBX: 00007f94467a8f80 RCX: 00007f9446696279 14:35:15 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 6) ioctl$TIOCGPTPEER(r1, 0x5441, 0x200) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:15 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) [ 1245.689855] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1245.697119] RBP: 00007f944500b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.704383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.711648] R13: 00007ffe9030a74f R14: 00007f944500b300 R15: 0000000000022000 [ 1245.770697] FAULT_INJECTION: forcing a failure. [ 1245.770697] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.782358] CPU: 1 PID: 14578 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1245.790241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1245.799587] Call Trace: [ 1245.802171] dump_stack+0x1b2/0x281 [ 1245.805798] should_fail.cold+0x10a/0x149 [ 1245.809944] should_failslab+0xd6/0x130 [ 1245.813919] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1245.818587] tty_register_device_attr+0x1d2/0x710 [ 1245.823337] FAULT_INJECTION: forcing a failure. [ 1245.823337] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.823423] ? redirected_tty_write+0xb0/0xb0 [ 1245.839076] ? __raw_spin_lock_init+0x28/0x100 [ 1245.843654] ? tty_port_init+0xa2/0x190 [ 1245.847625] ? gsm_dlci_alloc+0x390/0x460 [ 1245.851769] gsmld_open+0x548/0x7b0 [ 1245.855391] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1245.859625] tty_ldisc_open+0x6c/0xb0 [ 1245.863419] tty_set_ldisc+0x287/0x5d0 [ 1245.867307] tty_ioctl+0xa2a/0x1430 [ 1245.870930] ? tty_fasync+0x2c0/0x2c0 [ 1245.874715] ? proc_fail_nth_write+0x7b/0x180 [ 1245.879195] ? trace_hardirqs_on+0x10/0x10 [ 1245.883416] ? fsnotify+0x974/0x11b0 [ 1245.887122] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1245.892039] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1245.897041] ? SyS_write+0x1b7/0x210 [ 1245.900751] ? tty_fasync+0x2c0/0x2c0 [ 1245.904544] do_vfs_ioctl+0x75a/0xff0 [ 1245.908334] ? lock_acquire+0x170/0x3f0 [ 1245.912298] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.916703] ? __fget+0x265/0x3e0 [ 1245.920151] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.924120] ? security_file_ioctl+0x83/0xb0 [ 1245.928520] SyS_ioctl+0x7f/0xb0 [ 1245.931872] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.935844] do_syscall_64+0x1d5/0x640 [ 1245.939726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.944917] RIP: 0033:0x7f0f3e1e9279 [ 1245.948619] RSP: 002b:00007f0f3cb5e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.956321] RAX: ffffffffffffffda RBX: 00007f0f3e2fbf80 RCX: 00007f0f3e1e9279 [ 1245.963582] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 14:35:15 executing program 5: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(r0, 0x541080) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x5d60, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xffff, 0x400, 0x9, 0x8001, 0xd, "dd6e3c1e885327e7"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (fail_nth: 2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:15 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x44, 0x220441) 14:35:15 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) 14:35:15 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_pts(r0, 0x4000) syz_open_pts(0xffffffffffffffff, 0x541080) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x7, 0x0, 0x65, 0x4, 0x12, "0a1e575117770abd"}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000000c0)={0x9, 0x1, 0x40, 0x0, 0x1a, "3300a09965f5bbf9556915d73c31127c6f3e6f"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=0xffffffffffffffff) 14:35:15 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x200) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) [ 1245.970847] RBP: 00007f0f3cb5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.978109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.985371] R13: 00007ffe55460f4f R14: 00007f0f3cb5e300 R15: 0000000000022000 [ 1246.007592] CPU: 0 PID: 14588 Comm: syz-executor.5 Not tainted 4.14.290-syzkaller #0 [ 1246.015499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1246.024844] Call Trace: [ 1246.027425] dump_stack+0x1b2/0x281 [ 1246.031050] should_fail.cold+0x10a/0x149 [ 1246.035203] should_failslab+0xd6/0x130 [ 1246.039184] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1246.043850] gsmld_open+0xe5/0x7b0 [ 1246.047385] ? gsm_cleanup_mux+0x3f0/0x3f0 [ 1246.051614] tty_ldisc_open+0x6c/0xb0 [ 1246.055415] tty_set_ldisc+0x287/0x5d0 [ 1246.059303] tty_ioctl+0xa2a/0x1430 [ 1246.062926] ? tty_fasync+0x2c0/0x2c0 [ 1246.066724] ? proc_fail_nth_write+0x7b/0x180 [ 1246.071214] ? trace_hardirqs_on+0x10/0x10 [ 1246.075447] ? fsnotify+0x974/0x11b0 [ 1246.079172] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 1246.084094] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1246.089106] ? SyS_write+0x1b7/0x210 [ 1246.092818] ? tty_fasync+0x2c0/0x2c0 [ 1246.096616] do_vfs_ioctl+0x75a/0xff0 [ 1246.100417] ? lock_acquire+0x170/0x3f0 [ 1246.104385] ? ioctl_preallocate+0x1a0/0x1a0 [ 1246.108799] ? __fget+0x265/0x3e0 [ 1246.112247] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.116216] ? security_file_ioctl+0x83/0xb0 [ 1246.120621] SyS_ioctl+0x7f/0xb0 [ 1246.123982] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.127950] do_syscall_64+0x1d5/0x640 [ 1246.131840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1246.137021] RIP: 0033:0x7f9446696279 [ 1246.140722] RSP: 002b:00007f944500b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1246.148426] RAX: ffffffffffffffda RBX: 00007f94467a8f80 RCX: 00007f9446696279 [ 1246.155686] RDX: 0000000020000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1246.162949] RBP: 00007f944500b1d0 R08: 0000000000000000 R09: 0000000000000000 14:35:15 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x44, 0x220441) 14:35:15 executing program 4: r0 = syz_open_dev$dri(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x8000000000000001, 0x200) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 14:35:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) [ 1246.170213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.177475] R13: 00007ffe9030a74f R14: 00007f944500b300 R15: 0000000000022000 14:35:15 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 14:35:15 executing program 3: syz_open_dev$dri(0xffffffffffffffff, 0x44, 0x220441) syz_open_dev$dri(0xffffffffffffffff, 0x44, 0x220441) (async) [ 1246.534361] kasan: CONFIG_KASAN_INLINE enabled [ 1246.542319] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1246.555088] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1246.561316] Modules linked in: [ 1246.564503] CPU: 1 PID: 14575 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1246.572369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1246.581715] task: ffff88807cb38300 task.stack: ffff888074380000 [ 1246.587768] RIP: 0010:cdev_del+0x22/0x90 [ 1246.591812] RSP: 0018:ffff888074387ca0 EFLAGS: 00010207 [ 1246.597165] RAX: dffffc0000000000 RBX: ffff8880b0873a00 RCX: 0000000000000000 [ 1246.604419] RDX: 000000000000000c RSI: ffff88807cb38bb0 RDI: 0000000000000064 [ 1246.611678] RBP: 0000000000000000 R08: ffffffff8b9b3790 R09: 0000000000000000 [ 1246.618932] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b0873a08 [ 1246.626188] R13: ffff8880af057748 R14: ffff8880b610c6c0 R15: ffff8880b2f769d8 [ 1246.633456] FS: 000055555648f400(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 1246.641666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1246.647533] CR2: 0000001b2ea22000 CR3: 0000000098139000 CR4: 00000000003406e0 [ 1246.654797] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1246.662059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1246.669327] Call Trace: [ 1246.671907] tty_unregister_device+0x101/0x1a0 [ 1246.676484] gsmld_close+0xaa/0x1f0 [ 1246.680103] ? gsmtty_cleanup+0x150/0x150 [ 1246.684241] tty_ldisc_close+0x8c/0xc0 [ 1246.688122] tty_ldisc_release+0xe8/0x400 [ 1246.692262] tty_release_struct+0x20/0xe0 [ 1246.696397] tty_release+0xb3f/0x10d0 [ 1246.700195] ? do_tty_hangup+0x30/0x30 [ 1246.704072] __fput+0x25f/0x7a0 [ 1246.707349] task_work_run+0x11f/0x190 [ 1246.711228] exit_to_usermode_loop+0x1ad/0x200 [ 1246.715800] do_syscall_64+0x4a3/0x640 [ 1246.719679] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1246.724854] RIP: 0033:0x7f0f3e19bebb [ 1246.728559] RSP: 002b:00007ffe55460fb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1246.736252] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0f3e19bebb [ 1246.743510] RDX: 0000000000000000 RSI: 0000001b2ea21a60 RDI: 0000000000000003 [ 1246.750768] RBP: 00007f0f3e2fd980 R08: 0000000000000000 R09: 0000000004c6a598 [ 1246.758028] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000013060e [ 1246.765283] R13: 00007ffe554610b0 R14: 00007f0f3e2fc120 R15: 0000000000000032 [ 1246.772546] Code: 05 3e f7 ff eb d2 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 e3 87 cd ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f [ 1246.791689] RIP: cdev_del+0x22/0x90 RSP: ffff888074387ca0 [ 1246.824214] ---[ end trace 4a6b5ecd61b2bbd0 ]--- [ 1246.831002] Kernel panic - not syncing: Fatal exception [ 1246.836543] Kernel Offset: disabled [ 1246.840171] Rebooting in 86400 seconds..